Oval Definition:	oval:org.opensuse.security:def:7241
Revision Date: 2021-03-17 Version: 1 Title: Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP2) (Important) Description: This update for the Linux Kernel 5.3.18-24_29 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664). - Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). - CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553). - CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684). Family: unix Class: patch Status: Reference(s): 1178684 1179664 1181553 1182468 CVE-2008-4225 CVE-2008-4226 CVE-2008-4409 CVE-2009-0758 CVE-2009-2412 CVE-2009-2911 CVE-2009-4273 CVE-2010-0411 CVE-2010-0412 CVE-2010-2244 CVE-2011-0419 CVE-2011-1002 CVE-2011-1098 CVE-2011-1154 CVE-2011-1155 CVE-2011-1928 CVE-2011-2709 CVE-2011-3172 CVE-2012-4024 CVE-2012-4025 CVE-2012-5134 CVE-2014-0104 CVE-2014-3158 CVE-2014-3230 CVE-2014-3467 CVE-2014-3468 CVE-2014-3469 CVE-2014-3686 CVE-2014-4910 CVE-2015-0210 CVE-2015-0295 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 CVE-2015-1863 CVE-2015-2806 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-5130 CVE-2015-5310 CVE-2015-8041 CVE-2017-13078 CVE-2017-13079 CVE-2017-13080 CVE-2017-13081 CVE-2017-13087 CVE-2017-13088 CVE-2020-28374 CVE-2020-29368 CVE-2021-3347 Platform(s): openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 11 SP4 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability Extension 11 SP2 SUSE Linux Enterprise High Availability Extension 11 SP3 SUSE Linux Enterprise High Availability Extension 11 SP4 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP4 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information krb5-mini-1.12.1-16 is installed OR krb5-mini-devel-1.12.1-16 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information python-tdb-1.3.8-4 is installed OR python-tevent-0.9.26-4 is installed OR tdb-1.3.8-4 is installed OR tevent-0.9.26-4 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.120-92.70 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libpoppler-cpp0-0.43.0-16.15 is installed OR poppler-0.43.0-16.15 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information libudev-mini-devel-228-150.66 is installed OR libudev-mini1-228-150.66 is installed OR systemd-mini-228-150.66 is installed OR systemd-mini-devel-228-150.66 is installed OR udev-mini-228-150.66 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information acroread-9.5.5-0.5.5.1 is installed OR acroread-cmaps-9.4.6-0.4.5.1 is installed OR acroread-fonts-ja-9.4.6-0.4.5.1 is installed OR acroread-fonts-ko-9.4.6-0.4.5.1 is installed OR acroread-fonts-zh_CN-9.4.6-0.4.5.1 is installed OR acroread-fonts-zh_TW-9.4.6-0.4.5.1 is installed OR acroread_ja-9.4.2-0.4.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-17.0.9esr-0.7.1 is installed OR MozillaFirefox-translations-17.0.9esr-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information flash-player-11.2.202.535-0.20.1 is installed OR flash-player-gnome-11.2.202.535-0.20.1 is installed OR flash-player-kde4-11.2.202.535-0.20.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND tcpdump-4.5.1-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information xen-4.7.2_04-39 is installed OR xen-libs-4.7.2_04-39 is installed OR xen-libs-32bit-4.7.2_04-39 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libpoppler-glib8-0.43.0-16.5 is installed OR libpoppler-qt4-4-0.43.0-16.5 is installed OR libpoppler60-0.43.0-16.5 is installed OR poppler-0.43.0-16.5 is installed OR poppler-qt-0.43.0-16.5 is installed OR poppler-tools-0.43.0-16.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND wpa_supplicant-2.2-15.3 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP4 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.47.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.47.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND haproxy-1.5.4-2.4 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND hawk2-1.0.1+git.1456406635.49e230d-12 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND fence-agents-4.0.22+git.1455008135.15c5e92-8 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP2 is installed AND lighttpd-1.4.20-2.52.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP3 is installed AND libgnutls-extra26-2.4.1-24.39.51.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP4 is installed AND Package Information gnutls-2.4.1-24.39.67.1 is installed OR libgnutls-extra26-2.4.1-24.39.67.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND kernel-livepatch-5_3_18-24_29-default-4-2.2 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information bind-9.9.6P1-0.33.1 is installed OR bind-chrootenv-9.9.6P1-0.33.1 is installed OR bind-doc-9.9.6P1-0.33.1 is installed OR bind-libs-9.9.6P1-0.33.1 is installed OR bind-utils-9.9.6P1-0.33.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP4 is installed AND Package Information kernel-rt-3.0.101.rt130-57.1 is installed OR kernel-rt-base-3.0.101.rt130-57.1 is installed OR kernel-rt-devel-3.0.101.rt130-57.1 is installed OR kernel-rt_trace-3.0.101.rt130-57.1 is installed OR kernel-rt_trace-base-3.0.101.rt130-57.1 is installed OR kernel-rt_trace-devel-3.0.101.rt130-57.1 is installed OR kernel-source-rt-3.0.101.rt130-57.1 is installed OR kernel-syms-rt-3.0.101.rt130-57.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND NetworkManager-gnome-0.7.0.r1053-11.11.