SUSE-IU-2023:157-1
SUSE Image
security@suse.de
SUSE Security Team
SUSE Image SUSE-IU-2023:157-1
Interim
1
1
2023-10-10T07:16:43Z
current
2023-03-10T01:00:00Z
2023-03-10T01:00:00Z
cve-database/bin/generate-cvrf-publiccloud.pl
2021-02-18T01:00:00Z
Image update for SUSE-IU-2023:157-1 / google/sles-15-sp4-chost-byos-v20230310-x86-64
This image update for google/sles-15-sp4-chost-byos-v20230310-x86-64 contains the following changes:
Package c-ares was updated:
- Update to version 1.19.0 Security:
* Low. Stack overflow in ares_set_sortlist() which is used
during c-ares initialization and typically provided by an
administrator and not an end user.
(bsc#1208067, CVE-2022-4904)
Changes:
* Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
specifying a custom hosts file location.
Bug fixes:
* Fix memory leak in reading /etc/hosts when using localhost
fallback.
* Fix chain building c-ares when libresolv is already included by
another project.
* File lookup should not immediately abort as there may be other
tries due to search criteria.
* Asterisks should be allowed in host validation as CNAMEs may
reference wildcard domains.
* AutoTools build system referenced bad STDC_HEADERS macro.
* Even if one address class returns a failure for
ares_getaddrinfo() we should still return the results we have.
* Fix ares_getaddrinfo() numerical address resolution with
AF_UNSPEC
* Fix tools and help information.
* Various documentation fixes and cleanups.
* Add include guards to ares_data.h
* c-ares could try to exceed maximum number of iovec entries
supported by system.
* The RFC6761 6.3 states localhost subdomains must be offline too
- update to 1.18.1. Changes since 1.17.2:
* Allow '/' as a valid character for a returned name for
CNAME in-addr.arpa delegation
* no longer forwards requests for localhost resolution per RFC6761
* During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
that the search process will continue to the next domain
in the search.
* Provide ares_nameser.h as a public interface as needed by NodeJS
* Add support for URI(Uniform Resource Identifier) records via
ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed
- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
(c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)
- update to 1.17.2:
Security:
* When building c-ares with CMake, the RANDOM_FILE would not be set
and therefore downgrade to the less secure random number generator
it would cause a crash
* Expand number of escaped characters in DNS replies as per
RFC1035 5.1 to prevent spoofing follow-up
(bsc#1188881, CVE-2021-3672)
* Perform validation on hostnames to prevent possible XSS
due to applications not performing valiation themselves
Changes:
* ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
Bug fixes:
* Building tests should not force building of static libraries except on Windows
* Relative headers must use double quotes to prevent pulling in a system library
for details see,
https://c-ares.haxx.se/changelog.html#1_17_2
- update to 1.17.1:
Travis: add iOS target built with CMake (#378)
Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
- fix build
External projects were using non-public header ares_dns.h, make public again (#376)
It appears some outside projects were relying on macros in ares_dns.h, even
though it doesn't appear that header was ever meant to be public. That said,
we don't want to break external integrators so we should distribute this header
again.
- note that so versioning has moved to configure.ac
- note about 1.17.1
- fix sed gone wrong
autotools cleanup (#372)
* buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)
Package curl was updated:
- Security Fix: [bsc#1207992, CVE-2023-23916] * HTTP multi-header compression denial of service
* Add curl-CVE-2023-23916.patch
- Security Fixes:
* HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
* HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
* Add curl-CVE-2023-23914-23915.patch
Package dracut was updated:
- Update to version 055+suse.331.g05b9ccb7: * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
* fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
* fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
* fix(nfs): chown using rpc default group (bsc#1204929)
Package gnutls was updated:
- libgnutls: Increase the limit of TLS PSK usernames from 128 to 65535 characters. [bsc#1208237, jsc#PED-1562]
* Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
* Add gnutls-increase-TLS-PSK-username-limit.patch
- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
* Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch
- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
* Add gnutls-FIPS-jitterentropy-threadsafe.patch
- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
* Rebase patches with the version submitted upstream.
* Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
* Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch
- Security Fix: [bsc#1208143, CVE-2023-0361]
* Bleichenbacher oracle in TLS RSA key exchange
* Add gnutls-CVE-2023-0361.patch
Package google-guest-agent was updated:
- Bump go API version to 1.18 (bsc#1208723) + Address CVE-2021-38297 and CVE-2022-23806
- Update to version 20230221.00
* Allow a comment part of a pub ssh key to have an arbitrary format (#198)
+ Split GetUserKey() into two functions: get and validate
+ Correct the name of ValidateUser func as it validates only users
+ Update tests
* Update OWNERS (#201)
- from version 20230207.00
* Update OWNERS file (#199)
- Update to version 20230112.00
* Updating logging module so cloud logs are flushed prior to exit (#196)
* Windows: retry adding MDS route (#194)
- Update to version 20221109.00
* Validate user key for whitespace chars (#188)
- from version 20221107.00
* Fix typo with wsfc agent (#189)
- from version 20221104.00
* Updates to gce-workload-cert-refresh (#186)
- from version 20221025.00
* Add workload cert refresh to preset (#185)
- Update to version 20221018.00
* Write workload cert status file (#184)
- from version 20221017.00
* Update workload_cert permissions (#180)
- Update to version 20220927.00
* Workload certificate refresh (#182)
- Update to version 20220824.00
* Workload certs (#177)
- from version 20220823.00
* add members to OWNERS (#178)
* Expired key tests (#176)
* correct expired key handling (#175)
- avoid bashism in post-install scripts (bsc#1195391)
Package google-guest-configs was updated:
- Add nvme-cli to Requires (bsc#1204068, bsc#1204091)- Update to version 20220211.00 (bsc#1195437, bsc#1195438)
* Set NVMe-PD IO timeout to 4294967295. (#32)
Package google-osconfig-agent was updated:
- Bump go API version to 1.18 (bsc#1208723) + Address CVE-2021-38297 and CVE-2022-23806
- Update to version 20230222.00
* Remove Debian 9 from e2e tests image list (#460)
- from version 20230217.00
* Update OWNERS (#458)
- from version 20230208.00
* Fix the error in the `copy_file_from_bucket.yaml` example. (#456)
- from version 20230202.00
* Update owners file. (#455)
- from version 20230123.00
* Call FQDN (#454)
- Update to version 20221214.00
* Close clients that are not passed anywhere (#450)
- Update to version 20221013.01
* Don't print raw pointer data. (#446)
- from version 20221013.00
* Delete yum transaction files if created. (#445)
- Update to version 20220829.00
* Fix exclude packages field processing (#440)
- from version 20220824.00
* Check for exclusive patches. (#442)
Package jitterentropy was updated:
Package kdump was updated:
- run kdump.service only after kdump-early.service (bsc#1196335)- don't skip infiniband interfaces (bsc#1186745)
(not a complete fix, requires a patch in dracut as well)
Package kernel-default was updated:
- of/address: Return an error when no valid dma-ranges are found (git-fixes).
- usb: gadget: f_hid: fix refcount leak on error path (git-fixes).
- commit 787429a
- cifs: do not include page data when checking signature
(git-fixes).
- commit 371ed21
- net: sched: fix race condition in qdisc_graft() (CVE-2023-0590
bsc#1207795).
- net_sched: add __rcu annotation to netdev->qdisc (CVE-2023-0590
bsc#1207795).
- commit 37e8915
- usb: gadget: f_hid: fix f_hidg lifetime vs cdev (git-fixes).
- commit b8e6a95
- Remove duplicate Git-commit tag in patch file
- commit e53c839
- nvmet-auth: add missing goto in nvmet_setup_auth() (bsc#1207050
CVE-2023-0122).
- commit bf95e5e
- net: sched: atm: dont intepret cls results when asked to drop
(bsc#1207125 CVE-2023-23455).
- commit 7c3cc04
- blacklist.conf: kABI
- commit 2978c58
- net: sched: cbq: dont intepret cls results when asked to drop
(bsc#1207036 CVE-2023-23454).
- commit 6b9dae7
- scsi: storvsc: Correct reporting of Hyper-V I/O size limits
(git-fixes).
