Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:14218-1 Final 1 1 2019-11-13T15:19:54Z current 2019-11-13T15:19:54Z 2019-11-13T15:19:54Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 11-SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack. The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW). The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7023735 - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional. The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed. More information can be found on https://www.suse.com/support/kb/doc/?id=7024251 - CVE-2019-16233: drivers/scsi/qla2xxx/qla_os.c did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150457). - CVE-2019-10220: Added sanity checks on the pathnames passed to the user space. (bsc#1144903). - CVE-2019-16234: iwlwifi pcie driver did not check the alloc_workqueue return value, leading to a NULL pointer dereference. (bsc#1150452). - CVE-2019-16232: Fix a potential NULL pointer dereference in the Marwell libertas driver (bsc#1150465). - CVE-2019-17052: ax25_create in the AF_AX25 network module in the Linux kernel did not enforce CAP_NET_RAW, which meant that unprivileged users could create a raw socket, aka CID-0614e2b73768. (bnc#1152779) - CVE-2019-17055: base_sock_create in the AF_ISDN network module in the Linux kernel did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21. (bnc#1152782) - CVE-2019-17054: atalk_create in the AF_APPLETALK network module in the Linux kernel did not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c. (bnc#1152786) - CVE-2019-17133: cfg80211 wireless extension did not reject a long SSID IE, leading to a Buffer Overflow (bsc#1153158). - CVE-2019-17053: ieee802154_create in the AF_IEEE802154 network module in the Linux kernel did not enforce CAP_NET_RAW, which means that unprivileged users could create a raw socket, aka CID-e69dbd4619e7. (bnc#1152789) - CVE-2019-16413: The 9p filesystem did not protect i_size_write() properly, which caused an i_size_read() infinite loop and denial of service on SMP systems. (bnc#1151347) - CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function. (bnc#1146540) - CVE-2019-15807: There was a memory leak in the SAS expander driver when SAS expander discovery fails. This could cause a denial of service. (bnc#1148938) - CVE-2019-14821: An out-of-bounds access issue was found in the way Linux the kernel's KVM hypervisor implemented the Coalesced MMIO write operation. It operated on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system. (bnc#1151350) - CVE-2019-15505: The Linux kernel had an out-of-bounds read via crafted USB device traffic (which may have been remote via usbip or usbredir). (bnc#1147122) - CVE-2019-14835: A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could have used this flaw to increase their privileges on the host. (bnc#1150112) - CVE-2019-15216: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver. (bnc#1146361) - CVE-2019-9456: In the Android kernel in Pixel C USB monitor driver there was a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction was not needed for exploitation. (bnc#1150025) - CVE-2019-15927: An out-of-bounds access existed in the function build_audio_procunit in the file sound/usb/mixer.c. (bnc#1149522) - CVE-2019-15902: Misuse of the upstream 'x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()' commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered)\ code lines were swapped. (bnc#1149376) - CVE-2019-15219: There was a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver. (bnc#1146524) - CVE-2017-18509: An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel By setting a specific socket option, an attacker could control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue could be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurred because sk_type and protocol were not checked in the appropriate part of the ip6_mroute_* functions. (bnc#1145477) - CVE-2019-15212: There was a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. (bnc#1146391) - CVE-2019-15292: There was a use-after-free in atalk_proc_exit. (bnc#1146678) - CVE-2019-15217: There was a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver. (bnc#1146547) - CVE-2018-20976: A use after free was discovered in fs/xfs/xfs_super.c, related to xfs_fs_fill_super failure. (bnc#1146285) - CVE-2017-18551: There was an out of bounds write in the function i2c_smbus_xfer_emulated. (bnc#1146163) - CVE-2019-15118: check_input_term