Oval Definition:	oval:org.opensuse.security:def:7204
Revision Date: 2021-02-10 Version: 1 Title: Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP2) (Important) Description: This update for the Linux Kernel 5.3.18-24_9 fixes several issues. The following security issues were fixed: - CVE-2020-29373: Fixed an issue where kernel unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations (bsc#1179779). - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562). - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030). - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. - CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008). - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877). - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877). - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664). Family: unix Class: patch Status: Reference(s): 1179664 1179779 1179877 1180008 1180030 1180032 1180562 CVE-2004-0801 CVE-2008-1420 CVE-2008-3825 CVE-2009-1384 CVE-2009-1885 CVE-2009-3379 CVE-2010-2947 CVE-2010-4267 CVE-2011-2483 CVE-2011-2697 CVE-2011-2722 CVE-2012-0444 CVE-2012-2141 CVE-2012-4504 CVE-2013-4325 CVE-2013-6370 CVE-2013-6371 CVE-2013-6402 CVE-2013-6427 CVE-2013-6435 CVE-2014-2284 CVE-2014-2285 CVE-2014-2497 CVE-2014-2892 CVE-2014-3230 CVE-2014-3565 CVE-2014-3618 CVE-2014-8118 CVE-2014-8767 CVE-2014-8768 CVE-2014-8769 CVE-2014-9140 CVE-2014-9709 CVE-2015-0252 CVE-2015-0261 CVE-2015-2153 CVE-2015-2154 CVE-2015-2155 CVE-2015-3138 CVE-2016-7922 CVE-2016-7923 CVE-2016-7924 CVE-2016-7925 CVE-2016-7926 CVE-2016-7927 CVE-2016-7928 CVE-2016-7929 CVE-2016-7930 CVE-2016-7931 CVE-2016-7932 CVE-2016-7933 CVE-2016-7934 CVE-2016-7935 CVE-2016-7936 CVE-2016-7937 CVE-2016-7938 CVE-2016-7939 CVE-2016-7940 CVE-2016-7973 CVE-2016-7974 CVE-2016-7975 CVE-2016-7983 CVE-2016-7984 CVE-2016-7985 CVE-2016-7986 CVE-2016-7992 CVE-2016-7993 CVE-2016-8574 CVE-2016-8575 CVE-2017-11108 CVE-2017-11541 CVE-2017-11542 CVE-2017-11543 CVE-2017-12893 CVE-2017-12894 CVE-2017-12895 CVE-2017-12896 CVE-2017-12897 CVE-2017-12898 CVE-2017-12899 CVE-2017-12900 CVE-2017-12901 CVE-2017-12902 CVE-2017-12985 CVE-2017-12986 CVE-2017-12987 CVE-2017-12988 CVE-2017-12989 CVE-2017-12990 CVE-2017-12991 CVE-2017-12992 CVE-2017-12993 CVE-2017-12994 CVE-2017-12995 CVE-2017-12996 CVE-2017-12997 CVE-2017-12998 CVE-2017-12999 CVE-2017-13000 CVE-2017-13001 CVE-2017-13002 CVE-2017-13003 CVE-2017-13004 CVE-2017-13005 CVE-2017-13006 CVE-2017-13007 CVE-2017-13008 CVE-2017-13009 CVE-2017-13010 CVE-2017-13011 CVE-2017-13012 CVE-2017-13013 CVE-2017-13014 CVE-2017-13015 CVE-2017-13016 CVE-2017-13017 CVE-2017-13018 CVE-2017-13019 CVE-2017-13020 CVE-2017-13021 CVE-2017-13022 CVE-2017-13023 CVE-2017-13024 CVE-2017-13025 CVE-2017-13026 CVE-2017-13027 CVE-2017-13028 CVE-2017-13029 CVE-2017-13030 CVE-2017-13031 CVE-2017-13032 CVE-2017-13033 CVE-2017-13034 CVE-2017-13035 CVE-2017-13036 CVE-2017-13037 CVE-2017-13038 CVE-2017-13039 CVE-2017-13040 CVE-2017-13041 CVE-2017-13042 CVE-2017-13043 CVE-2017-13044 CVE-2017-13045 CVE-2017-13046 CVE-2017-13047 CVE-2017-13048 CVE-2017-13049 CVE-2017-13050 CVE-2017-13051 CVE-2017-13052 CVE-2017-13053 CVE-2017-13054 CVE-2017-13055 CVE-2017-13687 CVE-2017-13688 CVE-2017-13689 CVE-2017-13690 CVE-2017-13725 CVE-2017-5202 CVE-2017-5203 CVE-2017-5204 CVE-2017-5205 CVE-2017-5341 CVE-2017-5342 CVE-2017-5482 CVE-2017-5483 CVE-2017-5484 CVE-2017-5485 CVE-2017-5486 CVE-2017-7500 CVE-2017-7501 CVE-2020-0465 CVE-2020-0466 CVE-2020-29368 CVE-2020-29373 CVE-2020-29569 CVE-2020-29660 CVE-2020-29661 CVE-2020-36158 Platform(s): openSUSE 13.2 openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP1 SUSE Linux Enterprise Real Time Extension 11 SP4 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-CLIENT-TOOLS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.39-47 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.21-90 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libreoffice-5.3.5.2-43.5 is installed OR libreoffice-sdk-5.3.5.2-43.5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information libreoffice-6.0.5.2-43.38 is installed OR libreoffice-sdk-6.0.5.2-43.38 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information MozillaFirefox-17.0.6esr-0.4.1 is installed OR MozillaFirefox-translations-17.0.6esr-0.4.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND libaugeas0-0.9.0-3.15.