Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1534-1 Final 1 1 2019-06-17T17:22:06Z current 2019-06-17T17:22:06Z 2019-06-17T17:22:06Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP2 kernel version 4.4.121 was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-11477: A sequence of SACKs may have been crafted by a remote attacker such that one can trigger an integer overflow, leading to a kernel panic. (bsc#1137586). - CVE-2019-11478: It was possible to send a crafted sequence of SACKs which would fragment the TCP retransmission queue. A remote attacker may have been able to further exploit the fragmented queue to cause an expensive linked-list walk for subsequent SACKs received for that same TCP connection. - CVE-2019-11479: It was possible to send a crafted sequence of SACKs which would fragment the RACK send map. A remote attacker may be able to further exploit the fragmented send map to cause an expensive linked-list walk for subsequent SACKs received for that same TCP connection. This would have resulted in excess resource consumption due to low mss values. - CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network. (bnc#1136424) - CVE-2019-12382: An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel There is an unchecked kstrdup of fwstr, which may have allowed an attacker to cause a denial of service (NULL pointer dereference and system crash). (bnc#1136586) - CVE-2019-5489: The mincore() implementation in mm/mincore.c in the Linux kernel allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may have been possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server. (bnc#1120843) - CVE-2019-11833: fs/ext4/extents.c in the Linux kernel did not zero out the unused memory region in the extent tree block, which might have allowed local users to obtain sensitive information by reading uninitialized data in the filesystem. (bnc#1135281) - CVE-2018-7191: In the tun subsystem in the Linux kernel, dev_get_valid_name was not called before register_netdevice. This allowed local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343. (bnc#1135603) - CVE-2019-11190: The Linux kernel allowed local users to bypass ASLR on setuid programs (such as /bin/su) because install_exec_creds() is called too late in load_elf_binary() in fs/binfmt_elf.c, and thus the ptrace_may_access() check had a race condition when reading /proc/pid/stat. (bnc#1131543) - CVE-2019-11815: An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel There was a race condition leading to a use-after-free, related to net namespace cleanup. (bnc#1134537) - CVE-2019-11884: The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel allowed a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not have ended with a '\0' character. (bnc#1134848) - CVE-2018-17972: An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel It did not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents. (bnc#1110785) The following non-security bugs were fixed: - cifs: keep FileInfo handle live during oplock break (bsc#1106284, bsc#1131565). - ftrace/x86_64: Emulate call function while updating in breakpoint handler (bsc#1099658). - kabi: drop LINUX_MIB_TCPWQUEUETOOBIG snmp counter (bsc#1137586). - kabi: move sysctl_tcp_min_snd_mss to preserve struct net layout (bsc#1137586). - mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (bsc#1136935). - tcp: add tcp_min_snd_mss sysctl (bsc#1137586). - tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (bsc#1137586). - tcp: limit payload size of sacked skbs (bsc#1137586). - tcp: tcp_fragment() should apply sane memory limits (bsc#1137586). - x86_64: Add gap to int3 to allow for call emulation (bsc#1099658). - x86_64: Allow breakpoints to emulate call instructions (bsc#1099658). - xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent (bnc#1134596). - xen-swiotlb: use actually allocated size on check physical continuous (bnc#1134596). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-1534,SUSE-OpenStack-Cloud-7-2019-1534,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-1534,SUSE-SLE-HA-12-SP2-2019-1534,SUSE-SLE-SAP-12-SP2-2019-1534,SUSE-SLE-SERVER-12-SP2-2019-1534,SUSE-SLE-SERVER-12-SP2-BCL-2019-1534,SUSE-Storage-4-2019-1534 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ Link for SUSE-SU-2019:1534-1 https://lists.suse.com/pipermail/sle-security-updates/2019-June/005578.html E-Mail link for SUSE-SU-2019:1534-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1099658 SUSE Bug 1099658 https://bugzilla.suse.com/1106284 SUSE Bug 1106284 https://bugzilla.suse.com/1110785 SUSE Bug 1110785 https://bugzilla.suse.com/1113769 SUSE Bug 1113769 https://bugzilla.suse.com/1120843 SUSE Bug 1120843 https://bugzilla.suse.com/1120885 SUSE Bug 1120885 https://bugzilla.suse.com/1131543 SUSE Bug 1131543 https://bugzilla.suse.com/1131565 SUSE Bug 1131565 https://bugzilla.suse.com/1132374 SUSE Bug 1132374 https://bugzilla.suse.com/1132472 SUSE Bug 1132472 https://bugzilla.suse.com/1134537 SUSE Bug 1134537 https://bugzilla.suse.com/1134596 SUSE Bug 1134596 https://bugzilla.suse.com/1134848 SUSE Bug 1134848 https://bugzilla.suse.com/1135281 SUSE Bug 1135281 https://bugzilla.suse.com/1135603 SUSE Bug 1135603 https://bugzilla.suse.com/1136424 SUSE Bug 1136424 https://bugzilla.suse.com/1136446 SUSE Bug 1136446 https://bugzilla.suse.com/1136586 SUSE Bug 1136586 https://bugzilla.suse.com/1136935 SUSE Bug 1136935 https://bugzilla.suse.com/1137586 SUSE Bug 1137586 https://www.suse.com/security/cve/CVE-2018-17972/ SUSE CVE CVE-2018-17972 page https://www.suse.com/security/cve/CVE-2018-7191/ SUSE CVE CVE-2018-7191 page https://www.suse.com/security/cve/CVE-2019-11190/ SUSE CVE CVE-2019-11190 page https://www.suse.com/security/cve/CVE-2019-11477/ SUSE CVE CVE-2019-11477 page https://www.suse.com/security/cve/CVE-2019-11478/ SUSE CVE CVE-2019-11478 page https://www.suse.com/security/cve/CVE-2019-11479/ SUSE CVE CVE-2019-11479 page https://www.suse.com/security/cve/CVE-2019-11815/ SUSE CVE CVE-2019-11815 page https://www.suse.com/security/cve/CVE-2019-11833/ SUSE CVE CVE-2019-11833 page https://www.suse.com/security/cve/CVE-2019-11884/ SUSE CVE CVE-2019-11884 page https://www.suse.com/security/cve/CVE-2019-12382/ SUSE CVE CVE-2019-12382 page https://www.suse.com/security/cve/CVE-2019-3846/ SUSE CVE CVE-2019-3846 page https://www.suse.com/security/cve/CVE-2019-5489/ SUSE CVE CVE-2019-5489 page SUSE Enterprise Storage 4 SUSE Linux Enterprise High Availability Extension 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE OpenStack Cloud 7 cluster-md-kmp-debug-4.4.121-92.114.1 cluster-md-kmp-default-4.4.121-92.114.1 cluster-md-kmp-vanilla-4.4.121-92.114.1 cluster-network-kmp-debug-4.4.121-92.114.1 cluster-network-kmp-default-4.4.121-92.114.1 cluster-network-kmp-vanilla-4.4.121-92.114.1 dlm-kmp-debug-4.4.121-92.114.1 dlm-kmp-default-4.4.121-92.114.1 dlm-kmp-vanilla-4.4.121-92.114.1 gfs2-kmp-debug-4.4.121-92.114.1 gfs2-kmp-default-4.4.121-92.114.1 gfs2-kmp-vanilla-4.4.121-92.114.1 kernel-debug-4.4.121-92.114.1 kernel-debug-base-4.4.121-92.114.1 kernel-debug-devel-4.4.121-92.114.1 kernel-debug-extra-4.4.121-92.114.1 kernel-debug-kgraft-4.4.121-92.114.1 kernel-default-4.4.121-92.114.1 kernel-default-base-4.4.121-92.114.1 kernel-default-devel-4.4.121-92.114.1 kernel-default-extra-4.4.121-92.114.1 kernel-default-kgraft-4.4.121-92.114.1 kernel-default-man-4.4.121-92.114.1 kernel-devel-4.4.121-92.114.1 kernel-docs-4.4.121-92.114.1 kernel-docs-html-4.4.121-92.114.1 kernel-docs-pdf-4.4.121-92.114.1 kernel-macros-4.4.121-92.114.1 kernel-obs-build-4.4.121-92.114.1 kernel-obs-qa-4.4.121-92.114.1 kernel-source-4.4.121-92.114.1 kernel-source-vanilla-4.4.121-92.114.1 kernel-syms-4.4.121-92.114.1 kernel-vanilla-4.4.121-92.114.1 kernel-vanilla-base-4.4.121-92.114.1 kernel-vanilla-devel-4.4.121-92.114.1 kernel-zfcpdump-4.4.121-92.114.1 kgraft-patch-4_4_121-92_114-default-1-3.5.1 ocfs2-kmp-debug-4.4.121-92.114.1 ocfs2-kmp-default-4.4.121-92.114.1 ocfs2-kmp-vanilla-4.4.121-92.114.1 kernel-default-4.4.121-92.114.1 as a component of SUSE Enterprise Storage 4 kernel-default-base-4.4.121-92.114.1 as a component of SUSE Enterprise Storage 4 kernel-default-devel-4.4.121-92.114.1 as a component of SUSE Enterprise Storage 4 kernel-devel-4.4.121-92.114.1 as a component of SUSE Enterprise Storage 4 kernel-macros-4.4.121-92.114.1 as a component of SUSE Enterprise Storage 4 kernel-source-4.4.121-92.114.1 as a component of SUSE Enterprise Storage 4 kernel-syms-4.4.121-92.114.1 as a component of SUSE Enterprise Storage 4 kgraft-patch-4_4_121-92_114-default-1-3.5.1 as a component of SUSE Enterprise Storage 4 cluster-md-kmp-default-4.4.121-92.114.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 cluster-network-kmp-default-4.4.121-92.114.