- commit 7c7cc75
- drm/hyperv: Add error message for fb size greater than allocated
(git-fixes).
- commit cafd34d
- RDMA/core: Fix ib block iterator counter overflow (bsc#1207878).
- commit 6de96d2
- Delete for regression addressed (bsc#1207933) patches.suse/0029-zram-do-not-lookup-algorithm-in-backends-table.patch.
- commit bebd4c7
- net/mlx5: Dynamically resize flow counters query buffer
(bsc#1195175).
- commit 6a283ad
- IB/hfi1: Remove user expected buffer invalidate race (git-fixes)
- commit 02f72aa
- IB/hfi1: Immediately remove invalid memory from hardware (git-fixes)
- commit 9a77ebc
- IB/hfi1: Fix expected receive setup error exit issues (git-fixes)
- commit b274778
- IB/hfi1: Reserve user expected TIDs (git-fixes)
- commit fe650ef
- IB/hfi1: Reject a zero-length user expected buffer (git-fixes)
- commit 09b161d
- RDMA/core: Fix ib block iterator counter overflow (git-fixes)
- commit dd46f2f
- RDMA/rxe: Prevent faulty rkey generation (git-fixes)
- commit d9dabe6
- RDMA/mlx5: Fix validation of max_rd_atomic caps for DC (git-fixes)
- commit 3feb1bc
- Update kabi files from 5.14.21-150400.24.41.1 (January 2023 update).
- commit 2e08d61
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
(bsc#1207842).
- commit a65c09c
- blacklist.conf: kABI
- commit f264e1b
- blacklist.conf: kABI
- commit a5843b9
- blacklist.conf: kABI
- commit 61ccddd
- RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (git-fixes)
- commit 06d39b7
- RDMA/srp: Move large values to a new enum for gcc13 (git-fixes)
- commit 1322a9f
- arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI
(git-fixes).
- ARM: dts: vf610: Fix pca9548 i2c-mux node names (git-fixes).
- ARM: dts: imx: Fix pca9547 i2c-mux node name (git-fixes).
- dmaengine: imx-sdma: Fix a possible memory leak in
sdma_transfer_init (git-fixes).
- HID: playstation: sanity check DualSense calibration data
(git-fixes).
- extcon: usbc-tusb320: fix kernel-doc warning (git-fixes).
- selftests: Provide local define of __cpuid_count() (git-fixes).
- selftests/vm: remove ARRAY_SIZE define from individual tests
(git-fixes).
- tools: fix ARRAY_SIZE defines in tools and selftests hdrs
(git-fixes).
- commit fe9cb53
- x86/hyperv: Remove unregister syscore call from Hyper-V cleanup
(git-fixes).
- commit 905c5a6
- hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap()
(git-fixes).
- commit aae275a
- x86/hyperv: Restore VP assist page after cpu offlining/onlining
(git-fixes).
- commit bd7d55d
- Update patch tags
- patches.suse/watchdog-diag288_wdt-do-not-use-stack-buffers-for-ha.patch
- patches.suse/watchdog-diag288_wdt-fix-__diag288-inline-assembly.patch
- commit 9dc3955
- powerpc/kexec_file: Count hot-pluggable memory in FDT estimate
(bsc#1194869).
- powerpc/64s/radix: Fix RWX mapping with relocated kernel
(bsc#1194869).
- powerpc/64s/radix: Fix crash with unaligned relocated kernel
(bsc#1194869).
- powerpc/kexec_file: Fix division by zero in extra size
estimation (bsc#1194869).
- powerpc: move __end_rodata to cover arch read-only sections
(bsc#1194869).
- powerpc/vmlinux.lds: Add an explicit symbol for the SRWX
boundary (bsc#1194869).
- powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page
aligned (bsc#1194869).
- commit 9e11a71
- powerpc/64s: Fix local irq disable when PMIs are disabled
(bsc#1195655 ltc#1195655 git-fixes).
- commit 42a147d
- usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints
(git-fixes).
- usb: gadget: f_fs: Fix unbalanced spinlock in
__ffs_ep0_queue_wait (git-fixes).
- usb: dwc3: qcom: enable vbus override when in OTG dr-mode
(git-fixes).
- vc_screen: move load of struct vc_data pointer in vcs_read()
to avoid UAF (git-fixes).
- serial: 8250_dma: Fix DMA Rx rearm race (git-fixes).
- iio: imu: fxos8700: fix MAGN sensor scale and unit (git-fixes).
- iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN
(git-fixes).
- iio: imu: fxos8700: fix failed initialization ODR mode
assignment (git-fixes).
- iio: imu: fxos8700: fix incorrect ODR mode readback (git-fixes).
- iio: hid: fix the retval in gyro_3d_capture_sample (git-fixes).
- iio: hid: fix the retval in accel_3d_capture_sample (git-fixes).
- iio:adc:twl6030: Enable measurement of VAC (git-fixes).
- iio: imu: fxos8700: fix ACCEL measurement range selection
(git-fixes).
- iio: imu: fxos8700: fix IMU data bits returned to user space
(git-fixes).
- iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels
readback (git-fixes).
- iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback
(git-fixes).
- iio: imu: fxos8700: fix map label of channel type to MAGN sensor
(git-fixes).
- iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
(git-fixes).
- iio: adc: berlin2-adc: Add missing of_node_put() in error path
(git-fixes).
- iio: adc: stm32-dfsdm: fill module aliases (git-fixes).
- fpga: stratix10-soc: Fix return value check in
s10_ops_write_init() (git-fixes).
- fbcon: Check font dimension limits (git-fixes).
- commit 0505fbb
- Move upstreamed net patch into sorted section
- commit 6bb42b5
- efi: fix potential NULL deref in efi_mem_reserve_persistent
(git-fixes).
- drm/i915/adlp: Fix typo for reference clock (git-fixes).
- drm/i915: Fix potential bit_17 double-free (git-fixes).
- drm/vc4: hdmi: make CEC adapter name unique (git-fixes).
- commit 0b0e115
- watchdog: diag288_wdt: do not use stack buffers for hardware
data (bsc#1207497).
- commit 70827db
- watchdog: diag288_wdt: fix __diag288() inline assembly
(bsc#1207497).
- commit a36f04c
- btrfs: fix race between quota rescan and disable leading to
NULL pointer deref (bsc#1207158).
- btrfs: fix race between quota enable and quota rescan ioctl
(bsc#1207158).
- commit df99a9d
- btrfs: qgroup: remove outdated TODO comments (bsc#1207158).
- commit 0780574
- btrfs: qgroup: remove duplicated check in adding qgroup
relations (bsc#1207158).
- commit 672de9e
- btrfs: move QUOTA_ENABLED check to rescan_should_stop from
btrfs_qgroup_rescan_worker (bsc#1207158).
- commit 8a7e537
- ata: libata: Fix sata_down_spd_limit() when no link speed is
reported (git-fixes).
- can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
(git-fixes).
- net: phy: meson-gxl: Add generic dummy stubs for MMD register
access (git-fixes).
- netrom: Fix use-after-free caused by accept on already connected
socket (git-fixes).
- net: phy: dp83822: Fix null pointer access on DP83825/DP83826
devices (git-fixes).
- arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX
(git-fixes).
- bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
(git-fixes).
- netrom: Fix use-after-free of a listening socket (git-fixes).
- commit 27bf187
- ALSA: hda/realtek: Add Acer Predator PH315-54 (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs, speaker don't work
for a HP platform (git-fixes).
- commit 1379d54
- ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device
after use (git-fixes).
- ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device
after use (git-fixes).
- ALSA: hda/via: Avoid potential array out-of-bound in
add_secret_dac_path() (git-fixes).
- firewire: fix memory leak for payload of request subaction to
IEC 61883-1 FCP region (git-fixes).
- drm/i915/selftest: fix intel_selftest_modify_policy argument
types (git-fixes).
- arm64: dts: qcom: msm8992-libra: Fix the memory map (git-fixes).
- drm/amd/display: fix issues with driver unload (git-fixes).
- ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets
(git-fixes).
- ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with
AC'97 CODEC (git-fixes).
- ASoC: fsl_micfil: Correct the number of steps on SX controls
(git-fixes).
