Oval Definition:	oval:org.opensuse.security:def:7264
Revision Date: 2021-09-16 Version: 1 Title: Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3) (Important) Description: This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420). - CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418). - CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278). Family: unix Class: patch Status: Reference(s): 1189278 1189418 1189420 CVE-2006-4484 CVE-2006-7250 CVE-2008-5077 CVE-2009-0590 CVE-2009-0591 CVE-2009-0789 CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 CVE-2009-1386 CVE-2009-1387 CVE-2009-1886 CVE-2009-1888 CVE-2009-1892 CVE-2009-2813 CVE-2009-2906 CVE-2009-2948 CVE-2009-3700 CVE-2009-3826 CVE-2010-0547 CVE-2010-0728 CVE-2010-0740 CVE-2010-0742 CVE-2010-0787 CVE-2010-0926 CVE-2010-1633 CVE-2010-1635 CVE-2010-1642 CVE-2010-2063 CVE-2010-2156 CVE-2010-2496 CVE-2010-2939 CVE-2010-3069 CVE-2010-3609 CVE-2010-3611 CVE-2010-3616 CVE-2010-3864 CVE-2010-5298 CVE-2011-0014 CVE-2011-0413 CVE-2011-0719 CVE-2011-0997 CVE-2011-2522 CVE-2011-2694 CVE-2011-2748 CVE-2011-2749 CVE-2011-2895 CVE-2011-3207 CVE-2011-3210 CVE-2011-3602 CVE-2011-4108 CVE-2011-4539 CVE-2011-4576 CVE-2011-4577 CVE-2011-4619 CVE-2011-4868 CVE-2012-0027 CVE-2012-0050 CVE-2012-0817 CVE-2012-0870 CVE-2012-0884 CVE-2012-1165 CVE-2012-1182 CVE-2012-2110 CVE-2012-2111 CVE-2012-2391 CVE-2012-2686 CVE-2012-3570 CVE-2012-3571 CVE-2012-3954 CVE-2012-3955 CVE-2012-4929 CVE-2012-5643 CVE-2012-6150 CVE-2013-0166 CVE-2013-0169 CVE-2013-0172 CVE-2013-0213 CVE-2013-0214 CVE-2013-0454 CVE-2013-1863 CVE-2013-1912 CVE-2013-2175 CVE-2013-2266 CVE-2013-4124 CVE-2013-4353 CVE-2013-4408 CVE-2013-4475 CVE-2013-4476 CVE-2013-4496 CVE-2013-6369 CVE-2013-6442 CVE-2013-6449 CVE-2013-6450 CVE-2014-0011 CVE-2014-0076 CVE-2014-0128 CVE-2014-0160 CVE-2014-0178 CVE-2014-0195 CVE-2014-0198 CVE-2014-0221 CVE-2014-0224 CVE-2014-0239 CVE-2014-0244 CVE-2014-3470 CVE-2014-3493 CVE-2014-3505 CVE-2014-3506 CVE-2014-3507 CVE-2014-3508 CVE-2014-3509 CVE-2014-3510 CVE-2014-3511 CVE-2014-3512 CVE-2014-3513 CVE-2014-3560 CVE-2014-3566 CVE-2014-3567 CVE-2014-3568 CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-3686 CVE-2014-5139 CVE-2014-6269 CVE-2014-6270 CVE-2014-8143 CVE-2014-8169 CVE-2014-8275 CVE-2015-0204 CVE-2015-0205 CVE-2015-0206 CVE-2015-0209 CVE-2015-0210 CVE-2015-0240 CVE-2015-0286 CVE-2015-0287 CVE-2015-0288 CVE-2015-0289 CVE-2015-0293 CVE-2015-1788 CVE-2015-1789 CVE-2015-1790 CVE-2015-1791 CVE-2015-1792 CVE-2015-1863 CVE-2015-1867 CVE-2015-3216 CVE-2015-3281 CVE-2015-4000 CVE-2016-7035 CVE-2016-7797 CVE-2021-3653 CVE-2021-3656 CVE-2021-38198 SUSE-SU-2021:3073-1 Platform(s): openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability Extension 11 SP3 SUSE Linux Enterprise High Availability Extension 11 SP4 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Live Patching 15 SP3 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP3 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.5.2-10 is installed OR libreoffice-sdk-4.3.5.2-10 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information krb5-mini-1.12.1-22 is installed OR krb5-mini-devel-1.12.1-22 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.155-94.50 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information libudev-mini-devel-228-150.53 is installed OR libudev-mini1-228-150.53 is installed OR systemd-mini-228-150.53 is installed OR systemd-mini-devel-228-150.53 is installed OR udev-mini-228-150.53 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information libldb1-3.6.3-0.33.39.1 is installed OR libldb1-32bit-3.6.3-0.33.39.1 is installed OR libsmbclient0-3.6.3-0.33.39.1 is installed OR libsmbclient0-32bit-3.6.3-0.33.39.1 is installed OR libtalloc1-3.4.3-1.50.1 is installed OR libtalloc1-32bit-3.4.3-1.50.1 is installed OR libtalloc2-3.6.3-0.33.39.1 is installed OR libtalloc2-32bit-3.6.3-0.33.39.1 is installed OR libtdb1-3.6.3-0.33.39.1 is installed OR libtdb1-32bit-3.6.3-0.33.39.1 is installed OR libtevent0-3.6.3-0.33.39.1 is installed OR libtevent0-32bit-3.6.3-0.33.39.1 is installed OR libwbclient0-3.6.3-0.33.39.1 is installed OR libwbclient0-32bit-3.6.3-0.33.39.1 is installed OR samba-3.6.3-0.33.39.1 is installed OR samba-32bit-3.6.3-0.33.39.1 is installed OR samba-client-3.6.3-0.33.39.1 is installed OR samba-client-32bit-3.6.3-0.33.39.1 is installed OR samba-doc-3.6.3-0.33.39.1 is installed OR samba-krb-printing-3.6.3-0.33.39.1 is installed OR samba-winbind-3.6.3-0.33.39.1 is installed OR samba-winbind-32bit-3.6.3-0.33.39.