in sound/usb/mixer.c mishandled recursion, leading to kernel stack exhaustion. (bnc#1145922) The following non-security bugs were fixed: - add a missing lfence in kernel error entry and remove a superfluous lfence in userspace interrupt exit paths - Documentation: Add ITLB_MULTIHIT documentation (bnc#1117665). - array_index_nospec: Sanitize speculative array (bsc#1155671) - cpu/speculation: Uninline and export CPU mitigations helpers (bnc#1117665). - IB/core: Add mitigation for Spectre V1 (bsc#1155671) - inet_diag: fix oops for IPv4 AF_INET6 TCP SYN-RECV state (bsc#1101061). - kABI Fix for IFU Patches (bsc#1117665). - kthread: Implement park/unpark facility (bsc#1117665). - kvm: Convert kvm_lock to a mutex (bsc#1117665). - kvm: MMU: drop read-only large sptes when creating lower level sptes (bsc#1117665). - kvm: MMU: fast invalidate all pages (bsc1117665). - kvm: VMX: export PFEC.P bit on ept (bsc#1117665). - kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (bsc#1117665). - kvm: x86: make FNAME(fetch) and __direct_map more similar (bsc#1117665). - kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT (bnc#1117665). - mm/readahead.c: fix readahead failure for memoryless NUMA nodes and limit readahead pages (bsc#1143327). - mm: use only per-device readahead limit (bsc#1143327). - powerpc/64s: support nospectre_v2 cmdline option (bsc#1131107). - powerpc/fsl: Add nospectre_v2 command line argument (bsc#1131107). - powerpc/fsl: Update Spectre v2 reporting (bsc#1131107). - powerpc/security: Show powerpc_security_features in debugfs (bsc#1131107). - xfs: xfs_remove deadlocks due to inverted AGF vs AGI lock ordering (bsc#1150599). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slehasp4-kernel-source-14218,slessp4-kernel-source-14218,slexsp3-kernel-source-14218 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ Link for SUSE-SU-2019:14218-1 https://lists.suse.com/pipermail/sle-security-updates/2019-November/006135.html E-Mail link for SUSE-SU-2019:14218-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1101061 SUSE Bug 1101061 https://bugzilla.suse.com/1113201 SUSE Bug 1113201 https://bugzilla.suse.com/1117665 SUSE Bug 1117665 https://bugzilla.suse.com/1131107 SUSE Bug 1131107 https://bugzilla.suse.com/1143327 SUSE Bug 1143327 https://bugzilla.suse.com/1144903 SUSE Bug 1144903 https://bugzilla.suse.com/1145477 SUSE Bug 1145477 https://bugzilla.suse.com/1145922 SUSE Bug 1145922 https://bugzilla.suse.com/1146163 SUSE Bug 1146163 https://bugzilla.suse.com/1146285 SUSE Bug 1146285 https://bugzilla.suse.com/1146361 SUSE Bug 1146361 https://bugzilla.suse.com/1146391 SUSE Bug 1146391 https://bugzilla.suse.com/1146524 SUSE Bug 1146524 https://bugzilla.suse.com/1146540 SUSE Bug 1146540 https://bugzilla.suse.com/1146547 SUSE Bug 1146547 https://bugzilla.suse.com/1146678 SUSE Bug 1146678 https://bugzilla.suse.com/1147122 SUSE Bug 1147122 https://bugzilla.suse.com/1148938 SUSE Bug 1148938 https://bugzilla.suse.com/1149376 SUSE Bug 1149376 https://bugzilla.suse.com/1149522 SUSE Bug 1149522 https://bugzilla.suse.com/1150025 SUSE Bug 1150025 https://bugzilla.suse.com/1150112 SUSE Bug 1150112 https://bugzilla.suse.com/1150452 SUSE Bug 1150452 https://bugzilla.suse.com/1150457 SUSE Bug 1150457 https://bugzilla.suse.com/1150465 SUSE Bug 1150465 https://bugzilla.suse.com/1150599 SUSE Bug 1150599 https://bugzilla.suse.com/1151347 SUSE Bug 1151347 https://bugzilla.suse.com/1151350 SUSE Bug 1151350 https://bugzilla.suse.com/1152779 SUSE Bug 1152779 https://bugzilla.suse.com/1152782 SUSE Bug 1152782 https://bugzilla.suse.com/1152786 SUSE Bug 1152786 https://bugzilla.suse.com/1152789 SUSE Bug 1152789 https://bugzilla.suse.com/1153158 SUSE Bug 1153158 https://bugzilla.suse.com/1155671 SUSE Bug 1155671 https://bugzilla.suse.com/802154 SUSE Bug 802154 https://bugzilla.suse.com/936875 SUSE Bug 936875 https://www.suse.com/security/cve/CVE-2017-18509/ SUSE CVE CVE-2017-18509 page https://www.suse.com/security/cve/CVE-2017-18551/ SUSE CVE CVE-2017-18551 page https://www.suse.com/security/cve/CVE-2018-12207/ SUSE CVE CVE-2018-12207 page https://www.suse.com/security/cve/CVE-2018-20976/ SUSE CVE CVE-2018-20976 page https://www.suse.com/security/cve/CVE-2019-10220/ SUSE CVE CVE-2019-10220 page https://www.suse.com/security/cve/CVE-2019-11135/ SUSE CVE CVE-2019-11135 page https://www.suse.com/security/cve/CVE-2019-14821/ SUSE CVE CVE-2019-14821 page https://www.suse.com/security/cve/CVE-2019-14835/ SUSE CVE CVE-2019-14835 page