- cpufreq: armada-37xx: stop using 0 as NULL pointer (git-fixes).
- cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
(git-fixes).
- platform/x86: asus-nb-wmi: Add alternate mapping for
KEY_SCREENLOCK (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the CSL Panther
Tab HD (git-fixes).
- drm: Add orientation quirk for Lenovo ideapad D330-10IGL
(git-fixes).
- r8152: add vendor/device ID pair for Microsoft Devkit
(git-fixes).
- net: usb: cdc_ether: add support for Thales Cinterion PLS62-W
modem (git-fixes).
- spi: spidev: remove debug messages that access spidev->spi
without locking (git-fixes).
- drm/amdgpu: complete gfxoff allow signal during suspend without
delay (git-fixes).
- i2c: mv64xxx: Add atomic_xfer method to driver (git-fixes).
- i2c: mv64xxx: Remove shutdown method from driver (git-fixes).
- thermal/core: Remove duplicate information when an error occurs
(git-fixes).
- arm64: dts: qcom: msm8992-libra: Add CPU regulators (git-fixes).
- commit f0fb46a
- drm/amd/display: Take emulated dc_sink into account for HDCP
(bsc#1207734).
- commit bbfc833
- scsi: Revert "/scsi: core: map PQ=1, PDT=other values to
SCSI_SCAN_TARGET_PRESENT"/ (git-fixes).
- commit 03470cd
- scsi: hpsa: Fix allocation size for scsi_host_alloc()
(git-fixes).
- scsi: ufs: core: Enable link lost interrupt (git-fixes).
- scsi: mpt3sas: Remove scsi_dma_map() error messages (git-fixes).
- scsi: ufs: Stop using the clock scaling lock in the error
handler (git-fixes).
- commit 280e1ff
- blacklist.conf: add drivers/video/fbdev/hyperv_fb.c
This branch defaults to DRM.
- commit 35643e4
- ipmi:ssif: Add 60ms time internal between write retries
(bsc#1206459).
- ipmi:ssif: Increase the message retry time (bsc#1206459).
- commit 05eee5d
- mm: /proc/pid/smaps_rollup: fix no vma's null-deref
(bsc#1207769).
- commit 20e2b2f
- btrfs: fix trace event name typo for FLUSH_DELAYED_REFS
(git-fixes).
- commit db40f07
- tracing/hist: Fix issue of losting command info in error_log
(git-fixes).
- commit 3ae8811
- tracing: Fix race where histograms can be called before the
event (git-fixes).
- commit 3fe5f69
- tracing: Use alignof__(struct {type b;}) instead of offsetof()
(git-fixes).
- commit 2e96b05
- blacklist.conf: add not-relevant ftrace fixes
- commit 2ba4363
- blacklist.conf: add commits for tracking skb drop reasons
- commit f7cc13a
- blacklist.conf: add a move of trace_pid_list logic
- commit 8c14765
- tracing: Fix mismatched comment in __string_len (git-fixes).
- commit ed647e2
- module: Don't wait for GOING modules (bsc#1196058, bsc#1186449,
bsc#1204356, bsc#1204662).
- commit 35ea4d8
- Revert "/Input: synaptics - switch touchpad on HP Laptop
15-da3001TU to RMI mode"/ (git-fixes).
- commit c8ef0bf
- block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (git-fixes).
- commit ff23887
- Delete
patches.suse/0004-block-check-minor-range-in-device_add_disk.patch.
- commit 89a42b5
- blacklist.conf: add git-fix commit which won't be backported
- commit 1012afa
- loop: Fix the max_loop commandline argument treatment when it
is set to 0 (git-fixes).
- block, bfq: fix possible uaf for 'bfqq->bic' (git-fixes).
- dm thin: Use last transaction's pmd->root when commit failed
(git-fixes).
- dm thin: resume even if in FAIL mode (git-fixes).
- dm cache: set needs_check flag after aborting metadata
(git-fixes).
- dm cache: Fix ABBA deadlock between shrink_slab and
dm_cache_metadata_abort (git-fixes).
- dm thin: Fix ABBA deadlock between shrink_slab and
dm_pool_abort_metadata (git-fixes).
- dm integrity: Fix UAF in dm_integrity_dtr() (git-fixes).
- dm cache: Fix UAF in destroy() (git-fixes).
- dm clone: Fix UAF in clone_dtr() (git-fixes).
- dm thin: Fix UAF in run_timer_softirq() (git-fixes).
- blktrace: Fix output non-blktrace event when blk_classic option
enabled (git-fixes).
- block: mq-deadline: Fix dd_finish_request() for zoned devices
(git-fixes).
- elevator: update the document of elevator_switch (git-fixes).
- bfq: fix waker_bfqq inconsistency crash (git-fixes).
- dm integrity: clear the journal on suspend (git-fixes).
- dm integrity: flush the journal on suspend (git-fixes).
- dm ioctl: fix misbehavior if list_versions races with module
loading (git-fixes).
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
(git-fixes).
- blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init()
(git-fixes).
- md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (git-fixes).
- bcache: fix set_at_max_writeback_rate() for multiple attached
devices (git-fixes).
- blk-throttle: prevent overflow while calculating wait time
(git-fixes).
- nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
(git-fixes).
- md: Flush workqueue md_rdev_misc_wq in md_alloc() (git-fixes).
- zram: do not lookup algorithm in backends table (git-fixes).
- block: ensure iov_iter advances for added pages (git-fixes).
- drivers:md:fix a potential use-after-free bug (git-fixes).
- null_blk: fix ida error handling in null_add_dev() (git-fixes).
- md: Notify sysfs sync_completed in md_reap_sync_thread()
(git-fixes).
- dm raid: fix address sanitizer warning in raid_resume
(git-fixes).
- dm raid: fix address sanitizer warning in raid_status
(git-fixes).
- dm writecache: set a default MAX_WRITEBACK_JOBS (git-fixes).
- block/bio: remove duplicate append pages code (git-fixes).
- block: fix infinite loop for invalid zone append (git-fixes).
- nbd: fix io hung while disconnecting device (git-fixes).
- nbd: fix race between nbd_alloc_config() and module removal
(git-fixes).
- nbd: call genl_unregister_family() first in nbd_cleanup()
(git-fixes).
- md: protect md_unregister_thread from reentrancy (git-fixes).
- nbd: Fix hung on disconnect request if socket is closed before
(git-fixes).
- block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (git-fixes).
- dm: requeue IO if mapping table not yet available (git-fixes).
- dm ioctl: prevent potential spectre v1 gadget (git-fixes).
- Revert "/Revert "/block, bfq: honor already-setup queue merges"/"/
(git-fixes).
- bfq: fix use-after-free in bfq_dispatch_request (git-fixes).
- block, bfq: don't move oom_bfqq (git-fixes).
- block/bfq_wf2q: correct weight to ioprio (git-fixes).
- dm: fix alloc_dax error handling in alloc_dev (git-fixes).
- dm space map common: add bounds check to sm_ll_lookup_bitmap()
(git-fixes).
- dm btree: add a defensive bounds check to insert_at()
(git-fixes).
- block: check minor range in device_add_disk() (git-fixes).
- virtio-blk: modify the value type of num in virtio_queue_rq()
(git-fixes).
- swim3: add missing major.h include (git-fixes).
- commit 4a07308
- block: use bdev_get_queue() in bio.c (git-fixes).
- Refresh for the above change,
patches.suse/block-fix-rq-qos-breakage-from-skipping-rq_qos_done_.patch.
- commit c3aca76
- blacklist.conf: add git-fixes commits which won't be backported
- commit 6443e7d
- Update patches.suse/xfs-get-root-inode-correctly-at-bulkstat.patch
(git-fixes bsc#1207501 ltc#201370).
- commit e6e8484
- Update patches.suse/btrfs-fix-processing-of-delayed-tree-block-refs-duri.patch
(bsc#1206057 bsc#1207506 ltc#201368).
- commit 15be8ec
- Update patches.suse/btrfs-fix-processing-of-delayed-data-refs-during-bac.patch
(bsc#1206056 bsc#1207507 ltc#201367).
