Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1255-1 Final 1 1 2020-05-26T14:11:09Z current 2020-05-26T14:11:09Z 2020-05-26T14:11:09Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424). - CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629). - CVE-2020-8647: Fixed a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929). - CVE-2020-8649: Fixed a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931). - CVE-2020-9383: Fixed an issue in set_fdc in drivers/block/floppy.c, which leads to a wait_til_ready out-of-bounds read (bnc#1165111). - CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295). - CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386). - CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285). - CVE-2020-11609: Fixed a NULL pointer dereference in the stv06xx subsystem caused by mishandling invalid descriptors (bnc#1168854). - CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags() (bsc#1170778). - CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev (bsc#1170056). - CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a video driver. This could lead to local information disclosure with System execution privileges needed (bnc#1170345). - CVE-2020-11608: Fixed an issue in drivers/media/usb/gspca/ov519.c caused by a NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints (bnc#1168829). - CVE-2017-18255: The perf_cpu_time_max_percent_handler function in kernel/events/core.c allowed local users to cause a denial of service (integer overflow) or possibly have unspecified other impact via a large value, as demonstrated by an incorrect sample-rate calculation (bnc#1087813). - CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c (bnc#1162928). - CVE-2020-2732: A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest (bnc#1163971). - CVE-2019-5108: Fixed a denial-of-service vulnerability caused by triggering AP to send IAPP location updates for stations before the required authentication process has completed (bnc#1159912). - CVE-2020-8992: ext4_protect_reserved_inode in fs/ext4/block_validity.c allowed attackers to cause a denial of service (soft lockup) via a crafted journal size (bnc#1164069). - CVE-2018-21008: Fixed a use-after-free which could be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c (bnc#1149591). - CVE-2019-14896: A heap-based buffer overflow vulnerability was found in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bnc#1157157). - CVE-2019-14897: A stack-based buffer overflow was found in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bnc#1157155). - CVE-2019-18675: Fixed an integer overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allowed local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation (bnc#1157804). - CVE-2019-14615: Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may have allowed an unauthenticated user to potentially enable information disclosure via local access (bnc#1160195, bsc#1165881). - CVE-2019-19965: Fixed a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition (bnc#1159911). - CVE-2019-20054: Fixed a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links (bnc#1159910). - CVE-2019-20096: Fixed a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service (bnc#1159908). - CVE-2019-19966: Fixed a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service (bnc#1159841). - CVE-2019-19447: Fixed an issue with mounting a crafted ext4 filesystem image, performing some operations, and unmounting could lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c (bnc#1158819). - CVE-2019-19319: Fixed an issue with a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call (bnc#1158021). - CVE-2019-19767: Fixed mishandling of ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c (bnc#1159297). - CVE-2019-19066: Fixed memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c that allowed attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures (bnc#1157303). - CVE-2019-19332: There was an OOB memory write via kvm_dev_ioctl_get_cpuid (bsc#1158827). - CVE-2019-19537: There was a race condition bug that could have been caused by a malicious USB device in the USB character device driver layer (bnc#1158904). - CVE-2019-19535: There was an info-leak bug that could have been caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver (bnc#1158903). - CVE-2019-19527: There was a use-after-free bug that could have been caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver (bnc#1158900). - CVE-2019-19533: There was an info-leak bug that could have been caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver (bnc#1158834). - CVE-2019-19532: There were multiple out-of-bounds write bugs that could have been caused by a malicious USB device in the Linux kernel HID drivers (bnc#1158824). - CVE-2019-19523: There was a use-after-free bug that could have been caused by a malicious USB device in the drivers/usb/misc/adutux.c driver (bnc#1158823). - CVE-2019-15213: An issue was discovered in the Linux kernel, there was a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver (bnc#1146544). - CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver (bnc#1158445). - CVE-2019-19525: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver (bnc#1158417). - CVE-2019-19530: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver (bnc#1158410). - CVE-2019-19536: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver (bnc#1158394). - CVE-2019-19524: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver (bnc#1158413). - CVE-2019-19534: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver (bnc#1158398). - CVE-2019-14901: A heap overflow flaw was found in the Linux kernel in Marvell WiFi chip driver. The vulnerability allowed a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system (bnc#1157042). - CVE-2019-14895: Fixed a heap-based buffer overflow in the Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code (bnc#1157158). - CVE-2019-18660: Fixed a information disclosure on powerpc related to the Spectre-RSB mitigation. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c (bnc#1157038 1157923). - CVE-2019-18683: Fixed a privilege escalation where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem) (bnc#1155897). - CVE-2019-19062: Fixed a memory leak in the crypto_report() function in crypto/crypto_user_base.c, which allowed attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures (bnc#1157333). - CVE-2019-19052: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c allowed attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures (bnc#1157324). - CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c allowed attackers to cause a denial of service (memory consumption) (bnc#1157143). - CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c allowed attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures (bnc#1157070). - CVE-2019-11091,CVE-2018-12126,CVE-2018-12130,CVE-2018-12127: Earlier mitigations for the 'MDS' Microarchitectural Data Sampling attacks were not complete. An additional fix was added to the x86_64 fast systemcall path to further mitigate these attacks. (bsc#1164846 bsc#1170847) The following non-security bugs were fixed: - blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285). - blktrace: fix dereference after null check (bsc#1159285). - blktrace: fix trace mutex deadlock (bsc#1159285). - btrfs: Fix bound checking in qgroup_trace_new_subtree_blocks (bsc#1155311). - btrfs: qgroup: Check bg while resuming relocation to avoid NULL pointer dereference (bsc#1155311). - btrfs: qgroup: Cleanup old subtree swap code (bsc#1155311). - btrfs: qgroup: Do not trace subtree if we're dropping reloc tree (bsc#1155311). - btrfs: qgroup: Introduce function to find all new tree blocks of reloc tree (bsc#1155311). - btrfs: qgroup: Introduce function to trace two swaped extents (bsc#1155311). - btrfs: qgroup: Introduce per-root swapped blocks infrastructure (bsc#1155311). - btrfs: qgroup: Only trace data extents in leaves if we're relocating data block group (bsc#1155311). - btrfs: qgroup: Refactor