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information bind-9.9.6P1-0.22.1 is installed OR bind-libs-9.9.6P1-0.22.1 is installed OR bind-libs-32bit-9.9.6P1-0.22.1 is installed OR bind-utils-9.9.6P1-0.22.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information dbus-1-1.8.12-6 is installed OR dbus-1-x11-1.8.12-6 is installed OR libdbus-1-3-1.8.12-6 is installed OR libdbus-1-3-32bit-1.8.12-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information qemu-2.6.2-41.9 is installed OR qemu-block-curl-2.6.2-41.9 is installed OR qemu-ipxe-1.0.0-41.9 is installed OR qemu-kvm-2.6.2-41.9 is installed OR qemu-seabios-1.9.1-41.9 is installed OR qemu-sgabios-8-41.9 is installed OR qemu-tools-2.6.2-41.9 is installed OR qemu-vgabios-1.9.1-41.9 is installed OR qemu-x86-2.6.2-41.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libncurses5-5.9-50 is installed OR libncurses5-32bit-5.9-50 is installed OR libncurses6-5.9-50 is installed OR libncurses6-32bit-5.9-50 is installed OR ncurses-5.9-50 is installed OR ncurses-devel-5.9-50 is installed OR ncurses-utils-5.9-50 is installed OR tack-5.9-50 is installed OR terminfo-5.9-50 is installed OR terminfo-base-5.9-50 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information rpm-4.11.2-16.16 is installed OR rpm-32bit-4.11.2-16.16 is installed OR rpm-build-4.11.2-16.16 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND python-requests-2.8.1-6.9 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND Package Information ctdb-4.2.4-26 is installed OR samba-4.2.4-26 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND kernel-livepatch-5_3_18-24_9-default-6-2.1 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information bind-9.9.6P1-0.33.1 is installed OR bind-chrootenv-9.9.6P1-0.33.1 is installed OR bind-doc-9.9.6P1-0.33.1 is installed OR bind-libs-9.9.6P1-0.33.1 is installed OR bind-utils-9.9.6P1-0.33.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP1 is installed AND Package Information brocade-bna-kmp-rt-2.1.0.0_2.6.33.20_rt31_0.5-0.2.52 is installed OR cluster-network-kmp-rt-1.4_2.6.33.20_rt31_0.5-2.5.62 is installed OR cluster-network-kmp-rt_trace-1.4_2.6.33.20_rt31_0.5-2.5.62 is installed OR drbd-kmp-rt-8.3.11_2.6.33.20_rt31_0.5-0.3.62 is installed OR drbd-kmp-rt_trace-8.3.11_2.6.33.20_rt31_0.5-0.3.62 is installed OR iscsitarget-kmp-rt-1.4.19_2.6.33.20_rt31_0.5-0.9.11.38 is installed OR kernel-rt-2.6.33.20-0.5.1 is installed OR kernel-rt-base-2.6.33.20-0.5.1 is installed OR kernel-rt-devel-2.6.33.20-0.5.1 is installed OR kernel-rt_trace-2.6.33.20-0.5.1 is installed OR kernel-rt_trace-base-2.6.33.20-0.5.1 is installed OR kernel-rt_trace-devel-2.6.33.20-0.5.1 is installed OR kernel-source-rt-2.6.33.20-0.5.1 is installed OR kernel-syms-rt-2.6.33.20-0.5.1 is installed OR ocfs2-kmp-rt-1.6_2.6.33.20_rt31_0.5-0.4.2.62 is installed OR ocfs2-kmp-rt_trace-1.6_2.6.33.20_rt31_0.5-0.4.2.62 is installed OR ofed-kmp-rt-1.5.2_2.6.33.20_rt31_0.5-0.9.13.49 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP4 is installed AND Package Information kernel-rt-3.0.101.rt130-65.1 is installed OR kernel-rt-base-3.0.101.rt130-65.1 is installed OR kernel-rt-devel-3.0.101.rt130-65.1 is installed OR kernel-rt_trace-3.0.101.rt130-65.1 is installed OR kernel-rt_trace-base-3.0.101.rt130-65.1 is installed OR kernel-rt_trace-devel-3.0.101.rt130-65.1 is installed OR kernel-source-rt-3.0.101.rt130-65.1 is installed OR kernel-syms-rt-3.0.101.rt130-65.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information acl-2.2.47-30.5.1 is installed OR libacl-2.2.47-30.5.1 is installed OR libacl-32bit-2.2.47-30.5.1 is installed OR libacl-x86-2.2.47-30.5.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-CLIENT-TOOLS is installed AND koan-2.0.10-0.38.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND vino-2.28.1-2.5.1 is installed OR vino-lang-2.28.1-2.5.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND vino-2.28.1-2.5.1 is installed OR vino-lang-2.28.1-2.5.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND apache2-mod_nss-1.0.8-0.4.7.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND apache2-mod_nss-1.0.8-0.4.7.