- commit 1354bb5
- vfs: make sync_filesystem return errors from ->sync_fs
(git-fixes).
- commit eff9790
- fs: remove __sync_filesystem (git-fixes).
- commit 88736d7
- sctp: fail if no bound addresses can be used for a given scope
(bsc#1206677).
- commit e201f3b
- Update patches.suse/btrfs-send-fix-sending-link-commands-for-existing-fi.patch
(bsc#1206036 bsc#1207500 ltc#201363).
- commit 5345944
- efi: rt-wrapper: Add missing include (git-fixes).
- commit 3d91aef
- mei: me: add meteor lake point M DID (git-fixes).
- USB: serial: option: add Quectel EM05CN modem (git-fixes).
- USB: serial: option: add Quectel EM05CN (SG) modem (git-fixes).
- USB: serial: cp210x: add SCALANCE LPE-9000 device id
(git-fixes).
- USB: serial: option: add Quectel EC200U modem (git-fixes).
- USB: serial: option: add Quectel EM05-G (RS) modem (git-fixes).
- USB: serial: option: add Quectel EM05-G (GR) modem (git-fixes).
- USB: serial: option: add Quectel EM05-G (CS) modem (git-fixes).
- usb: core: hub: disable autosuspend for TI TUSB8041 (git-fixes).
- usb: gadget: f_ncm: fix potential NULL ptr deref in
ncm_bitrate() (git-fixes).
- usb: acpi: add helper to check port lpm capability using acpi
_DSM (git-fixes).
- xhci: Fix null pointer dereference when host dies (git-fixes).
- xhci-pci: set the dma max_seg_size (git-fixes).
- drm/amd/display: Fix set scaling doesn's work (git-fixes).
- drm/i915/display: Check source height is > 0 (git-fixes).
- wifi: mac80211: sdata can be NULL during AMPDU start
(git-fixes).
- nilfs2: fix general protection fault in nilfs_btree_insert()
(git-fixes).
- r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down()
(git-fixes).
- fbdev: omapfb: avoid stack overflow warning (git-fixes).
- virtio_pci: modify ENOENT to EINVAL (git-fixes).
- arm64: efi: Execute runtime services from a dedicated stack
(git-fixes).
- drm/amdgpu: disable runtime pm on several sienna cichlid
cards(v2) (git-fixes).
- drm/amdgpu: drop experimental flag on aldebaran (git-fixes).
- staging: mt7621-dts: change some node hex addresses to lower
case (git-fixes).
- commit bd99d4d
- tracing: Fix infinite loop in tracing_read_pipe on overflowed
print_trace_line (git-fixes).
- commit 2c44713
- tracing: Fix issue of missing one synthetic field (git-fixes).
- commit 3def245
- tracing: Fix possible memory leak in __create_synth_event()
error path (git-fixes).
- commit 6ed0eab
- tracing/hist: Fix out-of-bound write on
'action_data.var_ref_idx' (git-fixes).
- commit 750c560
- tracing/hist: Fix wrong return value in parse_action_params()
(git-fixes).
- commit ebbb4bd
- tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE
(git-fixes).
- commit e866c70
- tracing/probes: Handle system names with hyphens (git-fixes).
- commit 2323e61
- ftrace/x86: Add back ftrace_expected for ftrace bug reports
(git-fixes).
- commit a14379e
- ftrace: Clean comments related to FTRACE_OPS_FL_PER_CPU
(git-fixes).
- commit 8869d2a
- tracing: Add DYNAMIC flag for dynamic events (git-fixes).
- kABI: Preserve TRACE_EVENT_FL values (git-fixes).
- commit f696f09
- IB/mad: Don't call to function that might sleep while in atomic
context (git-fixes).
- commit 1b3cb60
- cifs: remove unused function (bsc#1193629).
- commit dddb552
- cifs: fix return of uninitialized rc in
dfs_cache_update_tgthint() (bsc#1193629).
- commit 107299a
- cifs: handle cache lookup errors different than -ENOENT
(bsc#1193629).
- commit 263d1e1
- cifs: remove duplicate code in __refresh_tcon() (bsc#1193629).
- commit ede0049
- cifs: don't take exclusive lock for updating target hints
(bsc#1193629).
- commit 441f914
- cifs: avoid re-lookups in dfs_cache_find() (bsc#1193629).
- commit 6dbdc1d
- cifs: fix potential deadlock in cache_refresh_path()
(git-fixes).
- commit 4646a4f
- jbd2: use the correct print format (git-fixes).
- commit 34db311
- tracing: Fix warning on variable 'struct trace_array'
(git-fixes).
- commit 771db36
- scsi: tracing: Fix compile error in trace_array calls when
TRACING is disabled (git-fixes).
- commit ac58cae
- tracing: Avoid adding tracer option before update_tracer_options
(git-fixes).
- commit ce3e735
- tracing: Fix sleeping function called from invalid context on
RT kernel (git-fixes).
- commit 52007fe
- tracing: Make tp_printk work on syscall tracepoints (git-fixes).
- commit b728605
- tracing: Have syscall trace events use
trace_event_buffer_lock_reserve() (git-fixes).
- blacklist.conf: Remove the commit from the list
- commit 54d48a6
- tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
(git-fixes).
- commit 954cfad
- blacklist.conf: prerequisites break kABI
- commit ea0d023
- tracing: Have type enum modifications copy the strings
(git-fixes).
- commit fdf4a79
- mt76: fix use-after-free by removing a non-RCU wcid pointer
(git-fixes).
- commit 5bb0d81
- tracing: Have TRACE_DEFINE_ENUM affect trace event types as well
(git-fixes).
- commit 9aa6f06
- tracing/osnoise: Make osnoise_main to sleep for microseconds
(git-fixes).
- commit 31030cc
- tracing: Ensure trace buffer is at least 4096 bytes large
(git-fixes).
- commit d84d209
- tracing: Fix tp_printk option related with
tp_printk_stop_on_boot (git-fixes).
- commit 2d97144
- ath11k: Fix unexpected return buffer manager error for QCA6390
(git-fixes).
- commit fb54c7f
- ath11k_hw_params unremane cal_size (bsc#1199701 CVE-2020-24588).
- commit 042d893
- ath11k_hw_params reinsert deleted members (bsc#1199701
CVE-2020-24588).
- commit 36b3581
- netfilter: nft_payload: incorrect arithmetics when fetching
VLAN header bits (CVE-2023-0179 bsc#1207034).
- commit 3ea68f0
- tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro
(git-fixes).
- commit 1b48195
- tracing: Avoid -Warray-bounds warning for __rel_loc macro
(git-fixes).
- commit 42e71d6
- SUNRPC: Don't dereference xprt->snd_task if it's a cookie
(git-fixes).
- commit b6b2aeb
- tracing: Add '__rel_loc' using trace event macros (git-fixes).
- commit 6bca62f
- tracing: Add trace_event helper macros __string_len() and
__assign_str_len() (git-fixes).
- commit c14bed0
- tracing: Fix a kmemleak false positive in tracing_map
(git-fixes).
- commit de3f801
- tracing: Don't use out-of-sync va_list in event printing
(git-fixes).
- commit cf27dc0
- SUNRPC: Use BIT() macro in rpc_show_xprt_state() (git-fixes).
- commit 1620581
- SUNRPC: Update trace flags (git-fixes).
- commit 491eea9
- blacklist.conf: add a not-relevant ftrace fix
- commit a05a606
- scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM
(bsc#1206006).
- commit f397f8a
- blacklist.conf: Add upstream config paths.
- commit 4a7f4f2
- sched/core: Fix arch_scale_freq_tick() on tickless systems (git-fixes)
- commit cd7192b
- sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (git-fixes)
- commit 3e6177d
- sched/core: Introduce sched_asym_cpucap_active() (git-fixes)
- commit 97e4a68
- sched, cpuset: Fix dl_cpu_busy() panic due to empty (git-fixes)
- commit 18a9947
- wait: Fix __wait_event_hrtimeout for RT/DL tasks (git-fixes)
- commit ad3a9e3
- sched/core: Avoid obvious double update_rq_clock warning (git-fixes)
- commit 97af059
- sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (git-fixes)
- commit b78774a
- sched/tracing: Report TASK_RTLOCK_WAIT tasks as (git-fixes)
- commit 8c13d3e
- sched: Avoid double preemption in __cond_resched_*lock*() (git-fixes)
- commit acf4640
- ath11k_hwparams: hide new member spectral (bsc#1199701
CVE-2020-24588).