btrfs_qgroup_trace_subtree_swap (bsc#1155311). - btrfs: qgroup: Use delayed subtree rescan for balance (bsc#1155311). - btrfs: qgroup: Use generation-aware subtree swap to mark dirty extents (bsc#1155311). - btrfs: reloc: Also queue orphan reloc tree for cleanup to avoid BUG_ON() (bsc#1155311). - btrfs: relocation: Delay reloc tree deletion after merge_reloc_roots (bsc#1155311). - btrfs: relocation: fix use-after-free on dead relocation roots (bsc#1155311). - btrfs: reloc: Fix NULL pointer dereference due to expanded reloc_root lifespan (bsc#1155311). - cgroup: avoid copying strings longer than the buffers (bsc#1146544). - cgroup: use strlcpy() instead of strscpy() to avoid spurious warning (bsc#1146544). - enic: prevent waking up stopped tx queues over watchdog reset (bsc#1133147). - ext4: fix use-after-free race with debug_want_extra_isize (bsc#1136449). - fix PageHeadHuge() race with THP split (VM Functionality, bsc#1165311). - fs/binfmt_misc.c: do not allow offset overflow (bsc#1099279 bsc#1156060). - fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#1165985). - futex: Use smp_store_release() in mark_wake_futex() (bsc#1157464). - Input: add safety guards to input_set_keycode() (bsc#1168075). - ipv4: correct gso_size for UFO (bsc#1154844). - ipv6: fix memory accounting during ipv6 queue expire (bsc#1162227) (bsc#1162227). - ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325). - media: ov519: add missing endpoint sanity checks (bsc#1168829). - media: stv06xx: add missing descriptor sanity checks (bsc#1168854). - netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199). - netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612). - powerpc/64: Call setup_barrier_nospec() from setup_arch() (bsc#1131107). - powerpc/64: Make meltdown reporting Book3S 64 specific (bsc#1091041). - powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (bsc#1131107). - powerpc/64s: Add new security feature flags for count cache flush (bsc#1131107). - powerpc/64s: Add support for software count cache flush (bsc#1131107). - powerpc/64s: support nospectre_v2 cmdline option (bsc#1131107). - powerpc/asm: Add a patch_site macro & helpers for patching instructions (bsc#1131107). - powerpc/fsl: Add nospectre_v2 command line argument (bsc#1131107). - powerpc/fsl: Fix spectre_v2 mitigations reporting (bsc#1131107). - powerpc/powernv: Query firmware for count cache flush settings (bsc#1131107). - powerpc/pseries: Query hypervisor for count cache flush settings (bsc#1131107). - powerpc/security/book3s64: Report L1TF status in sysfs (bsc#1091041). - powerpc/security: Fix spectre_v2 reporting (bsc#1131107). - powerpc/security: Fix wrong message when RFI Flush is disable (bsc#1131107). - powerpc/security: Show powerpc_security_features in debugfs (bsc#1131107). - route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race (bsc#1037216). - sched/fair: WARN() and refuse to set buddy when !se->on_rq (bsc#1158132). - string: drop __must_check from strscpy() and restore strscpy() usages in cgroup (bsc#1146544). - x86/alternatives: Add int3_emulate_call() selftest (bsc#1153811). - x86/alternatives: Fix int3_emulate_call() selftest stack corruption (bsc#1153811). - x86/mitigations: Clear CPU buffers on the SYSCALL fast path (bsc#1164846). - xen/pv: Fix a boot up hang revealed by int3 self test (bsc#1153811). - xfs: also remove cached ACLs when removing the underlying attr (bsc#1165873). - xfs: bulkstat should copy lastip whenever userspace supplies one (bsc#1165984). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2020-1255,SUSE-OpenStack-Cloud-7-2020-1255,SUSE-SLE-HA-12-SP2-2020-1255,SUSE-SLE-SAP-12-SP2-2020-1255,SUSE-SLE-SERVER-12-SP2-2020-1255,SUSE-SLE-SERVER-12-SP2-BCL-2020-1255 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ Link for SUSE-SU-2020:1255-1 https://lists.suse.com/pipermail/sle-security-updates/2020-May/006812.html E-Mail link for SUSE-SU-2020:1255-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1037216 SUSE Bug 1037216 https://bugzilla.suse.com/1075091 SUSE Bug 1075091 https://bugzilla.suse.com/1075994 SUSE Bug 1075994 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1087813 SUSE Bug 1087813 https://bugzilla.suse.com/1091041 SUSE Bug 1091041 https://bugzilla.suse.com/1099279 SUSE Bug 1099279 https://bugzilla.suse.com/1120386 SUSE Bug 1120386 https://bugzilla.suse.com/1131107 SUSE Bug 1131107 https://bugzilla.suse.com/1133147 SUSE Bug 1133147 https://bugzilla.suse.com/1136449 SUSE Bug 1136449 https://bugzilla.suse.com/1137325 SUSE Bug 1137325 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 https://bugzilla.suse.com/1146544 SUSE Bug 1146544 https://bugzilla.suse.com/1146612 SUSE Bug 1146612 https://bugzilla.suse.com/1149591 SUSE Bug 1149591 https://bugzilla.suse.com/1153811 SUSE Bug 1153811 https://bugzilla.suse.com/1154844 SUSE Bug 1154844 https://bugzilla.suse.com/1155311 SUSE Bug 1155311 https://bugzilla.suse.com/1155897 SUSE Bug 1155897 https://bugzilla.suse.com/1156060 SUSE Bug 1156060 https://bugzilla.suse.com/1157038 SUSE Bug 1157038 https://bugzilla.suse.com/1157042 SUSE Bug 1157042 https://bugzilla.suse.com/1157070 SUSE Bug 1157070 https://bugzilla.suse.com/1157143 SUSE Bug 1157143 https://bugzilla.suse.com/1157155 SUSE Bug 1157155 https://bugzilla.suse.com/1157157 SUSE Bug 1157157 https://bugzilla.suse.com/1157158 SUSE Bug 1157158 https://bugzilla.suse.com/1157303 SUSE Bug 1157303 https://bugzilla.suse.com/1157324 SUSE Bug 1157324 https://bugzilla.suse.com/1157333 SUSE Bug 1157333 https://bugzilla.suse.com/1157464 SUSE Bug 1157464 https://bugzilla.suse.com/1157804 SUSE Bug 1157804 https://bugzilla.suse.com/1157923 SUSE Bug 1157923 https://bugzilla.suse.com/1158021 SUSE Bug 1158021 https://bugzilla.suse.com/1158132 SUSE Bug 1158132 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158394 SUSE Bug 1158394 https://bugzilla.suse.com/1158398 SUSE Bug 1158398 https://bugzilla.suse.com/1158410 SUSE Bug 1158410 https://bugzilla.suse.com/1158413 SUSE Bug 1158413 https://bugzilla.suse.com/1158417 SUSE Bug 1158417 https://bugzilla.suse.com/1158427 SUSE Bug 1158427 https://bugzilla.suse.com/1158445 SUSE Bug 1158445 https://bugzilla.suse.com/1158819 SUSE Bug 1158819 https://bugzilla.suse.com/1158823 SUSE Bug 1158823 https://bugzilla.suse.com/1158824 SUSE Bug 1158824 https://bugzilla.suse.com/1158827 SUSE Bug 1158827 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 https://bugzilla.suse.com/1158900 SUSE Bug 1158900 https://bugzilla.suse.com/1158903 SUSE Bug 1158903 https://bugzilla.suse.com/1158904 SUSE Bug 1158904 https://bugzilla.suse.com/1159199 SUSE Bug 1159199 https://bugzilla.suse.com/1159285 SUSE Bug 1159285 https://bugzilla.suse.com/1159297 SUSE Bug 1159297 https://bugzilla.suse.com/1159841 SUSE Bug 1159841 https://bugzilla.suse.com/1159908 SUSE Bug 1159908 https://bugzilla.suse.com/1159910 SUSE Bug 1159910 https://bugzilla.suse.com/1159911 SUSE Bug 1159911 https://bugzilla.suse.com/1159912 SUSE Bug 1159912 https://bugzilla.suse.com/1160195 SUSE Bug 1160195 https://bugzilla.suse.com/1162227 SUSE Bug 1162227 https://bugzilla.suse.com/1162298 SUSE Bug 1162298 https://bugzilla.suse.com/1162928 SUSE Bug 1162928 https://bugzilla.suse.com/1162929 SUSE Bug 1162929 https://bugzilla.suse.com/1162931 SUSE Bug 1162931 https://bugzilla.suse.com/1163971 SUSE Bug 1163971 https://bugzilla.suse.com/1164069 SUSE Bug 1164069 https://bugzilla.suse.com/1164078 SUSE Bug 1164078 https://bugzilla.suse.com/1164846 SUSE Bug 1164846 https://bugzilla.suse.com/1165111 SUSE Bug 1165111 https://bugzilla.suse.com/1165311 SUSE Bug 1165311 https://bugzilla.suse.com/1165873 SUSE Bug 1165873 https://bugzilla.suse.com/1165881 SUSE Bug 1165881 https://bugzilla.suse.com/1165984 SUSE Bug 1165984 https://bugzilla.suse.com/1165985 SUSE Bug 1165985 https://bugzilla.suse.com/1167629 SUSE Bug 1167629 https://bugzilla.suse.com/1168075 SUSE Bug 1168075 https://bugzilla.suse.com/1168295 SUSE Bug 1168295 https://bugzilla.suse.com/1168424 SUSE Bug 1168424 https://bugzilla.suse.com/1168829 SUSE Bug 1168829 https://bugzilla.suse.com/1168854 SUSE Bug 1168854 