<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for the Linux Kernel</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2018:1368-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2018-05-22T16:00:19Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2018-05-22T16:00:19Z</InitialReleaseDate>
    <CurrentReleaseDate>2018-05-22T16:00:19Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for the Linux Kernel</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature
  in modern CPUs were mitigated, aka 'Spectre Variant 4' (bnc#1087082).

  A new boot commandline option was introduced,
  'spec_store_bypass_disable', which can have following values:

  - auto: Kernel detects whether your CPU model contains an implementation
    of Speculative Store Bypass and picks the most appropriate mitigation.
  - on: disable Speculative Store Bypass
  - off: enable Speculative Store Bypass
  - prctl: Control Speculative Store Bypass per thread via
    prctl. Speculative Store Bypass is enabled for a process by default. The
    state of the control is inherited on fork.
  - seccomp: Same as 'prctl' above, but all seccomp threads will disable
    SSB unless they explicitly opt out.

  The default is 'seccomp', meaning programs need explicit opt-in into the mitigation.

  Status can be queried via the /sys/devices/system/cpu/vulnerabilities/spec_store_bypass file, containing:

  - 'Vulnerable'
  - 'Mitigation: Speculative Store Bypass disabled'
  - 'Mitigation: Speculative Store Bypass disabled via prctl'
  - 'Mitigation: Speculative Store Bypass disabled via prctl and seccomp'

- CVE-2018-1000199: An address corruption flaw was discovered while
  modifying a h/w breakpoint via 'modify_user_hw_breakpoint' routine, an
  unprivileged user/process could use this flaw to crash the system kernel
  resulting in DoS OR to potentially escalate privileges on a the system. (bsc#1089895)
- CVE-2018-10675: The do_get_mempolicy function in mm/mempolicy.c allowed
  local users to cause a denial of service (use-after-free) or possibly
  have unspecified other impact via crafted system calls (bnc#1091755).
- CVE-2017-5715: The retpoline mitigation for Spectre v2 has been enabled also for 32bit x86.
- CVE-2017-5753: Spectre v1 mitigations have been improved by the versions
  merged from the upstream kernel.

The following non-security bugs were fixed:

- Avoid quadratic search when freeing delegations (bsc#1084760).
- cifs: fix crash due to race in hmac(md5) handling (bsc#1091671).
- hid: roccat: prevent an out of bounds read in kovaplus_profile_activated() (bsc#1087092).
- mmc: jz4740: Fix race condition in IRQ mask update (bsc#1090888).
- powerpc/64: Disable gmb() on powerpc
- powerpc/64s: Add barrier_nospec (bsc#1068032, bsc#1080157).
- powerpc/64s: Add support for ori barrier_nospec patching (bsc#1068032, bsc#1080157).
- powerpc/64s: Enable barrier_nospec based on firmware settings (bsc#1068032, bsc#1080157).
- powerpc/64s: Enhance the information in cpu_show_meltdown() (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/64s: Enhance the information in cpu_show_spectre_v1() (bsc#1068032).
- powerpc/64s: Fix section mismatch warnings from setup_rfi_flush() (bsc#1068032, bsc#1075087, bsc#1091041).
- powerpc/64s: Improve RFI L1-D cache flush fallback (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/64s: Move cpu_show_meltdown() (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/64s: Patch barrier_nospec in modules (bsc#1068032, bsc#1080157).
- powerpc/64s: Wire up cpu_show_spectre_v1() (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/64s: Wire up cpu_show_spectre_v2() (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/64: Use barrier_nospec in syscall entry (bsc#1068032, bsc#1080157).
- powerpc: Add security feature flags for Spectre/Meltdown (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc: Move default security feature flags (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc: Move local setup.h declarations to arch includes (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/pseries: Add new H_GET_CPU_CHARACTERISTICS flags (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/pseries: Fix clearing of security feature flags (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/pseries: Restore default security feature flags on setup (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/pseries: Set or clear security feature flags (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/pseries: Use the security flags in pseries_setup_rfi_flush() (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/rfi-flush: Always enable fallback flush on pseries (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/rfi-flush: Call setup_rfi_flush() after LPM migration (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/rfi-flush: Differentiate enabled and patched flush types (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc/rfi-flush: Make it possible to call setup_rfi_flush() again (bsc#1068032, bsc#1075088, bsc#1091815).
- powerpc: Use barrier_nospec in copy_from_user() (bsc#1068032, bsc#1080157).
- series.conf: fix the header It was corrupted back in 2015.
- tracing: Create seq_buf layer in trace_seq (bsc#1091815).
- Update config files. Enable retpolines for i386 build.
- usb: Accept bulk endpoints with 1024-byte maxpacket (bsc#1090888).
- usb: hub: fix SS hub-descriptor handling (bsc#1092372).
- x86/bugs: correctly force-disable IBRS on !SKL systems (bsc#1092497).
- x86/kaiser: export symbol kaiser_set_shadow_pgd() (bsc#1090630)
- x86/xen: disable IBRS around CPU stopper function invocation
- xen-netfront: fix req_prod check to avoid RX hang when index wraps (bsc#1046610).
- xfs: fix buffer use after free on IO error (bsc#1052943).
- xfs: prevent recursion in xfs_buf_iorequest (bsc#1052943).