- commit 665734d
- Refresh
patches.suse/USB-gadgetfs-Fix-race-between-mounting-and-unmountin.patch.
Now in mainline. Add to sorted section.
- commit 6995158
- kABI workaround for struct acpi_ec (bsc#1207149).
- commit 67b47b6
- ACPI: EC: Fix ECDT probe ordering issues (bsc#1207149).
- ACPI: EC: Fix EC address space handler unregistration
(bsc#1207149).
- ACPICA: Allow address_space_handler Install and _REG execution
as 2 separate steps (bsc#1207149).
- ACPICA: include/acpi/acpixf.h: Fix indentation (bsc#1207149).
- commit 6a8ca13
- Update patches.suse/crypto-dh-implement-FIPS-PCT.patch
(jsc#SLE-21132,bsc#1191256,bsc#1207184).
- commit 0f2985d
- Update patches.suse/crypto-ecdh-implement-FIPS-PCT.patch
(jsc#SLE-21132,bsc#1191256,bsc#1207184).
- commit 65a34a6
- VMCI: Use threaded irqs instead of tasklets (git-fixes).
- gsmi: fix null-deref in gsmi_get_variable (git-fixes).
- misc: fastrpc: Fix use-after-free race condition for maps
(git-fixes).
- misc: fastrpc: Don't remove map on creater_process and
device_release (git-fixes).
- w1: fix WARNING after calling w1_process() (git-fixes).
- w1: fix deadloop in __w1_remove_master_device() (git-fixes).
- driver core: Fix test_async_probe_init saves device in wrong
array (git-fixes).
- staging: vchiq_arm: fix enum vchiq_status return types
(git-fixes).
- serial: atmel: fix incorrect baudrate setup (git-fixes).
- tty: fix possible null-ptr-defer in spk_ttyio_release
(git-fixes).
- serial: pch_uart: Pass correct sg to dma_unmap_sg() (git-fixes).
- tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX
FIFO buffer (git-fixes).
- USB: misc: iowarrior: fix up header size for
USB_DEVICE_ID_CODEMERCS_IOW100 (git-fixes).
- usb: host: ehci-fsl: Fix module alias (git-fixes).
- usb: typec: tcpm: Fix altmode re-registration causes sysfs
create fail (git-fixes).
- usb: gadget: g_webcam: Send color matching descriptor per frame
(git-fixes).
- usb: typec: altmodes/displayport: Fix pin assignment calculation
(git-fixes).
- usb: typec: altmodes/displayport: Add pin assignment helper
(git-fixes).
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
(git-fixes).
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
(git-fixes).
- usb: xhci: Check endpoint is valid before dereferencing it
(git-fixes).
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
(git-fixes).
- usb: cdns3: remove fetched trb from cache before dequeuing
(git-fixes).
- thunderbolt: Use correct function to calculate maximum USB3
link rate (git-fixes).
- thunderbolt: Do not call PM runtime functions in
tb_retimer_scan() (git-fixes).
- thunderbolt: Do not report errors if on-board retimers are found
(git-fixes).
- pinctrl: rockchip: fix mux route data for rk3568 (git-fixes).
- mmc: sunxi-mmc: Fix clock refcount imbalance during unbind
(git-fixes).
- mmc: sdhci-esdhc-imx: correct the tuning start tap and step
setting (git-fixes).
- PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe()
(git-fixes).
- soc: imx8m: Fix incorrect check for of_clk_get_by_name()
(git-fixes).
- firmware: arm_scmi: Harden shared memory access in
fetch_notification (git-fixes).
- firmware: arm_scmi: Harden shared memory access in
fetch_response (git-fixes).
- memory: mvebu-devbus: Fix missing clk_disable_unprepare in
mvebu_devbus_probe() (git-fixes).
- memory: atmel-sdramc: Fix missing clk_disable_unprepare in
atmel_ramc_probe() (git-fixes).
- memory: tegra: Remove clients SID override programming
(git-fixes).
- drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix
(git-fixes).
- drm/amd/display: Calculate output_color_space after pixel
encoding adjustment (git-fixes).
- drm/panfrost: fix GENERIC_ATOMIC64 dependency (git-fixes).
- drm/i915: re-disable RC6p on Sandy Bridge (git-fixes).
- dmaengine: xilinx_dma: call of_node_put() when breaking out
of for_each_child_of_node() (git-fixes).
- dmaengine: Fix double increment of client_count in
dma_chan_get() (git-fixes).
- dmaengine: tegra210-adma: fix global intr clear (git-fixes).
- phy: phy-can-transceiver: Skip warning if no "/max-bitrate"/
(git-fixes).
- phy: Revert "/phy: qualcomm: usb28nm: Add MDM9607 init sequence"/
(git-fixes).
- phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare()
in rockchip_usb2phy_power_on() (git-fixes).
- phy: ti: fix Kconfig warning and operator precedence
(git-fixes).
- Revert "/wifi: mac80211: fix memory leak in ieee80211_if_add()"/
(git-fixes).
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid
(git-fixes).
- wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices
(git-fixes).
- virtio-net: correctly enable callback during start_xmit
(git-fixes).
- net: mdio: validate parameter addr in mdiobus_get_phy()
(git-fixes).
- net: usb: sr9700: Handle negative len (git-fixes).
- net: wan: Add checks for NULL for utdm in undo_uhdlc_init and
unmap_si_regs (git-fixes).
- net: nfc: Fix use-after-free in local_cleanup() (git-fixes).
- l2tp: Don't sleep and disable BH under writer-side
sk_callback_lock (git-fixes).
- commit b75f08a
- comedi: adv_pci1760: Fix PWM instruction handling (git-fixes).
- ACPI: PRM: Check whether EFI runtime is available (git-fixes).
- ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60
(git-fixes).
- Revert "/ARM: dts: armada-39x: Fix compatible string for gpios"/
(git-fixes).
- Revert "/ARM: dts: armada-38x: Fix compatible string for gpios"/
(git-fixes).
- arm64: dts: qcom: msm8992: Don't use sfpb mutex (git-fixes).
- arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC
polarity (git-fixes).
- ARM: imx: add missing of_node_put() (git-fixes).
- arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux (git-fixes).
- ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts'
(git-fixes).
- ARM: dts: imx7d-pico: Use 'clock-frequency' (git-fixes).
- ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' (git-fixes).
- Revert "/arm64: dts: meson-sm1-odroid-hc4: disable unused USB
PHY0"/ (git-fixes).
- dmaengine: lgm: Move DT parsing after initialization
(git-fixes).
- dmaengine: ti: k3-udma: Do conditional decrement of
UDMA_CHAN_RT_PEER_BCNT_REG (git-fixes).
- dmaengine: idxd: Do not call DMX TX callbacks during workqueue
disable (git-fixes).
- dmaengine: idxd: Let probe fail when workqueue cannot be enabled
(git-fixes).
- Bluetooth: Fix possible deadlock in rfcomm_sk_state_change
(git-fixes).
- Bluetooth: hci_qca: Fix driver shutdown on closed serdev
(git-fixes).
- commit 5b33587
- Update
patches.suse/HID-check-empty-report_list-in-hid_validate_values.patch
(git-fixes, bsc#1206784).
- commit b88f181
- Update
patches.suse/HID-check-empty-report_list-in-bigben_probe.patch
(git-fixes, bsc#1206784).
- commit dc5fa1c
- Update
patches.suse/HID-betop-check-shape-of-output-reports.patch
(git-fixes, bsc#1207186).
- commit fb93871
- USB: gadgetfs: Fix race between mounting and unmounting
(CVE-2022-4382 bsc#1206258).
- commit 458382c
- git_sort: add usb-linus branch for gregkh/usb
- commit 67c0004
- scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile (git-fixes).
- scsi: snic: Fix possible UAF in snic_tgt_create() (git-fixes).