https://www.suse.com/security/cve/CVE-2019-15118/ SUSE CVE CVE-2019-15118 page https://www.suse.com/security/cve/CVE-2019-15212/ SUSE CVE CVE-2019-15212 page https://www.suse.com/security/cve/CVE-2019-15216/ SUSE CVE CVE-2019-15216 page https://www.suse.com/security/cve/CVE-2019-15217/ SUSE CVE CVE-2019-15217 page https://www.suse.com/security/cve/CVE-2019-15219/ SUSE CVE CVE-2019-15219 page https://www.suse.com/security/cve/CVE-2019-15291/ SUSE CVE CVE-2019-15291 page https://www.suse.com/security/cve/CVE-2019-15292/ SUSE CVE CVE-2019-15292 page https://www.suse.com/security/cve/CVE-2019-15505/ SUSE CVE CVE-2019-15505 page https://www.suse.com/security/cve/CVE-2019-15807/ SUSE CVE CVE-2019-15807 page https://www.suse.com/security/cve/CVE-2019-15902/ SUSE CVE CVE-2019-15902 page https://www.suse.com/security/cve/CVE-2019-15927/ SUSE CVE CVE-2019-15927 page https://www.suse.com/security/cve/CVE-2019-16232/ SUSE CVE CVE-2019-16232 page https://www.suse.com/security/cve/CVE-2019-16233/ SUSE CVE CVE-2019-16233 page https://www.suse.com/security/cve/CVE-2019-16234/ SUSE CVE CVE-2019-16234 page https://www.suse.com/security/cve/CVE-2019-16413/ SUSE CVE CVE-2019-16413 page https://www.suse.com/security/cve/CVE-2019-17052/ SUSE CVE CVE-2019-17052 page https://www.suse.com/security/cve/CVE-2019-17053/ SUSE CVE CVE-2019-17053 page https://www.suse.com/security/cve/CVE-2019-17054/ SUSE CVE CVE-2019-17054 page https://www.suse.com/security/cve/CVE-2019-17055/ SUSE CVE CVE-2019-17055 page https://www.suse.com/security/cve/CVE-2019-17133/ SUSE CVE CVE-2019-17133 page https://www.suse.com/security/cve/CVE-2019-9456/ SUSE CVE CVE-2019-9456 page SUSE Linux Enterprise High Availability Extension 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 kernel-bigmem-3.0.101-108.108.1 kernel-bigmem-base-3.0.101-108.108.1 kernel-bigmem-devel-3.0.101-108.108.1 kernel-default-3.0.101-108.108.1 kernel-default-base-3.0.101-108.108.1 kernel-default-devel-3.0.101-108.108.1 kernel-default-man-3.0.101-108.108.1 kernel-ec2-3.0.101-108.108.1 kernel-ec2-base-3.0.101-108.108.1 kernel-ec2-devel-3.0.101-108.108.1 kernel-pae-3.0.101-108.108.1 kernel-pae-base-3.0.101-108.108.1 kernel-pae-devel-3.0.101-108.108.1 kernel-ppc64-3.0.101-108.108.1 kernel-ppc64-base-3.0.101-108.108.1 kernel-ppc64-devel-3.0.101-108.108.1 kernel-source-3.0.101-108.108.1 kernel-syms-3.0.101-108.108.1 kernel-trace-3.0.101-108.108.1 kernel-trace-base-3.0.101-108.108.1 kernel-trace-devel-3.0.101-108.108.1 kernel-xen-3.0.101-108.108.1 kernel-xen-base-3.0.101-108.108.1 kernel-xen-devel-3.0.101-108.108.1 ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 as a component of SUSE Linux Enterprise High Availability Extension 11 SP4 ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 as a component of SUSE Linux Enterprise High Availability Extension 11 SP4 ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 as a component of SUSE Linux Enterprise High Availability Extension 11 SP4 ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 as a component of SUSE Linux Enterprise High Availability Extension 11 SP4 ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 as a component of SUSE Linux Enterprise High Availability Extension 11 SP4 ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 as a component of SUSE Linux Enterprise High Availability Extension 11 SP4 kernel-bigmem-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-bigmem-base-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-bigmem-devel-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-default-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-default-base-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-default-devel-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-default-man-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ec2-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ec2-base-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ec2-devel-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-pae-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-pae-base-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-pae-devel-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ppc64-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ppc64-base-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-ppc64-devel-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-source-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-syms-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-trace-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-trace-base-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-trace-devel-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-xen-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-xen-base-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS kernel-xen-devel-3.0.101-108.108.1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187. CVE-2017-18509 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2017-18509.html CVE-2017-18509 https://bugzilla.suse.com/1145477 SUSE Bug 1145477 An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2c_smbus_xfer_emulated. CVE-2017-18551 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2017-18551.html CVE-2017-18551 https://bugzilla.suse.com/1146163 SUSE Bug 1146163 Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access. CVE-2018-12207 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2018-12207.html CVE-2018-12207 https://bugzilla.suse.com/1117665 SUSE Bug 1117665 https://bugzilla.suse.com/1139073 SUSE Bug 1139073 https://bugzilla.suse.com/1152505 SUSE Bug 1152505 https://bugzilla.suse.com/1155812 SUSE Bug 1155812 https://bugzilla.suse.com/1155817 SUSE Bug 1155817 https://bugzilla.suse.com/1155945 SUSE Bug 1155945 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure. CVE-2018-20976 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2018-20976.html CVE-2018-20976 https://bugzilla.suse.com/1146285 SUSE Bug 1146285 Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists. CVE-2019-10220 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-10220.html CVE-2019-10220 https://bugzilla.suse.com/1144903 SUSE Bug 1144903 https://bugzilla.suse.com/1153108 SUSE Bug 1153108 TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. CVE-2019-11135 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-11135.html CVE-2019-11135 https://bugzilla.suse.com/1139073 SUSE Bug 1139073 https://bugzilla.suse.com/1152497 SUSE Bug 1152497 https://bugzilla.suse.com/1152505 SUSE Bug 1152505 https://bugzilla.suse.com/1152506 SUSE Bug 1152506 https://bugzilla.suse.com/1160120 SUSE Bug 1160120 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write indices 'ring->first' and 'ring->last' value could be supplied by a host user-space process. An unprivileged host user or process with access to '/dev/kvm' device could use this flaw to crash the host kernel, resulting in a denial of service or potentially escalating privileges on the system. CVE-2019-14821 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-14821.html CVE-2019-14821 https://bugzilla.suse.com/1151350 SUSE Bug 1151350 A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host. CVE-2019-14835 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-14835.html CVE-2019-14835 https://bugzilla.suse.com/1150112 SUSE Bug 1150112 https://bugzilla.suse.com/1151021 SUSE Bug 1151021 check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion. CVE-2019-15118 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-15118.html CVE-2019-15118 https://bugzilla.suse.com/1145922 SUSE Bug 1145922 An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. CVE-2019-15212 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-15212.html CVE-2019-15212 https://bugzilla.suse.com/1146391 SUSE Bug 1146391 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver. CVE-2019-15216 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-15216.html CVE-2019-15216 https://bugzilla.suse.com/1146361 SUSE Bug 1146361 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver. CVE-2019-15217 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-15217.html CVE-2019-15217 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 https://bugzilla.suse.com/1146547 SUSE Bug 1146547 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver. CVE-2019-15219 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-15219.html CVE-2019-15219 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 https://bugzilla.suse.com/1146524 SUSE Bug 1146524 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver. CVE-2019-15291 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-15291.html CVE-2019-15291 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 https://bugzilla.suse.com/1146540 SUSE Bug 1146540 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 An issue was discovered in the Linux kernel before 5.0.9. There is a use-after-free in atalk_proc_exit, related to net/appletalk/atalk_proc.c, net/appletalk/ddp.c, and