</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">sdksp4-kernel-20180512-13618,slessp4-kernel-20180512-13618,slexsp3-kernel-20180512-13618</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181368-1/</URL>
      <Description>Link for SUSE-SU-2018:1368-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2018-May/004072.html</URL>
      <Description>E-Mail link for SUSE-SU-2018:1368-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1046610</URL>
      <Description>SUSE Bug 1046610</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1052943</URL>
      <Description>SUSE Bug 1052943</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1068032</URL>
      <Description>SUSE Bug 1068032</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1075087</URL>
      <Description>SUSE Bug 1075087</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1075088</URL>
      <Description>SUSE Bug 1075088</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1080157</URL>
      <Description>SUSE Bug 1080157</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1084760</URL>
      <Description>SUSE Bug 1084760</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1087082</URL>
      <Description>SUSE Bug 1087082</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1087092</URL>
      <Description>SUSE Bug 1087092</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1089895</URL>
      <Description>SUSE Bug 1089895</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1090630</URL>
      <Description>SUSE Bug 1090630</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1090888</URL>
      <Description>SUSE Bug 1090888</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1091041</URL>
      <Description>SUSE Bug 1091041</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1091671</URL>
      <Description>SUSE Bug 1091671</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1091755</URL>
      <Description>SUSE Bug 1091755</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1091815</URL>
      <Description>SUSE Bug 1091815</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1092372</URL>
      <Description>SUSE Bug 1092372</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1092497</URL>
      <Description>SUSE Bug 1092497</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1094019</URL>
      <Description>SUSE Bug 1094019</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-5715/</URL>
      <Description>SUSE CVE CVE-2017-5715 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2017-5753/</URL>
      <Description>SUSE CVE CVE-2017-5753 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2018-1000199/</URL>
      <Description>SUSE CVE CVE-2018-1000199 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2018-10675/</URL>
      <Description>SUSE CVE CVE-2018-10675 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2018-3639/</URL>
      <Description>SUSE CVE CVE-2018-3639 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4" CPE="cpe:/o:suse:suse_sles:11:sp4">SUSE Linux Enterprise Server 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4" CPE="cpe:/o:suse:sles_sap:11:sp4">SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Software Development Kit 11 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4" CPE="cpe:/a:suse:sle-sdk:11:sp4">SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-docs-3.0.101-108.48.1">kernel-docs-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-bigmem-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-bigmem-3.0.101-108.48.1">kernel-bigmem-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-bigmem-base-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-bigmem-base-3.0.101-108.48.1">kernel-bigmem-base-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-bigmem-devel-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-bigmem-devel-3.0.101-108.48.1">kernel-bigmem-devel-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-default-3.0.101-108.48.1">kernel-default-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-base-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-default-base-3.0.101-108.48.1">kernel-default-base-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-devel-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-default-devel-3.0.101-108.48.1">kernel-default-devel-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-man-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-default-man-3.0.101-108.48.1">kernel-default-man-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-ec2-3.0.101-108.48.1">kernel-ec2-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-base-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-ec2-base-3.0.101-108.48.1">kernel-ec2-base-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ec2-devel-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-ec2-devel-3.0.101-108.48.1">kernel-ec2-devel-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pae-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-pae-3.0.101-108.48.1">kernel-pae-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pae-base-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-pae-base-3.0.101-108.48.1">kernel-pae-base-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-pae-devel-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-pae-devel-3.0.101-108.48.1">kernel-pae-devel-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ppc64-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-ppc64-3.0.101-108.48.1">kernel-ppc64-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ppc64-base-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-ppc64-base-3.0.101-108.48.1">kernel-ppc64-base-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-ppc64-devel-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-ppc64-devel-3.0.101-108.48.1">kernel-ppc64-devel-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-source-3.0.101-108.48.1">kernel-source-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-syms-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-syms-3.0.101-108.48.1">kernel-syms-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-trace-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-trace-3.0.101-108.48.1">kernel-trace-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-trace-base-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-trace-base-3.0.101-108.48.1">kernel-trace-base-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-trace-devel-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-trace-devel-3.0.101-108.48.1">kernel-trace-devel-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-xen-3.0.101-108.48.1">kernel-xen-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-base-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-xen-base-3.0.101-108.48.1">kernel-xen-base-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-xen-devel-3.0.101-108.48.1">
      <FullProductName ProductID="kernel-xen-devel-3.0.101-108.48.1">kernel-xen-devel-3.0.101-108.48.1</FullProductName>
    </Branch>