- scsi: fcoe: Fix transport not deattached when fcoe_if_init()
fails (git-fixes).
- scsi: ipr: Fix WARNING in ipr_init() (git-fixes).
- scsi: scsi_debug: Fix possible name leak in
sdebug_add_host_helper() (git-fixes).
- scsi: fcoe: Fix possible name leak when device_register()
fails (git-fixes).
- scsi: scsi_debug: Fix a warning in resp_report_zones()
(git-fixes).
- scsi: scsi_debug: Fix a warning in resp_verify() (git-fixes).
- scsi: efct: Fix possible memleak in efct_device_init()
(git-fixes).
- scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()
(git-fixes).
- scsi: hpsa: Fix error handling in hpsa_add_sas_host()
(git-fixes).
- scsi: mpt3sas: Fix possible resource leaks in
mpt3sas_transport_port_add() (git-fixes).
- scsi: hpsa: Fix possible memory leak in hpsa_init_one()
(git-fixes).
- scsi: scsi_debug: Fix a warning in resp_write_scat()
(git-fixes).
- scsi: elx: libefc: Fix second parameter type in state callbacks
(git-fixes).
- scsi: core: Fix a race between scsi_done() and scsi_timeout()
(git-fixes).
- commit fd6cfde
- Update patch reference for sound fix (CVE-2023-0266 bsc#1207134)
- commit a076073
- btrfs: join running log transaction when logging new name
(bsc#1207263).
- commit 862de17
- btrfs: fix assertion failure when logging directory key range
item (bsc#1207263).
- commit fdf19d2
- btrfs: prepare extents to be logged before locking a log tree
path (bsc#1207263).
- commit 2e8db4d
- btrfs: remove useless path release in the fast fsync path
(bsc#1207263).
- commit 6542fdf
- btrfs: use single variable to track return value at
btrfs_log_inode() (bsc#1207263).
- commit 801e9e3
- btrfs: avoid inode logging during rename and link when possible
(bsc#1207263).
- commit 8842469
- bnxt_en: add dynamic debug support for HWRM messages
(git-fixes).
- Refresh
patches.suse/bnxt_en-Increase-firmware-message-response-DMA-wait-.patch.
- commit 8e93e3e
- i40e: Disallow ip4 and ip6 l4_4_bytes (git-fixes).
- i40e: Fix not setting default xps_cpus after reset (git-fixes).
- octeontx2-pf: Fix potential memory leak in otx2_init_tc()
(jsc#SLE-24682).
- igb: Allocate MSI-X vector when testing (git-fixes).
- net: tun: Fix use-after-free in tun_detach() (git-fixes).
- i40e: Fix error handling in i40e_init_module() (git-fixes).
- ixgbevf: Fix resource leak in ixgbevf_init_module() (git-fixes).
- qlcnic: fix sleep-in-atomic-context bugs caused by msleep
(git-fixes).
- octeontx2-af: Fix reference count issue in rvu_sdp_init()
(jsc#SLE-24682).
- octeontx2-pf: Add check for devm_kcalloc (git-fixes).
- bnx2x: fix pci device refcount leak in
bnx2x_vf_is_pcie_pending() (git-fixes).
- sfc: fix potential memleak in __ef100_hard_start_xmit()
(git-fixes).
- octeontx2-af: debugsfs: fix pci device refcount leak
(git-fixes).
- net/mlx4: Check retval of mlx4_bitmap_init (git-fixes).
- net: liquidio: simplify if expression (git-fixes).
- net: ena: Fix error handling in ena_init() (git-fixes).
- bnxt_en: Remove debugfs when pci_register_driver failed
(git-fixes).
- net: macvlan: Use built-in RCU list checking (git-fixes).
- net: liquidio: release resources when liquidio driver open
failed (git-fixes).
- net: macvlan: fix memory leaks of macvlan_common_newlink
(git-fixes).
- cxgb4vf: shut down the adapter when t4vf_update_port_info()
failed in cxgb4vf_open() (git-fixes).
- net: cxgb3_main: disable napi when bind qsets failed in
cxgb_up() (git-fixes).
- net: tun: call napi_schedule_prep() to ensure we own a napi
(git-fixes).
- drivers: net: xgene: disable napi when register irq failed in
xgene_enet_open() (git-fixes).
- ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg
to network (git-fixes).
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
(git-fixes).
- bnxt_en: fix potentially incorrect return value for
ndo_rx_flow_steer (git-fixes).
- bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (git-fixes).
- bnxt_en: fix the handling of PCIE-AER (git-fixes).
- bnxt_en: refactor bnxt_cancel_reservations() (git-fixes).
- net: tun: Fix memory leaks of napi_get_frags (git-fixes).
- commit 098df56
- btrfs: stop doing unnecessary log updates during a rename
(bsc#1207263).
- commit af7d282
- btrfs: remove unnecessary NULL check for the new inode during
rename exchange (bsc#1207263).
- commit bf101e4
- btrfs: avoid logging all directory changes during renames
(bsc#1207263).
- commit 4234518
- HID: betop: check shape of output reports (git-fixes).
- HID: revert CHERRY_MOUSE_000C quirk (git-fixes).
- HID: check empty report_list in bigben_probe() (git-fixes).
- HID: check empty report_list in hid_validate_values()
(git-fixes).
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map (git-fixes).
- tomoyo: fix broken dependency on *.conf.default (git-fixes).
- efi: tpm: Avoid READ_ONCE() for accessing the event log
(git-fixes).
- docs: Fix the docs build with Sphinx 6.0 (git-fixes).
- drm/i915/gt: Reset twice (git-fixes).
- regulator: da9211: Use irq handler when ready (git-fixes).
- pinctrl: amd: Add dynamic debugging for active GPIOs
(git-fixes).
- arm64: atomics: format whitespace consistently (git-fixes).
- commit a241497
- PCI/PM: Define pci_restore_standard_config() only for CONFIG_PM_SLEEP
(bsc#1207269).
- commit d337d79
- btrfs: pass the dentry to btrfs_log_new_name() instead of the
inode (bsc#1207263).
- commit db8e195
- btrfs: add helper to delete a dir entry from a log tree
(bsc#1207263).
- commit f7a9c31
- btrfs: stop trying to log subdirectories created in past
transactions (bsc#1207263).
- commit 7c6f2ce
- btrfs: stop copying old dir items when logging a directory
(bsc#1207263).
- commit f0f8008
- btrfs: put initial index value of a directory in a constant
(bsc#1207263).
- commit 72e8d53
- KVM: x86: Check for existing Hyper-V vCPU in kvm_hv_vcpu_init()
(bsc#1206616).
- Refresh
patches.suse/KVM-x86-Report-error-when-setting-CPUID-if-Hyper-V-a.patch.
- commit 957a2a9
- btrfs: don't log unnecessary boundary keys when logging
directory (bsc#1207263).
- commit 4b59646
- btrfs: remove write and wait of struct walk_control
(bsc#1207263).
- commit f7b4e9a
- ath11k: change return buffer manager for QCA6390 (bsc#1199701
CVE-2020-24588).
- Refresh
patches.kabi/hide-appended-member-supports_dynamic_smps_6ghz.patch.
- Refresh
patches.suse/ath11k-set-correct-NL80211_FEATURE_DYNAMIC_SMPS-for-.patch.
- commit 9f7ada4
- ath11k: Change number of TCL rings to one for QCA6390
(bsc#1199701 CVE-2020-24588).
- Refresh
patches.kabi/hide-appended-member-supports_dynamic_smps_6ghz.patch.
- Refresh
patches.suse/ath11k-set-correct-NL80211_FEATURE_DYNAMIC_SMPS-for-.patch.
- commit d6ca39b
- net: sched: disallow noqueue for qdisc classes (bsc#1207237
CVE-2022-47929).
- commit f7f84ac
- Refresh
patches.suse/scsi-mpt3sas-Remove-usage-of-dma_get_required_mask-A.patch.
- commit cdcfa1d
- ath11k: use hw_params to access board_size and cal_offset
(bsc#1199701 CVE-2020-24588).
- commit e135fc0
- ath11k: Add spectral scan support for QCN9074 (bsc#1199701
CVE-2020-24588).