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 dlm-kmp-default-4.4.121-92.114.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 gfs2-kmp-default-4.4.121-92.114.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 ocfs2-kmp-default-4.4.121-92.114.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 kernel-default-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-base-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-devel-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-devel-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-macros-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-source-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-syms-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-base-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-devel-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-man-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-devel-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-macros-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-syms-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kgraft-patch-4_4_121-92_114-default-1-3.5.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-base-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-devel-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-devel-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-macros-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-source-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-syms-4.4.121-92.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-4_4_121-92_114-default-1-3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-4.4.121-92.114.1 as a component of SUSE OpenStack Cloud 7 kernel-default-base-4.4.121-92.114.1 as a component of SUSE OpenStack Cloud 7 kernel-default-devel-4.4.121-92.114.1 as a component of SUSE OpenStack Cloud 7 kernel-default-man-4.4.121-92.114.1 as a component of SUSE OpenStack Cloud 7 kernel-devel-4.4.121-92.114.1 as a component of SUSE OpenStack Cloud 7 kernel-macros-4.4.121-92.114.1 as a component of SUSE OpenStack Cloud 7 kernel-source-4.4.121-92.114.1 as a component of SUSE OpenStack Cloud 7 kernel-syms-4.4.121-92.114.1 as a component of SUSE OpenStack Cloud 7 kgraft-patch-4_4_121-92_114-default-1-3.5.1 as a component of SUSE OpenStack Cloud 7 An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents. CVE-2018-17972 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.114.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_114-default-1-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ https://www.suse.com/security/cve/CVE-2018-17972.html CVE-2018-17972 https://bugzilla.suse.com/1110785 SUSE Bug 1110785 In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. This allows local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. This is similar to CVE-2013-4343. CVE-2018-7191 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.114.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_114-default-1-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ https://www.suse.com/security/cve/CVE-2018-7191.html CVE-2018-7191 https://bugzilla.suse.com/1135603 SUSE Bug 1135603 The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs (such as /bin/su) because install_exec_creds() is called too late in load_elf_binary() in fs/binfmt_elf.c, and thus the ptrace_may_access() check has a race condition when reading /proc/pid/stat. CVE-2019-11190 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.114.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_114-default-1-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ https://www.suse.com/security/cve/CVE-2019-11190.html CVE-2019-11190 https://bugzilla.suse.com/1131543 SUSE Bug 1131543 https://bugzilla.suse.com/1132374 SUSE Bug 1132374 https://bugzilla.suse.com/1132472 SUSE Bug 1132472 Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff. CVE-2019-11477 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.114.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_114-default-1-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ https://www.suse.com/security/cve/CVE-2019-11477.html CVE-2019-11477 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1137586 SUSE Bug 1137586 https://bugzilla.suse.com/1142129 SUSE Bug 1142129 https://bugzilla.suse.com/1153242 SUSE Bug 1153242 Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e. CVE-2019-11478 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.114.