    <Relationship ProductReference="kernel-bigmem-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.48.1">kernel-bigmem-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-bigmem-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.48.1">kernel-bigmem-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-bigmem-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.48.1">kernel-bigmem-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.48.1">kernel-default-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.48.1">kernel-default-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.48.1">kernel-default-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.48.1">kernel-default-man-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.48.1">kernel-ec2-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.48.1">kernel-ec2-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.48.1">kernel-ec2-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.48.1">kernel-pae-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.48.1">kernel-pae-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.48.1">kernel-pae-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.48.1">kernel-ppc64-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.48.1">kernel-ppc64-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.48.1">kernel-ppc64-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.48.1">kernel-source-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.48.1">kernel-syms-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.48.1">kernel-trace-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.48.1">kernel-trace-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.48.1">kernel-trace-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.48.1">kernel-xen-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.48.1">kernel-xen-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.48.1">kernel-xen-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-bigmem-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.48.1">kernel-bigmem-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-bigmem-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.48.1">kernel-bigmem-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-bigmem-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.48.1">kernel-bigmem-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.48.1">kernel-default-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.48.1">kernel-default-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.48.1">kernel-default-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.48.1">kernel-default-man-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.48.1">kernel-ec2-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.48.1">kernel-ec2-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ec2-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.48.1">kernel-ec2-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.48.1">kernel-pae-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.48.1">kernel-pae-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-pae-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.48.1">kernel-pae-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.48.1">kernel-ppc64-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.48.1">kernel-ppc64-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-ppc64-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.48.1">kernel-ppc64-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.48.1">kernel-source-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.48.1">kernel-syms-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.48.1">kernel-trace-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.48.1">kernel-trace-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-trace-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.48.1">kernel-trace-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.48.1">kernel-xen-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-base-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.48.1">kernel-xen-base-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-xen-devel-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.48.1">kernel-xen-devel-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-docs-3.0.101-108.48.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Software Development Kit 11 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.48.1">kernel-docs-3.0.101-108.48.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.</Note>
    </Notes>
    <CVE>CVE-2017-5715</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.48.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.7</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:N/C:C/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.1</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181368-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5715.html</URL>
        <Description>CVE-2017-5715</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1068032</URL>
        <Description>SUSE Bug 1068032</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074562</URL>
        <Description>SUSE Bug 1074562</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074578</URL>
        <Description>SUSE Bug 1074578</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074701</URL>
        <Description>SUSE Bug 1074701</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074741</URL>
        <Description>SUSE Bug 1074741</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074919</URL>
        <Description>SUSE Bug 1074919</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1075006</URL>
        <Description>SUSE Bug 1075006</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1075007</URL>
        <Description>SUSE Bug 1075007</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1075262</URL>
        <Description>SUSE Bug 1075262</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1075419</URL>
        <Description>SUSE Bug 1075419</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1076115</URL>
        <Description>SUSE Bug 1076115</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1076372</URL>
        <Description>SUSE Bug 1076372</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1076606</URL>
        <Description>SUSE Bug 1076606</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1078353</URL>
        <Description>SUSE Bug 1078353</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1080039</URL>
        <Description>SUSE Bug 1080039</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087887</URL>
        <Description>SUSE Bug 1087887</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087939</URL>
        <Description>SUSE Bug 1087939</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1088147</URL>
        <Description>SUSE Bug 1088147</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1089055</URL>
        <Description>SUSE Bug 1089055</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091815</URL>
        <Description>SUSE Bug 1091815</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1095735</URL>
        <Description>SUSE Bug 1095735</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1102517</URL>
        <Description>SUSE Bug 1102517</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1105108</URL>
        <Description>SUSE Bug 1105108</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1126516</URL>
        <Description>SUSE Bug 1126516</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1173489</URL>
        <Description>SUSE Bug 1173489</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1178658</URL>
        <Description>SUSE Bug 1178658</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1201457</URL>