- commit 026f93a
- ath11k: Introduce spectral hw configurable param (bsc#1199701
CVE-2020-24588).
- commit 576bcf6
- ath11k: Refactor spectral FFT bin size (bsc#1199701
CVE-2020-24588).
- commit ab5a009
- blacklist.conf: kABI
- commit 2049d90
- blacklist.conf: fix affects only unsupported hardware and is complex
- commit f76a544
- mt76: mt7921: avoid unnecessary spin_lock/spin_unlock in
mt7921_mcu_tx_done_event (git-fixes).
- commit 089efbe
- blacklist.conf: false positive
- commit 62d28a7
- Documentation: Remove bogus claim about del_timer_sync()
(git-fixes).
- commit 1100a76
- cifs: Fix uninitialized memory read for smb311 posix symlink
create (git-fixes).
- commit 6c87295
- cifs: fix potential memory leaks in session setup (bsc#1193629).
- commit a50abb3
- cifs: do not query ifaces on smb1 mounts (git-fixes).
- commit 525e434
- cifs: fix double free on failed kerberos auth (git-fixes).
- commit c048c3a
- cifs: remove redundant assignment to the variable match
(bsc#1193629).
- commit 5b8956d
- cifs: fix file info setting in cifs_open_file() (git-fixes).
- commit e6259cb
- cifs: fix file info setting in cifs_query_path_info()
(git-fixes).
- commit 1b4d4fe
- cifs: fix interface count calculation during refresh
(git-fixes).
- commit 46ee30a
- cifs: refcount only the selected iface during interface update
(git-fixes).
- commit bd6c57b
- cifs: protect access of TCP_Server_Info::{dstaddr,hostname}
(bsc#1193629).
- commit bc728e2
- cifs: fix race in assemble_neg_contexts() (bsc#1193629).
- commit b120307
- cifs: ignore ipc reconnect failures during dfs failover
(bsc#1193629).
- commit 2b37719
- wifi: mt76: mt7921: add mt7921_mutex_acquire at
mt7921_sta_set_decap_offload (git-fixes).
- commit 1185bd8
- wifi: mt76: sdio: poll sta stat when device transmits data
(git-fixes).
- commit a94c4e2
- wifi: mt76: sdio: fix the deadlock caused by sdio->stat_work
(git-fixes).
- commit 5e2a5dd
- wifi: mt76: mt7921e: fix race issue between reset and
suspend/resume (git-fixes).
- commit 14a8748
- tick/sched: Fix non-kernel-doc comment (git-fixes).
- commit f87a2cc
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation.
- commit 6458db5
- blacklist.conf: 461ab10ef7e6 ("/ceph: switch to vfs_inode_has_locks() to fix file lock bug"/)
- commit fd3cf81
- rpm/mkspec-dtb: add riscv64 dtb-renesas subpackage
- commit 6020754
- USB: gadget: Fix use-after-free during usb config switch
(git-fixes).
- commit 0889148
- usb: gadget: udc: core: remove usage of list iterator past
the loop body (git-fixes).
- commit 0bb0a32
- usb: gadget: udc: core: Revise comments for USB ep
enable/disable (git-fixes).
- commit f9853da
- usb: gadget: udc: core: Print error code in
usb_gadget_probe_driver() (git-fixes).
- commit 31875c7
- usb: gadget: udc: core: Use pr_fmt() to prefix messages
(git-fixes).
- commit 89beb81
- usb: fotg210-udc: Fix ages old endianness issues (git-fixes).
- commit 324082f
- blacklist.conf: false positive
- commit eb58aba
- blacklist.conf: false positive
- commit 23de7da
- blacklist.conf: false positive
- commit 19ef3e5
- blacklist.conf: cleanup that changes kABI
- commit eea8908
- blacklist.conf: false positive
- commit 52ff06b
- s390/qeth: fix various format strings (git-fixes).
- commit 2ee54d9
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent
UAF (git-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360
13-aw0xxx (git-fixes).
- ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list
(git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
platform (git-fixes).
- ALSA: hda - Enable headset mic on another Dell laptop with
ALC3254 (git-fixes).
- ALSA: hda/realtek - Turn on power early (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
(git-fixes).
- commit ffbf830
- efi: fix userspace infinite retry read efivars after EFI
runtime services page fault (git-fixes).
- ASoC: qcom: lpass-cpu: Fix fallback SD line index handling
(git-fixes).
- ASoC: wm8904: fix wrong outputs volume after power reactivation
(git-fixes).
- ALSA: control-led: use strscpy in set_led_id() (git-fixes).
- ALSA: hda: cs35l41: Check runtime suspend capability at
runtime_idle (git-fixes).
- ALSA: hda: cs35l41: Don't return -EINVAL from system
suspend/resume (git-fixes).
- ALSA: usb-audio: Relax hw constraints for implicit fb sync
(git-fixes).
- ALSA: usb-audio: Make sure to stop endpoints before closing EPs
(git-fixes).
- platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER
if present (git-fixes).
- platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting
(git-fixes).
- platform/surface: aggregator: Add missing call to
ssam_request_sync_free() (git-fixes).
- platform/surface: aggregator: Ignore command messages not
intended for us (git-fixes).
- platform/x86: sony-laptop: Don't turn off 0x153 keyboard
backlight during probe (git-fixes).
- drm/msm/adreno: Make adreno quirks not overwrite each other
(git-fixes).
- drm/msm: another fix for the headless Adreno GPU (git-fixes).
- dt-bindings: msm: dsi-controller-main: Fix description of core
clock (git-fixes).
- dt-bindings: msm: dsi-controller-main: Fix operating-points-v2
constraint (git-fixes).
- dt-bindings: msm: dsi-phy-28nm: Add missing qcom,
dsi-phy-regulator-ldo-mode (git-fixes).
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is
not for aux transfer (git-fixes).
- dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY
(git-fixes).
- dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY
(git-fixes).
- drm/virtio: Fix GEM handle creation UAF (git-fixes).
- commit 127798d
- powerpc/rtas: avoid scheduling in rtas_os_term() (bsc#1065729).
- powerpc/rtas: avoid device tree lookups in rtas_os_term()
(bsc#1065729).
- commit 49b518d
- mm: compaction: kABI: avoid pglist_data kABI breakage
(bsc#1207010).
- commit 488d3ad
- mm: compaction: support triggering of proactive compaction by
user (bsc#1207010).
- commit a9c5d6a
- xfs: get root inode correctly at bulkstat (git-fixes).
- commit ecbb587
- xfs: get rid of assert from xfs_btree_islastblock (git-fixes).
- commit f759e44
- xfs: fix incorrect i_nlink caused by inode racing (git-fixes).
- commit c814812
- xfs: fix incorrect error-out in xfs_remove (git-fixes).
- commit 0241b15
- xfs: initialize the check_owner object fully (git-fixes).
- commit 42eb8fb
- xfs: Fix unreferenced object reported by kmemleak in
xfs_sysfs_init() (git-fixes).
- commit 48cbefa
- xfs: fix memory leak in xfs_errortag_init (git-fixes).
- commit 881b44a
- xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP*
(git-fixes).
- commit 0bf8d62
- xfs: return errors in xfs_fs_sync_fs (git-fixes).
- commit 0f9b0ad
- xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes).
- commit 9430296
- xfs: fix maxlevels comparisons in the btree staging code
(git-fixes).
- commit d0f5fd6
- rpm/kernel-binary.spec.in: Add Enhances and Supplements tags to in-tree KMPs
This makes in-tree KMPs more consistent with externally built KMPs and
silences several rpmlint warnings.
- commit 02b7735
- rpm/check-for-config-changes: add OBJTOOL and FTRACE_MCOUNT_USE_*
Dummy gcc pretends to support -mrecord-mcount option but actual gcc on
ppc64le does not. Therefore ppc64le builds of 6.2-rc1 and later in OBS
enable FTRACE_MCOUNT_USE_OBJTOOL and OBJTOOL config options, resulting in
check failure.
As we already have FTRACE_MCOUNT_USE_CC and FTRACE_MCOUNT_USE_RECORDMCOUNT
in the exception list, replace them with a general pattern. And add OBJTOOL
as well.