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND curl-7.19.7-1.38.1 is installed OR libcurl4-7.19.7-1.38.1 is installed OR libcurl4-32bit-7.19.7-1.38.1 is installed OR libcurl4-x86-7.19.7-1.38.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND curl-7.19.7-1.38.1 is installed OR libcurl4-7.19.7-1.38.1 is installed OR libcurl4-32bit-7.19.7-1.38.1 is installed OR libcurl4-x86-7.19.7-1.38.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information guestfs-data-1.20.4-0.18.1 is installed OR guestfs-tools-1.20.4-0.18.1 is installed OR guestfsd-1.20.4-0.18.1 is installed OR libguestfs0-1.20.4-0.18.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information ImageMagick-6.4.3.6-7.37.1 is installed OR libMagickCore1-6.4.3.6-7.37.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.37.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND libarchive2-2.5.5-5.19 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information curl-openssl1-7.19.7-1.69.1 is installed OR libcurl4-openssl1-7.19.7-1.69.1 is installed OR libcurl4-openssl1-32bit-7.19.7-1.69.1 is installed OR libcurl4-openssl1-x86-7.19.7-1.69.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND logrotate-3.8.7-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information avahi-0.6.31-20 is installed OR avahi-lang-0.6.31-20 is installed OR avahi-utils-0.6.31-20 is installed OR libavahi-client3-0.6.31-20 is installed OR libavahi-client3-32bit-0.6.31-20 is installed OR libavahi-common3-0.6.31-20 is installed OR libavahi-common3-32bit-0.6.31-20 is installed OR libavahi-core7-0.6.31-20 is installed OR libdns_sd-0.6.31-20 is installed OR libdns_sd-32bit-0.6.31-20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kernel-default-3.12.74-60.64.48.1 is installed OR kernel-default-base-3.12.74-60.64.48.1 is installed OR kernel-default-devel-3.12.74-60.64.48.1 is installed OR kernel-default-man-3.12.74-60.64.48.1 is installed OR kernel-devel-3.12.74-60.64.48.1 is installed OR kernel-macros-3.12.74-60.64.48.1 is installed OR kernel-source-3.12.74-60.64.48.1 is installed OR kernel-syms-3.12.74-60.64.48.1 is installed OR kernel-xen-3.12.74-60.64.48.1 is installed OR kernel-xen-base-3.12.74-60.64.48.1 is installed OR kernel-xen-devel-3.12.74-60.64.48.1 is installed OR kgraft-patch-3_12_74-60_64_48-default-1-2.1 is installed OR kgraft-patch-3_12_74-60_64_48-xen-1-2.1 is installed OR kgraft-patch-SLE12-SP1_Update_17-1-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND busybox-1.21.1-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND binutils-2.31-9.26 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND ant-1.9.4-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information openssh-6.6p1-52.1 is installed OR openssh-askpass-gnome-6.6p1-52.1 is installed OR openssh-fips-6.6p1-52.1 is installed OR openssh-helpers-6.6p1-52.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND apache2-mod_perl-2.0.8-11 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_60-52_49-default-4-2 is installed OR kgraft-patch-3_12_60-52_49-xen-4-2 is installed OR kgraft-patch-SLE12_Update_14-4-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information MozillaFirefox-52.2.0esr-108 is installed OR MozillaFirefox-branding-SLE-52-31 is installed OR MozillaFirefox-devel-52.2.0esr-108 is installed OR MozillaFirefox-translations-52.2.0esr-108 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information kgraft-patch-4_4_74-92_35-default-10-2 is installed OR kgraft-patch-SLE12-SP2_Update_12-10-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information beagle-0.3.8-56.51.1 is installed OR beagle-devel-0.3.8-56.51.1 is installed OR beagle-lang-0.3.8-56.44.45.129 is installed OR mozilla-nspr-devel-4.9.5-0.3.2 is installed OR mozilla-nss-devel-3.14.2-0.4.3.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-devel-38.5.0esr-28.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information gd-2.0.36.RC1-52.25.1 is installed OR gd-devel-2.0.36.RC1-52.25.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information xorg-x11-server-7.6_1.15.2-21 is installed OR xorg-x11-server-sdk-7.6_1.15.2-21 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information kernel-docs-4.4.59-92.20 is installed OR kernel-obs-build-4.4.59-92.20 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libpoppler-cpp0-0.43.0-16.5 is installed OR libpoppler-devel-0.43.0-16.5 is installed OR libpoppler-glib-devel-0.43.0-16.5 is installed OR libpoppler-qt4-devel-0.43.0-16.5 is installed OR poppler-0.43.0-16.5 is installed OR poppler-qt-0.43.0-16.5 is installed OR typelib-1_0-Poppler-0_18-0.43.0-16.5 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND libexpat-devel-2.1.0-21.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information gcc48-gij-4.8.3+r212056-6 is installed OR gcc48-gij-32bit-4.8.3+r212056-6 is installed OR libgcj48-4.8.3+r212056-6 is installed OR libgcj48-32bit-4.8.3+r212056-6 is installed OR libgcj48-jar-4.8.3+r212056-6 is installed OR libgcj_bc1-4.8.3+r212056-6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bogofilter-1.2.4-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information NetworkManager-1.0.12-13.6 is installed OR NetworkManager-lang-1.0.12-13.6 is installed OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed
BACK