Oval Definition:	oval:org.opensuse.security:def:7267
Revision Date: 2021-09-16 Version: 1 Title: Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP3) (Important) Description: This update for the Linux Kernel 5.3.18-59_13 fixes several issues. The following security issues were fixed: - CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420). - CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418). - CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278). Family: unix Class: patch Status: Reference(s): 1189278 1189418 1189420 CVE-2010-1163 CVE-2010-1205 CVE-2010-1646 CVE-2011-0010 CVE-2011-0904 CVE-2011-0905 CVE-2011-1164 CVE-2011-1898 CVE-2011-2483 CVE-2011-2501 CVE-2011-3026 CVE-2011-3045 CVE-2011-3048 CVE-2011-3177 CVE-2012-0029 CVE-2012-0217 CVE-2012-2337 CVE-2012-2625 CVE-2012-3386 CVE-2012-3432 CVE-2012-3433 CVE-2012-3449 CVE-2012-4411 CVE-2012-4453 CVE-2012-4535 CVE-2012-4536 CVE-2012-4537 CVE-2012-4538 CVE-2012-4539 CVE-2012-4544 CVE-2012-5510 CVE-2012-5511 CVE-2012-5513 CVE-2012-5514 CVE-2012-5515 CVE-2012-5525 CVE-2012-5634 CVE-2012-6075 CVE-2013-0151 CVE-2013-0152 CVE-2013-0153 CVE-2013-1442 CVE-2013-1762 CVE-2013-1775 CVE-2013-1776 CVE-2013-1917 CVE-2013-1918 CVE-2013-1919 CVE-2013-1922 CVE-2013-1952 CVE-2013-2007 CVE-2013-3495 CVE-2013-4326 CVE-2013-4355 CVE-2013-4356 CVE-2013-4361 CVE-2013-4375 CVE-2013-4416 CVE-2013-4494 CVE-2013-4540 CVE-2013-4551 CVE-2013-4553 CVE-2013-4554 CVE-2013-7353 CVE-2013-7354 CVE-2014-0016 CVE-2014-0222 CVE-2014-1829 CVE-2014-1830 CVE-2014-2524 CVE-2014-3124 CVE-2014-3158 CVE-2014-3615 CVE-2014-5146 CVE-2014-5149 CVE-2014-6268 CVE-2014-6271 CVE-2014-6272 CVE-2014-7154 CVE-2014-7155 CVE-2014-7156 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187 CVE-2014-7188 CVE-2014-8594 CVE-2014-8595 CVE-2014-8866 CVE-2014-8867 CVE-2014-9030 CVE-2014-9065 CVE-2014-9066 CVE-2014-9087 CVE-2014-9130 CVE-2015-0361 CVE-2015-2044 CVE-2015-2045 CVE-2015-2151 CVE-2015-2152 CVE-2015-2296 CVE-2015-2751 CVE-2015-2752 CVE-2015-2756 CVE-2015-3259 CVE-2015-3340 CVE-2015-3456 CVE-2015-3644 CVE-2015-4037 CVE-2015-4103 CVE-2015-4104 CVE-2015-4105 CVE-2015-4106 CVE-2015-5154 CVE-2015-5239 CVE-2015-5307 CVE-2015-6815 CVE-2015-7311 CVE-2015-7835 CVE-2015-7969 CVE-2015-7970 CVE-2015-7971 CVE-2015-7972 CVE-2021-3653 CVE-2021-3656 CVE-2021-38198 Platform(s): openSUSE 13.1 openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Availability 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability Extension 11 SP3 SUSE Linux Enterprise High Availability Extension 11 SP4 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Live Patching 15 SP3 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP1 SUSE Linux Enterprise Real Time Extension 11 SP4 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.5.2-10 is installed OR libreoffice-sdk-4.3.5.2-10 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.59-60.45 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.156-94.57 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information cups-1.7.5-20.20 is installed OR cups-ddk-1.7.5-20.20 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-24.6.0esr-0.8.1 is installed OR MozillaFirefox-branding-SLED-24-0.7.48 is installed OR MozillaFirefox-translations-24.6.0esr-0.8.1 is installed OR libfreebl3-3.16.1-0.8.1 is installed OR libfreebl3-32bit-3.16.1-0.8.1 is installed OR libsoftokn3-3.16.1-0.8.1 is installed OR libsoftokn3-32bit-3.16.1-0.8.1 is installed OR mozilla-nspr-4.10.6-0.3.1 is installed OR mozilla-nspr-32bit-4.10.6-0.3.1 is installed OR mozilla-nss-3.16.1-0.8.1 is installed OR mozilla-nss-32bit-3.16.1-0.8.1 is installed OR mozilla-nss-tools-3.16.1-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-38.3.0esr-22.1 is installed OR MozillaFirefox-translations-38.3.0esr-22.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND mailx-12.5-22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information strongswan-5.1.3-25 is installed OR strongswan-doc-5.1.3-25 is installed OR strongswan-ipsec-5.1.3-25 is installed OR strongswan-libs0-5.1.3-25 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libwireshark8-2.2.8-48.6 is installed OR libwiretap6-2.2.8-48.6 is installed OR libwscodecs1-2.2.8-48.6 is installed OR libwsutil7-2.2.8-48.6 is installed OR wireshark-2.2.8-48.6 is installed OR wireshark-gtk-2.2.8-48.6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND opensc-0.13.0-3.