- commit 887416f
- ext4: Fixup pages without buffers (bsc#1205495).
- commit 31c03d6
- config: arm64: Fix Freescale LPUART dependency (boo#1204063)
Commit 8d7f37c61a07 inserted CONFIG_SERIAL_FSL_LPUART_CONSOLE=y
but forgot to change CONFIG_SERIAL_FSL_LPUART=m to =y as dependency,
as the upstream Kconfig appears to be missing it for this driver.
- commit c1cdcc5
- kabi/severities: add mlx5 internal symbols
- commit cbdf7d1
Package openssl-1_1 was updated:
- FIPS: Serialize jitterentropy calls [bsc#1207994] * Add openssl-1_1-serialize-jitterentropy-calls.patch
Package python3 was updated:
- Add bpo27321-email-no-replace-header.patch to stop email.generator.py from replacing a non-existent header
(bsc#1208443, gh#python/cpython#71508).
- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
extremely long domain names.
Package systemd was updated:
- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.- Conditionalize the use of /lib/modprobe.d only on systems with split usr
support enabled (i.e. SLE).
- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
For a complete list of changes, visit:
https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36
- Make use of the %systemd_* rpm macros consistently. Using the upstream
variants will ease the backports of Factory changes to SLE since Factory
systemd uses the upstream variants exclusively.
- machines.target belongs to systemd-container, do its init/cleanup steps from
the scriptlets of this sub-package.
- Make sure we apply the presets on units shipped by systemd package
- systemd-testsuite: move the integration tests in a dedicated sub directory.
- Move systemd-cryptenroll into udev package.
Package tar was updated:
- Fix CVE-2022-48303, tar has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump
(CVE-2022-48303, bsc#1207753)
* fix-CVE-2022-48303.patch
- Fix hang when unpacking test tarball, bsc#1202436
* remove bsc1202436.patch
* bsc1202436-1.patch
* bsc1202436-1.patch
Package xen was updated:
- bsc#1208286 - VUL-0: CVE-2022-27672: xen: Cross-Thread Return Address Predictions (XSA-426)
63ebca9c-x86-spec-ctrl-Mitigate-Cross-Thread-Return-Address-Predictions.patch
- bsc#1205792 - Partner-L3: launch-xenstore error messages show in
SLES15 SP4 xen kernel.
63e4da00-dont-log-errors-when-trying-to-load-PVH-xenstore-stubdom.patch
- Upstream bug fixes (bsc#1027519)
63c05478-VMX-calculate-model-specific-LBRs-once.patch
63c05478-VMX-support-CPUs-without-model-specific-LBR.patch
The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
https://publiccloudimagechangeinfo.suse.com/google/sles-15-sp4-chost-byos-v20230310-x86-64/
Public Cloud Image Info
https://www.suse.com/support/security/rating/
SUSE Security Ratings
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
curl-7.79.1-150400.5.15.1
dracut-055+suse.331.g05b9ccb7-150400.3.16.1
dracut-mkinitrd-deprecated-055+suse.331.g05b9ccb7-150400.3.16.1
google-guest-agent-20230221.0-150000.1.34.1
google-guest-configs-20220211.0-150400.13.3.1
google-osconfig-agent-20230222.0-150000.1.27.1
kbd-2.4.0-150400.5.3.1
kbd-legacy-2.4.0-150400.5.3.1
kdump-1.0.2+git20.g64239cc-150400.3.11.1
kernel-default-5.14.21-150400.24.46.1
libcares2-1.19.0-150000.3.20.1
libcurl4-7.79.1-150400.5.15.1
libgnutls30-3.7.3-150400.4.32.1
libjitterentropy3-3.4.0-150000.1.9.1
libopenssl1_1-1.1.1l-150400.7.25.1
libpython3_6m1_0-3.6.15-150300.10.40.1
libsystemd0-249.15-150400.8.22.1
libudev1-249.15-150400.8.22.1
openssl-1_1-1.1.1l-150400.7.25.1
python3-3.6.15-150300.10.40.1
python3-base-3.6.15-150300.10.40.1
systemd-249.15-150400.8.22.1
systemd-sysvinit-249.15-150400.8.22.1
tar-1.34-150000.3.31.1
udev-249.15-150400.8.22.1
xen-libs-4.16.3_04-150400.4.22.1
curl-7.79.1-150400.5.15.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
dracut-055+suse.331.g05b9ccb7-150400.3.16.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
dracut-mkinitrd-deprecated-055+suse.331.g05b9ccb7-150400.3.16.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
google-guest-agent-20230221.0-150000.1.34.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
google-guest-configs-20220211.0-150400.13.3.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
google-osconfig-agent-20230222.0-150000.1.27.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
kbd-2.4.0-150400.5.3.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
kbd-legacy-2.4.0-150400.5.3.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
kdump-1.0.2+git20.g64239cc-150400.3.11.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
kernel-default-5.14.21-150400.24.46.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
libcares2-1.19.0-150000.3.20.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
libcurl4-7.79.1-150400.5.15.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
libgnutls30-3.7.3-150400.4.32.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
libjitterentropy3-3.4.0-150000.1.9.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
libopenssl1_1-1.1.1l-150400.7.25.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
libpython3_6m1_0-3.6.15-150300.10.40.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
libsystemd0-249.15-150400.8.22.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
libudev1-249.15-150400.8.22.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
openssl-1_1-1.1.1l-150400.7.25.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
python3-3.6.15-150300.10.40.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
python3-base-3.6.15-150300.10.40.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
systemd-249.15-150400.8.22.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
systemd-sysvinit-249.15-150400.8.22.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
tar-1.34-150000.3.31.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
udev-249.15-150400.8.22.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
xen-libs-4.16.3_04-150400.4.22.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
CVE-2020-24588
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:kernel-default-5.14.21-150400.24.46.1
moderate
2.9
AV:A/AC:M/Au:N/C:N/I:P/A:N
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.
CVE-2021-3672
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:libcares2-1.19.0-150000.3.20.1
important
6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.
CVE-2021-38297
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:google-guest-agent-20230221.0-150000.1.34.1
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:google-osconfig-agent-20230222.0-150000.1.27.1
moderate
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.
CVE-2022-27672
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:xen-libs-4.16.3_04-150400.4.22.1
moderate
A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side.
CVE-2022-4382
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:kernel-default-5.14.21-150400.24.46.1
important
An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16.
CVE-2022-45061
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:python3-3.6.15-150300.10.40.1
moderate
In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system crash) via a crafted traffic control configuration that is set up with "tc qdisc" and "tc class" commands. This affects qdisc_graft in net/sched/sch_api.c.
CVE-2022-47929
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:kernel-default-5.14.21-150400.24.46.1
moderate
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.
CVE-2022-48303
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:tar-1.34-150000.3.31.1
moderate
A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.
CVE-2022-4904
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:libcares2-1.19.0-150000.3.20.1
moderate
A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4.
CVE-2023-0122
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:kernel-default-5.14.21-150400.24.46.1
moderate
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
CVE-2023-0179
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:kernel-default-5.14.21-150400.24.46.1
important
A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
CVE-2023-0266
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:kernel-default-5.14.21-150400.24.46.1
important
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.
CVE-2023-0361
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:libgnutls30-3.7.3-150400.4.32.1
moderate
A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, then kernel could be affected.
CVE-2023-0590
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:kernel-default-5.14.21-150400.24.46.1
important
cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).
CVE-2023-23454
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:kernel-default-5.14.21-150400.24.46.1
important
atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).
CVE-2023-23455
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:kernel-default-5.14.21-150400.24.46.1
important
A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on.
CVE-2023-23914
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:curl-7.79.1-150400.5.15.1
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:libcurl4-7.79.1-150400.5.15.1
important
A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS.
CVE-2023-23915
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:curl-7.79.1-150400.5.15.1
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:libcurl4-7.79.1-150400.5.15.1
important
An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable "links" in this "decompression chain" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a "malloc bomb", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.
CVE-2023-23916
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:curl-7.79.1-150400.5.15.1
Public Cloud Image google/sles-15-sp4-chost-byos-v20230310-x86-64:libcurl4-7.79.1-150400.5.15.1
moderate