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-24.5.0esr-0.8.1 is installed OR MozillaFirefox-branding-SLED-24-0.7.36 is installed OR MozillaFirefox-translations-24.5.0esr-0.8.1 is installed OR libfreebl3-3.16-0.8.1 is installed OR libfreebl3-32bit-3.16-0.8.1 is installed OR libsoftokn3-3.16-0.8.1 is installed OR libsoftokn3-32bit-3.16-0.8.1 is installed OR mozilla-nspr-4.10.4-0.3.1 is installed OR mozilla-nspr-32bit-4.10.4-0.3.1 is installed OR mozilla-nss-3.16-0.8.1 is installed OR mozilla-nss-32bit-3.16-0.8.1 is installed OR mozilla-nss-tools-3.16-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information ecryptfs-utils-61-1.35.1 is installed OR ecryptfs-utils-32bit-61-1.35.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information gnutls-3.2.15-4 is installed OR libgnutls28-3.2.15-4 is installed OR libgnutls28-32bit-3.2.15-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libwireshark8-2.2.6-44 is installed OR libwiretap6-2.2.6-44 is installed OR libwscodecs1-2.2.6-44 is installed OR libwsutil7-2.2.6-44 is installed OR wireshark-2.2.6-44 is installed OR wireshark-gtk-2.2.6-44 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libpoppler-glib8-0.43.0-16.5 is installed OR libpoppler-qt4-4-0.43.0-16.5 is installed OR libpoppler60-0.43.0-16.5 is installed OR poppler-0.43.0-16.5 is installed OR poppler-qt-0.43.0-16.5 is installed OR poppler-tools-0.43.0-16.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information libwireshark9-2.4.10-48.32 is installed OR libwiretap7-2.4.10-48.32 is installed OR libwscodecs1-2.4.10-48.32 is installed OR libwsutil8-2.4.10-48.32 is installed OR wireshark-2.4.10-48.32 is installed OR wireshark-gtk-2.4.10-48.32 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND Package Information ctdb-4.2.4-18.30 is installed OR samba-4.2.4-18.30 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND hawk2-1.0.1+git.1456406635.49e230d-12 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND haproxy-1.6.5-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND Package Information cluster-md-kmp-default-4.4.92-6.30 is installed OR dlm-kmp-default-4.4.92-6.30 is installed OR gfs2-kmp-default-4.4.92-6.30 is installed OR kernel-default-4.4.92-6.30 is installed OR ocfs2-kmp-default-4.4.92-6.30 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND Package Information libpacemaker3-1.1.19+20180928.0d2680780-1 is installed OR pacemaker-1.1.19+20180928.0d2680780-1 is installed OR pacemaker-cli-1.1.19+20180928.0d2680780-1 is installed OR pacemaker-cts-1.1.19+20180928.0d2680780-1 is installed OR pacemaker-remote-1.1.19+20180928.0d2680780-1 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP3 is installed AND Package Information gnutls-2.4.1-24.39.60.1 is installed OR libgnutls-extra26-2.4.1-24.39.60.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP4 is installed AND ctdb-1.0.114.6-0.14.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP3 is installed AND kernel-livepatch-5_3_18-57-default-6-3.2 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information bind-9.9.6P1-0.30.1 is installed OR bind-chrootenv-9.9.6P1-0.30.1 is installed OR bind-doc-9.9.6P1-0.30.1 is installed OR bind-libs-9.9.6P1-0.30.1 is installed OR bind-utils-9.9.6P1-0.30.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP3 is installed AND Package Information kernel-rt-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt-base-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt-devel-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt_trace-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt_trace-base-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt_trace-devel-3.0.101.rt130-0.33.44.2 is installed OR kernel-source-rt-3.0.101.rt130-0.33.44.2 is installed OR kernel-syms-rt-3.0.101.rt130-0.33.44.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information libMagickCore1-6.4.3.6-7.19.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.19.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1 is installed AND amavisd-new-2.6.2-1.14 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information Mesa-7.7-5.12.38 is installed OR Mesa-32bit-7.7-5.12.38 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND augeas-0.9.0-3.17.2 is installed OR augeas-lenses-0.9.0-3.17.2 is installed OR libaugeas0-0.9.0-3.17.2 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND augeas-0.9.0-3.17.2 is installed OR augeas-lenses-0.9.0-3.17.2 is installed OR libaugeas0-0.9.0-3.17.