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND Package Information ctdb-4.2.4-18.44 is installed OR samba-4.2.4-18.44 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP1 is installed AND Package Information libpcreposix0-8.39-5 is installed OR pcre-8.39-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND python-PyYAML-3.10-17 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND Package Information cluster-md-kmp-default-4.4.82-6.3 is installed OR dlm-kmp-default-4.4.82-6.3 is installed OR gfs2-kmp-default-4.4.82-6.3 is installed OR kernel-default-4.4.82-6.3 is installed OR ocfs2-kmp-default-4.4.82-6.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND python-requests-2.11.1-6.28 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP3 is installed AND Package Information cluster-network-kmp-bigsmp-1.4_3.0.101_0.40-2.27.98 is installed OR drbd-kmp-bigsmp-8.4.4_3.0.101_0.40-0.22.64 is installed OR gfs2-kmp-bigsmp-2_3.0.101_0.40-0.16.104 is installed OR ocfs2-kmp-bigsmp-1.6_3.0.101_0.40-0.20.98 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP4 is installed AND Package Information gnutls-2.4.1-24.39.67.1 is installed OR libgnutls-extra26-2.4.1-24.39.67.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP3 is installed AND kernel-livepatch-5_3_18-59_13-default-4-2.3 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information bsdtar-2.5.5-9.1 is installed OR libarchive2-2.5.5-9.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP1 is installed AND iscsitarget-kmp-rt-1.4.19_2.6.33.5_rt23_0.4-0.7.6 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP4 is installed AND Package Information kernel-rt-3.0.101.rt130-45.1 is installed OR kernel-rt-base-3.0.101.rt130-45.1 is installed OR kernel-rt-devel-3.0.101.rt130-45.1 is installed OR kernel-rt_trace-3.0.101.rt130-45.1 is installed OR kernel-rt_trace-base-3.0.101.rt130-45.1 is installed OR kernel-rt_trace-devel-3.0.101.rt130-45.1 is installed OR kernel-source-rt-3.0.101.rt130-45.1 is installed OR kernel-syms-rt-3.0.101.rt130-45.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND NetworkManager-gnome-0.7.0.r1053-11.11.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1 is installed AND Package Information apache2-mod_php5-5.2.6-50.24.1 is installed OR php5-5.2.6-50.24.1 is installed OR php5-bcmath-5.2.6-50.24.1 is installed OR php5-bz2-5.2.6-50.24.1 is installed OR php5-calendar-5.2.6-50.24.1 is installed OR php5-ctype-5.2.6-50.24.1 is installed OR php5-curl-5.2.6-50.24.1 is installed OR php5-dba-5.2.6-50.24.1 is installed OR php5-dbase-5.2.6-50.24.1 is installed OR php5-dom-5.2.6-50.24.1 is installed OR php5-exif-5.2.6-50.24.1 is installed OR php5-fastcgi-5.2.6-50.24.1 is installed OR php5-ftp-5.2.6-50.24.1 is installed OR php5-gd-5.2.6-50.24.1 is installed OR php5-gettext-5.2.6-50.24.1 is installed OR php5-gmp-5.2.6-50.24.1 is installed OR php5-hash-5.2.6-50.24.1 is installed OR php5-iconv-5.2.6-50.24.1 is installed OR php5-json-5.2.6-50.24.1 is installed OR php5-ldap-5.2.6-50.24.1 is installed OR php5-mbstring-5.2.6-50.24.1 is installed OR php5-mcrypt-5.2.6-50.24.1 is installed OR php5-mysql-5.2.6-50.24.1 is installed OR php5-odbc-5.2.6-50.24.1 is installed OR php5-openssl-5.2.6-50.24.1 is installed OR php5-pcntl-5.2.6-50.24.1 is installed OR php5-pdo-5.2.6-50.24.1 is installed OR php5-pear-5.2.6-50.24.1 is installed OR php5-pgsql-5.2.6-50.24.1 is installed OR php5-pspell-5.2.6-50.24.1 is installed OR php5-shmop-5.2.6-50.24.1 is installed OR php5-snmp-5.2.6-50.24.1 is installed OR php5-soap-5.2.6-50.24.1 is installed OR php5-suhosin-5.2.6-50.24.1 is installed OR php5-sysvmsg-5.2.6-50.24.1 is installed OR php5-sysvsem-5.2.6-50.24.1 is installed OR php5-sysvshm-5.2.6-50.24.1 is installed OR php5-tokenizer-5.2.6-50.24.1 is installed OR php5-wddx-5.2.6-50.24.1 is installed OR php5-xmlreader-5.2.6-50.24.1 is installed OR php5-xmlrpc-5.2.6-50.24.1 is installed OR php5-xmlwriter-5.2.6-50.24.1 is installed OR php5-xsl-5.2.6-50.24.1 is installed OR php5-zip-5.2.6-50.24.1 is installed OR php5-zlib-5.2.6-50.24.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information apache2-2.2.12-1.48.1 is installed OR apache2-doc-2.2.12-1.48.1 is installed OR apache2-example-pages-2.2.12-1.48.1 is installed OR apache2-prefork-2.2.12-1.48.1 is installed OR apache2-utils-2.2.12-1.48.1 is installed OR apache2-worker-2.2.12-1.48.