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_114-default-1-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ https://www.suse.com/security/cve/CVE-2019-11478.html CVE-2019-11478 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1137586 SUSE Bug 1137586 https://bugzilla.suse.com/1142129 SUSE Bug 1142129 https://bugzilla.suse.com/1143542 SUSE Bug 1143542 Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363. CVE-2019-11479 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.114.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_114-default-1-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ https://www.suse.com/security/cve/CVE-2019-11479.html CVE-2019-11479 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1137586 SUSE Bug 1137586 https://bugzilla.suse.com/1142129 SUSE Bug 1142129 https://bugzilla.suse.com/1143542 SUSE Bug 1143542 An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup. CVE-2019-11815 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.114.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_114-default-1-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ https://www.suse.com/security/cve/CVE-2019-11815.html CVE-2019-11815 https://bugzilla.suse.com/1134537 SUSE Bug 1134537 fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem. CVE-2019-11833 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.114.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_114-default-1-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ https://www.suse.com/security/cve/CVE-2019-11833.html CVE-2019-11833 https://bugzilla.suse.com/1135281 SUSE Bug 1135281 The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a '\0' character. CVE-2019-11884 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.114.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_114-default-1-3.5.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ https://www.suse.com/security/cve/CVE-2019-11884.html CVE-2019-11884 https://bugzilla.suse.com/1134848 SUSE Bug 1134848 https://bugzilla.suse.com/1139868 SUSE Bug 1139868 ** DISPUTED ** An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel through 5.1.5. There is an unchecked kstrdup of fwstr, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: The vendor disputes this issues as not being a vulnerability because kstrdup() returning NULL is handled sufficiently and there is no chance for a NULL pointer dereference. CVE-2019-12382 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.114.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_114-default-1-3.5.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ https://www.suse.com/security/cve/CVE-2019-12382.html CVE-2019-12382 https://bugzilla.suse.com/1136586 SUSE Bug 1136586 https://bugzilla.suse.com/1155298 SUSE Bug 1155298 A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network. CVE-2019-3846 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.114.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_114-default-1-3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ https://www.suse.com/security/cve/CVE-2019-3846.html CVE-2019-3846 https://bugzilla.suse.com/1136424 SUSE Bug 1136424 https://bugzilla.suse.com/1136446 SUSE Bug 1136446 https://bugzilla.suse.com/1156330 SUSE Bug 1156330 The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server. CVE-2019-5489 SUSE Enterprise Storage 4:kernel-default-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-base-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-default-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-devel-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-macros-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-source-4.4.121-92.114.1 SUSE Enterprise Storage 4:kernel-syms-4.4.121-92.114.1 SUSE Enterprise Storage 4:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.114.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_114-default-1-3.5.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.114.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_114-default-1-3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191534-1/ https://www.suse.com/security/cve/CVE-2019-5489.html CVE-2019-5489 https://bugzilla.suse.com/1120843 SUSE Bug 1120843 https://bugzilla.suse.com/1120885 SUSE Bug 1120885