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information mono-core-2.6.7-0.18.1 is installed OR mono-data-2.6.7-0.18.1 is installed OR mono-data-postgresql-2.6.7-0.18.1 is installed OR mono-data-sqlite-2.6.7-0.18.1 is installed OR mono-locale-extras-2.6.7-0.18.1 is installed OR mono-nunit-2.6.7-0.18.1 is installed OR mono-web-2.6.7-0.18.1 is installed OR mono-winforms-2.6.7-0.18.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information libmysql55client18-5.5.43-0.7.3 is installed OR libmysql55client18-32bit-5.5.43-0.7.3 is installed OR libmysql55client18-x86-5.5.43-0.7.3 is installed OR libmysql55client_r18-5.5.43-0.7.3 is installed OR libmysql55client_r18-32bit-5.5.43-0.7.3 is installed OR libmysql55client_r18-x86-5.5.43-0.7.3 is installed OR mysql-5.5.43-0.7.3 is installed OR mysql-client-5.5.43-0.7.3 is installed OR mysql-tools-5.5.43-0.7.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND perl-Tk-804.031-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND autofs-5.0.9-8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information bind-9.9.9P1-62.1 is installed OR bind-chrootenv-9.9.9P1-62.1 is installed OR bind-devel-9.9.9P1-62.1 is installed OR bind-doc-9.9.9P1-62.1 is installed OR bind-libs-9.9.9P1-62.1 is installed OR bind-libs-32bit-9.9.9P1-62.1 is installed OR bind-utils-9.9.9P1-62.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information automake-1.13.4-6 is installed OR m4-1.4.16-15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-38.8 is installed OR aaa_base-extras-13.2+git20140911.61c1681-38.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_55-52_42-default-2-2.2 is installed OR kgraft-patch-3_12_55-52_42-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_12-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND sudo-1.8.10p3-2.19 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information MozillaFirefox-52.2.0esr-108 is installed OR MozillaFirefox-branding-SLE-52-31 is installed OR MozillaFirefox-devel-52.2.0esr-108 is installed OR MozillaFirefox-translations-52.2.0esr-108 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND ucode-intel-20180703-13.25 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information libgcrypt-devel-1.5.0-0.15.2 is installed OR libgcrypt-devel-32bit-1.5.0-0.15.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information MozillaFirefox-31.8.0esr-0.10.1 is installed OR MozillaFirefox-devel-31.8.0esr-0.10.1 is installed OR mozilla-nspr-4.10.8-0.5.1 is installed OR mozilla-nspr-devel-4.10.8-0.5.1 is installed OR mozilla-nss-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nss-devel-3.19.2_CKBI_1.98-0.10.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information guile-1.8.5-24.1 is installed OR guile-devel-1.8.5-24.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information dbus-1-1.8.12-6 is installed OR dbus-1-devel-1.8.12-6 is installed OR dbus-1-devel-doc-1.8.12-6 is installed OR dbus-1-x11-1.8.12-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information MozillaFirefox-52.6.0esr-109.13 is installed OR MozillaFirefox-devel-52.6.0esr-109.13 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libpoppler44-0.24.4-14.6 is installed OR poppler-0.24.4-14.6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND libksba-devel-1.3.0-23 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND libssh4-0.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information gcc48-gij-4.8.5-24 is installed OR gcc48-gij-32bit-4.8.5-24 is installed OR libgcj48-4.8.5-24 is installed OR libgcj48-32bit-4.8.5-24 is installed OR libgcj48-jar-4.8.5-24 is installed OR libgcj_bc1-4.8.5-24 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information NetworkManager-1.0.12-8 is installed OR NetworkManager-lang-1.0.12-8 is installed OR typelib-1_0-NM-1_0-1.0.12-8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information colord-1.3.3-12 is installed OR colord-lang-1.3.3-12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information NetworkManager-1.0.12-13.6 is installed OR NetworkManager-lang-1.0.12-13.6 is installed OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed
BACK