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND bind-9.9.4P2-0.6.1 is installed OR bind-chrootenv-9.9.4P2-0.6.1 is installed OR bind-doc-9.9.4P2-0.6.1 is installed OR bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-libs-x86-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND bind-9.9.4P2-0.6.1 is installed OR bind-chrootenv-9.9.4P2-0.6.1 is installed OR bind-doc-9.9.4P2-0.6.1 is installed OR bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-libs-x86-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information ghostscript-fonts-other-8.62-32.38.1 is installed OR ghostscript-fonts-rus-8.62-32.38.1 is installed OR ghostscript-fonts-std-8.62-32.38.1 is installed OR ghostscript-library-8.62-32.38.1 is installed OR ghostscript-omni-8.62-32.38.1 is installed OR ghostscript-x11-8.62-32.38.1 is installed OR libgimpprint-4.2.7-32.38.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information libnetpbm10-10.26.44-101.9.1 is installed OR libnetpbm10-32bit-10.26.44-101.9.1 is installed OR libnetpbm10-x86-10.26.44-101.9.1 is installed OR netpbm-10.26.44-101.9.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND ppp-2.4.7-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information bash-4.2-75 is installed OR bash-doc-4.2-75 is installed OR libreadline6-6.2-75 is installed OR libreadline6-32bit-6.2-75 is installed OR readline-doc-6.2-75 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information xen-4.5.5_12-22.18.1 is installed OR xen-doc-html-4.5.5_12-22.18.1 is installed OR xen-kmp-default-4.5.5_12_k3.12.74_60.64.45-22.18.1 is installed OR xen-libs-4.5.5_12-22.18.1 is installed OR xen-libs-32bit-4.5.5_12-22.18.1 is installed OR xen-tools-4.5.5_12-22.18.1 is installed OR xen-tools-domU-4.5.5_12-22.18.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information bind-9.9.9P1-46 is installed OR bind-chrootenv-9.9.9P1-46 is installed OR bind-doc-9.9.9P1-46 is installed OR bind-libs-9.9.9P1-46 is installed OR bind-libs-32bit-9.9.9P1-46 is installed OR bind-utils-9.9.9P1-46 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache2-2.4.23-28 is installed OR apache2-doc-2.4.23-28 is installed OR apache2-example-pages-2.4.23-28 is installed OR apache2-prefork-2.4.23-28 is installed OR apache2-utils-2.4.23-28 is installed OR apache2-worker-2.4.23-28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND ant-1.9.4-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND apache2-mod_jk-1.2.40-7.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_48-52_27-default-5-2.2 is installed OR kgraft-patch-3_12_48-52_27-xen-5-2.2 is installed OR kgraft-patch-SLE12_Update_8-5-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-28 is installed OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information xorg-x11-server-7.6_1.15.2-30.22 is installed OR xorg-x11-server-extra-7.6_1.15.2-30.22 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information bind-9.9.9P1-62 is installed OR bind-chrootenv-9.9.9P1-62 is installed OR bind-devel-9.9.9P1-62 is installed OR bind-doc-9.9.9P1-62 is installed OR bind-libs-9.9.9P1-62 is installed OR bind-libs-32bit-9.9.9P1-62 is installed OR bind-utils-9.9.9P1-62 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information kgraft-patch-4_4_103-92_53-default-7-2 is installed OR kgraft-patch-SLE12-SP2_Update_16-7-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND libotr-devel-3.2.0-10.3.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information MozillaFirefox-devel-24.6.0esr-0.8.1 is installed OR mozilla-nspr-devel-4.10.6-0.3.1 is installed OR mozilla-nss-devel-3.16.1-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information icu-4.0-43.1 is installed OR libicu-32bit-4.0-43.1 is installed OR libicu-devel-4.0-43.1 is installed OR libicu-devel-32bit-4.0-43.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information gnutls-3.2.15-4 is installed OR libgnutls-devel-3.2.15-4 is installed OR libgnutls-openssl-devel-3.2.15-4 is installed OR libgnutlsxx-devel-3.2.15-4 is installed OR libgnutlsxx28-3.2.15-4 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information libxml2-2.9.4-46.12 is installed OR libxml2-devel-2.9.4-46.12 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libical-1.0.1-16.3 is installed OR libical-devel-1.0.1-16.3 is installed OR libical-devel-static-1.0.1-16.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information libldb-devel-1.1.29-3.3 is installed OR python-ldb-1.1.29-3.3 is installed OR python-ldb-devel-1.1.29-3.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND libvirt-client-32bit-1.2.5-13 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND drm-kmp-default-4.9.33_k4.4.73_5-2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND bluez-cups-5.13-5.4 is installed
BACK