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information MozillaFirefox-38.8.0esr-40.5 is installed OR MozillaFirefox-translations-38.8.0esr-40.5 is installed OR libfreebl3-3.20.2-30.1 is installed OR libfreebl3-32bit-3.20.2-30.1 is installed OR libsoftokn3-3.20.2-30.1 is installed OR libsoftokn3-32bit-3.20.2-30.1 is installed OR mozilla-nspr-4.12-26.1 is installed OR mozilla-nspr-32bit-4.12-26.1 is installed OR mozilla-nss-3.20.2-30.1 is installed OR mozilla-nss-32bit-3.20.2-30.1 is installed OR mozilla-nss-tools-3.20.2-30.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information gpg2-2.0.9-25.33.39.1 is installed OR gpg2-lang-2.0.9-25.33.39.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information openssh-openssl1-6.6p1-10.1 is installed OR openssh-openssl1-helpers-6.6p1-10.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND libmms0-0.6.2-15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND gd-2.1.0-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_45-default-3-2.1 is installed OR kgraft-patch-3_12_74-60_64_45-xen-3-2.1 is installed OR kgraft-patch-SLE12-SP1_Update_16-3-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information apache-commons-daemon-1.0.15-4 is installed OR apache-commons-daemon-javadoc-1.0.15-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND apache2-mod_nss-1.0.14-18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information at-3.1.14-8.6 is installed OR flex-2.5.37-8 is installed OR flex-32bit-2.5.37-8 is installed OR libQtWebKit4-4.8.7+2.3.4-4.7 is installed OR libQtWebKit4-32bit-4.8.7+2.3.4-4.7 is installed OR libbonobo-2.32.1-16 is installed OR libbonobo-32bit-2.32.1-16 is installed OR libbonobo-doc-2.32.1-16 is installed OR libbonobo-lang-2.32.1-16 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information apache-commons-beanutils-1.9.2-3.3 is installed OR apache-commons-beanutils-javadoc-1.9.2-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_51-52_39-default-4-2.2 is installed OR kgraft-patch-3_12_51-52_39-xen-4-2.2 is installed OR kgraft-patch-SLE12_Update_11-4-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information MozillaFirefox-45.4.0esr-81 is installed OR MozillaFirefox-translations-45.4.0esr-81 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_48-52_27-default-5-2 is installed OR kgraft-patch-3_12_48-52_27-xen-5-2 is installed OR kgraft-patch-SLE12_Update_8-5-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information compat-openssl098-0.9.8j-102 is installed OR libopenssl0_9_8-0.9.8j-102 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information kgraft-patch-4_4_90-92_50-default-7-2 is installed OR kgraft-patch-SLE12-SP2_Update_15-7-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND libcurl-devel-7.19.7-1.20.31.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND MozillaFirefox-devel-17.0.9esr-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information wireshark-1.10.13-0.2.1 is installed OR wireshark-devel-1.10.13-0.2.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information finch-devel-2.10.9-8 is installed OR libpurple-2.10.9-8 is installed OR libpurple-devel-2.10.9-8 is installed OR libpurple-lang-2.10.9-8 is installed OR pidgin-2.10.9-8 is installed OR pidgin-devel-2.10.9-8 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information kernel-docs-4.4.59-92.17 is installed OR kernel-obs-build-4.4.59-92.17 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libical-1.0.1-16.3 is installed OR libical-devel-1.0.1-16.3 is installed OR libical-devel-static-1.0.1-16.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND libXcursor-devel-1.1.14-4.6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information gnome-online-accounts-3.10.5-1 is installed OR gnome-online-accounts-lang-3.10.5-1 is installed OR typelib-1_0-Goa-1_0-3.10.5-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information ImageMagick-6.8.8.1-8 is installed OR libMagick++-6_Q16-3-6.8.8.1-8 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information colord-1.3.3-10 is installed OR colord-lang-1.3.3-10 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information finch-2.12.0-1 is installed OR libpurple-2.12.0-1 is installed OR libpurple-branding-upstream-2.12.0-1 is installed OR libpurple-lang-2.12.0-1 is installed OR libpurple-plugin-sametime-2.12.0-1 is installed OR libpurple-tcl-2.12.0-1 is installed OR pidgin-2.12.0-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND bogofilter-1.2.4-5 is installed
BACK