net/appletalk/sysctl_net_atalk.c. CVE-2019-15292 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-15292.html CVE-2019-15292 https://bugzilla.suse.com/1146678 SUSE Bug 1146678 https://bugzilla.suse.com/1173939 SUSE Bug 1173939 drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir). CVE-2019-15505 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-15505.html CVE-2019-15505 https://bugzilla.suse.com/1147122 SUSE Bug 1147122 In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service. CVE-2019-15807 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-15807.html CVE-2019-15807 https://bugzilla.suse.com/1148938 SUSE Bug 1148938 A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped. CVE-2019-15902 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-15902.html CVE-2019-15902 https://bugzilla.suse.com/1149376 SUSE Bug 1149376 https://bugzilla.suse.com/1155131 SUSE Bug 1155131 An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function build_audio_procunit in the file sound/usb/mixer.c. CVE-2019-15927 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-15927.html CVE-2019-15927 https://bugzilla.suse.com/1149522 SUSE Bug 1149522 drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. CVE-2019-16232 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-16232.html CVE-2019-16232 https://bugzilla.suse.com/1150465 SUSE Bug 1150465 drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. CVE-2019-16233 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-16233.html CVE-2019-16233 https://bugzilla.suse.com/1150457 SUSE Bug 1150457 drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. CVE-2019-16234 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-16234.html CVE-2019-16234 https://bugzilla.suse.com/1150452 SUSE Bug 1150452 An issue was discovered in the Linux kernel before 5.0.4. The 9p filesystem did not protect i_size_write() properly, which causes an i_size_read() infinite loop and denial of service on SMP systems. CVE-2019-16413 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-16413.html CVE-2019-16413 https://bugzilla.suse.com/1151347 SUSE Bug 1151347 ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768. CVE-2019-17052 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-17052.html CVE-2019-17052 https://bugzilla.suse.com/1152779 SUSE Bug 1152779 ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7. CVE-2019-17053 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-17053.html CVE-2019-17053 https://bugzilla.suse.com/1152789 SUSE Bug 1152789 atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c. CVE-2019-17054 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-17054.html CVE-2019-17054 https://bugzilla.suse.com/1152786 SUSE Bug 1152786 base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21. CVE-2019-17055 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-17055.html CVE-2019-17055 https://bugzilla.suse.com/1152782 SUSE Bug 1152782 In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow. CVE-2019-17133 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-17133.html CVE-2019-17133 https://bugzilla.suse.com/1153158 SUSE Bug 1153158 https://bugzilla.suse.com/1153161 SUSE Bug 1153161 In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. CVE-2019-9456 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-bigmem-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-default-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-pae-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-ppc64-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-trace-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise High Availability Extension 11 SP4:ocfs2-kmp-xen-1.6_3.0.101_108.108-0.28.11.2 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-bigmem-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-default-man-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ec2-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-pae-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-ppc64-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-source-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-syms-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-trace-devel-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-base-3.0.101-108.108.1 SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-xen-devel-3.0.101-108.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1/ https://www.suse.com/security/cve/CVE-2019-9456.html CVE-2019-9456 https://bugzilla.suse.com/1150025 SUSE Bug 1150025