        <Description>SUSE Bug 1201457</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1201877</URL>
        <Description>SUSE Bug 1201877</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203236</URL>
        <Description>SUSE Bug 1203236</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.</Note>
    </Notes>
    <CVE>CVE-2017-5753</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.48.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:C/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.6</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181368-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2017-5753.html</URL>
        <Description>CVE-2017-5753</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1068032</URL>
        <Description>SUSE Bug 1068032</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074562</URL>
        <Description>SUSE Bug 1074562</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074578</URL>
        <Description>SUSE Bug 1074578</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074701</URL>
        <Description>SUSE Bug 1074701</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1075006</URL>
        <Description>SUSE Bug 1075006</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1075419</URL>
        <Description>SUSE Bug 1075419</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1075748</URL>
        <Description>SUSE Bug 1075748</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1080039</URL>
        <Description>SUSE Bug 1080039</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087084</URL>
        <Description>SUSE Bug 1087084</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087939</URL>
        <Description>SUSE Bug 1087939</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1089055</URL>
        <Description>SUSE Bug 1089055</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1136865</URL>
        <Description>SUSE Bug 1136865</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1178658</URL>
        <Description>SUSE Bug 1178658</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1201877</URL>
        <Description>SUSE Bug 1201877</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209547</URL>
        <Description>SUSE Bug 1209547</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in git commit f67b15037a7a50c57f72e69a6d59941ad90a0f0f.</Note>
    </Notes>
    <CVE>CVE-2018-1000199</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.48.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.1</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181368-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2018-1000199.html</URL>
        <Description>CVE-2018-1000199</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1089895</URL>
        <Description>SUSE Bug 1089895</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1090036</URL>
        <Description>SUSE Bug 1090036</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted system calls.</Note>
    </Notes>
    <CVE>CVE-2018-10675</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.48.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>7.2</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181368-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2018-10675.html</URL>
        <Description>CVE-2018-10675</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087082</URL>
        <Description>SUSE Bug 1087082</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1091755</URL>
        <Description>SUSE Bug 1091755</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1115893</URL>
        <Description>SUSE Bug 1115893</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.</Note>
    </Notes>
    <CVE>CVE-2018-3639</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-bigmem-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-default-man-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ec2-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-pae-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-ppc64-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-source-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-syms-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-trace-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 11 SP4:kernel-xen-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-bigmem-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-default-man-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ec2-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-pae-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-ppc64-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-source-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-syms-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-trace-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-base-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 11 SP4:kernel-xen-devel-3.0.101-108.48.1</ProductID>
        <ProductID>SUSE Linux Enterprise Software Development Kit 11 SP4:kernel-docs-3.0.101-108.48.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.3</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2018/suse-su-20181368-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2018-3639.html</URL>
        <Description>CVE-2018-3639</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1074701</URL>
        <Description>SUSE Bug 1074701</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1085235</URL>
        <Description>SUSE Bug 1085235</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1085308</URL>
        <Description>SUSE Bug 1085308</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087078</URL>
        <Description>SUSE Bug 1087078</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1087082</URL>
        <Description>SUSE Bug 1087082</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1092631</URL>
        <Description>SUSE Bug 1092631</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1092885</URL>
        <Description>SUSE Bug 1092885</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1094912</URL>
        <Description>SUSE Bug 1094912</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1098813</URL>
        <Description>SUSE Bug 1098813</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1100394</URL>
        <Description>SUSE Bug 1100394</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1102640</URL>
        <Description>SUSE Bug 1102640</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1105412</URL>
        <Description>SUSE Bug 1105412</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1111963</URL>
        <Description>SUSE Bug 1111963</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1172781</URL>
        <Description>SUSE Bug 1172781</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1172782</URL>
        <Description>SUSE Bug 1172782</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1172783</URL>
        <Description>SUSE Bug 1172783</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1173489</URL>
        <Description>SUSE Bug 1173489</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1178658</URL>
        <Description>SUSE Bug 1178658</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1201877</URL>
        <Description>SUSE Bug 1201877</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1215674</URL>
        <Description>SUSE Bug 1215674</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