https://bugzilla.suse.com/1170056 SUSE Bug 1170056 https://bugzilla.suse.com/1170345 SUSE Bug 1170345 https://bugzilla.suse.com/1170778 SUSE Bug 1170778 https://www.suse.com/security/cve/CVE-2017-18255/ SUSE CVE CVE-2017-18255 page https://www.suse.com/security/cve/CVE-2018-12126/ SUSE CVE CVE-2018-12126 page https://www.suse.com/security/cve/CVE-2018-12127/ SUSE CVE CVE-2018-12127 page https://www.suse.com/security/cve/CVE-2018-12130/ SUSE CVE CVE-2018-12130 page https://www.suse.com/security/cve/CVE-2018-21008/ SUSE CVE CVE-2018-21008 page https://www.suse.com/security/cve/CVE-2019-11091/ SUSE CVE CVE-2019-11091 page https://www.suse.com/security/cve/CVE-2019-14615/ SUSE CVE CVE-2019-14615 page https://www.suse.com/security/cve/CVE-2019-14895/ SUSE CVE CVE-2019-14895 page https://www.suse.com/security/cve/CVE-2019-14896/ SUSE CVE CVE-2019-14896 page https://www.suse.com/security/cve/CVE-2019-14897/ SUSE CVE CVE-2019-14897 page https://www.suse.com/security/cve/CVE-2019-14901/ SUSE CVE CVE-2019-14901 page https://www.suse.com/security/cve/CVE-2019-15213/ SUSE CVE CVE-2019-15213 page https://www.suse.com/security/cve/CVE-2019-18660/ SUSE CVE CVE-2019-18660 page https://www.suse.com/security/cve/CVE-2019-18675/ SUSE CVE CVE-2019-18675 page https://www.suse.com/security/cve/CVE-2019-18683/ SUSE CVE CVE-2019-18683 page https://www.suse.com/security/cve/CVE-2019-19052/ SUSE CVE CVE-2019-19052 page https://www.suse.com/security/cve/CVE-2019-19062/ SUSE CVE CVE-2019-19062 page https://www.suse.com/security/cve/CVE-2019-19066/ SUSE CVE CVE-2019-19066 page https://www.suse.com/security/cve/CVE-2019-19073/ SUSE CVE CVE-2019-19073 page https://www.suse.com/security/cve/CVE-2019-19074/ SUSE CVE CVE-2019-19074 page https://www.suse.com/security/cve/CVE-2019-19319/ SUSE CVE CVE-2019-19319 page https://www.suse.com/security/cve/CVE-2019-19332/ SUSE CVE CVE-2019-19332 page https://www.suse.com/security/cve/CVE-2019-19447/ SUSE CVE CVE-2019-19447 page https://www.suse.com/security/cve/CVE-2019-19523/ SUSE CVE CVE-2019-19523 page https://www.suse.com/security/cve/CVE-2019-19524/ SUSE CVE CVE-2019-19524 page https://www.suse.com/security/cve/CVE-2019-19525/ SUSE CVE CVE-2019-19525 page https://www.suse.com/security/cve/CVE-2019-19527/ SUSE CVE CVE-2019-19527 page https://www.suse.com/security/cve/CVE-2019-19530/ SUSE CVE CVE-2019-19530 page https://www.suse.com/security/cve/CVE-2019-19531/ SUSE CVE CVE-2019-19531 page https://www.suse.com/security/cve/CVE-2019-19532/ SUSE CVE CVE-2019-19532 page https://www.suse.com/security/cve/CVE-2019-19533/ SUSE CVE CVE-2019-19533 page https://www.suse.com/security/cve/CVE-2019-19534/ SUSE CVE CVE-2019-19534 page https://www.suse.com/security/cve/CVE-2019-19535/ SUSE CVE CVE-2019-19535 page https://www.suse.com/security/cve/CVE-2019-19536/ SUSE CVE CVE-2019-19536 page https://www.suse.com/security/cve/CVE-2019-19537/ SUSE CVE CVE-2019-19537 page https://www.suse.com/security/cve/CVE-2019-19767/ SUSE CVE CVE-2019-19767 page https://www.suse.com/security/cve/CVE-2019-19768/ SUSE CVE CVE-2019-19768 page https://www.suse.com/security/cve/CVE-2019-19965/ SUSE CVE CVE-2019-19965 page https://www.suse.com/security/cve/CVE-2019-19966/ SUSE CVE CVE-2019-19966 page https://www.suse.com/security/cve/CVE-2019-20054/ SUSE CVE CVE-2019-20054 page https://www.suse.com/security/cve/CVE-2019-20096/ SUSE CVE CVE-2019-20096 page https://www.suse.com/security/cve/CVE-2019-3701/ SUSE CVE CVE-2019-3701 page https://www.suse.com/security/cve/CVE-2019-5108/ SUSE CVE CVE-2019-5108 page https://www.suse.com/security/cve/CVE-2019-9455/ SUSE CVE CVE-2019-9455 page https://www.suse.com/security/cve/CVE-2019-9458/ SUSE CVE CVE-2019-9458 page https://www.suse.com/security/cve/CVE-2020-10690/ SUSE CVE CVE-2020-10690 page https://www.suse.com/security/cve/CVE-2020-10720/ SUSE CVE CVE-2020-10720 page https://www.suse.com/security/cve/CVE-2020-10942/ SUSE CVE CVE-2020-10942 page https://www.suse.com/security/cve/CVE-2020-11494/ SUSE CVE CVE-2020-11494 page https://www.suse.com/security/cve/CVE-2020-11608/ SUSE CVE CVE-2020-11608 page https://www.suse.com/security/cve/CVE-2020-11609/ SUSE CVE CVE-2020-11609 page https://www.suse.com/security/cve/CVE-2020-2732/ SUSE CVE CVE-2020-2732 page https://www.suse.com/security/cve/CVE-2020-8647/ SUSE CVE CVE-2020-8647 page https://www.suse.com/security/cve/CVE-2020-8648/ SUSE CVE CVE-2020-8648 page https://www.suse.com/security/cve/CVE-2020-8649/ SUSE CVE CVE-2020-8649 page https://www.suse.com/security/cve/CVE-2020-8992/ SUSE CVE CVE-2020-8992 page https://www.suse.com/security/cve/CVE-2020-9383/ SUSE CVE CVE-2020-9383 page SUSE Linux Enterprise High Availability Extension 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE OpenStack Cloud 7 cluster-md-kmp-debug-4.4.121-92.129.1 cluster-md-kmp-default-4.4.121-92.129.1 cluster-md-kmp-vanilla-4.4.121-92.129.1 cluster-network-kmp-debug-4.4.121-92.129.1 cluster-network-kmp-default-4.4.121-92.129.1 cluster-network-kmp-vanilla-4.4.121-92.129.1 dlm-kmp-debug-4.4.121-92.129.1 dlm-kmp-default-4.4.121-92.129.1 dlm-kmp-vanilla-4.4.121-92.129.1 gfs2-kmp-debug-4.4.121-92.129.1 gfs2-kmp-default-4.4.121-92.129.1 gfs2-kmp-vanilla-4.4.121-92.129.1 kernel-debug-4.4.121-92.129.1 kernel-debug-base-4.4.121-92.129.1 kernel-debug-devel-4.4.121-92.129.1 kernel-debug-extra-4.4.121-92.129.1 kernel-debug-kgraft-4.4.121-92.129.1 kernel-default-4.4.121-92.129.1 kernel-default-base-4.4.121-92.129.1 kernel-default-devel-4.4.121-92.129.1 kernel-default-extra-4.4.121-92.129.1 kernel-default-kgraft-4.4.121-92.129.1 kernel-default-man-4.4.121-92.129.1 kernel-devel-4.4.121-92.129.1 kernel-docs-4.4.121-92.129.1 kernel-docs-html-4.4.121-92.129.1 kernel-docs-pdf-4.4.121-92.129.1 kernel-macros-4.4.121-92.129.1 kernel-obs-build-4.4.121-92.129.1 kernel-obs-qa-4.4.121-92.129.1 kernel-source-4.4.121-92.129.1 kernel-source-vanilla-4.4.121-92.129.1 kernel-syms-4.4.121-92.129.1 kernel-vanilla-4.4.121-92.129.1 kernel-vanilla-base-4.4.121-92.129.1 kernel-vanilla-devel-4.4.121-92.129.1 kernel-zfcpdump-4.4.121-92.129.1 kgraft-patch-4_4_121-92_129-default-1-3.3.1 ocfs2-kmp-debug-4.4.121-92.129.1 ocfs2-kmp-default-4.4.121-92.129.1 ocfs2-kmp-vanilla-4.4.121-92.129.1 cluster-md-kmp-default-4.4.121-92.129.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 cluster-network-kmp-default-4.4.121-92.129.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 dlm-kmp-default-4.4.121-92.129.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 gfs2-kmp-default-4.4.121-92.129.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 ocfs2-kmp-default-4.4.121-92.129.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP2 kernel-default-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-base-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-devel-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-devel-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-macros-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-source-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-syms-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL kernel-default-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-base-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-devel-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-man-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-devel-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-macros-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-syms-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kgraft-patch-4_4_121-92_129-default-1-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-base-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-devel-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-devel-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-macros-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-source-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-syms-4.4.121-92.129.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kgraft-patch-4_4_121-92_129-default-1-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default-4.4.121-92.129.1 as a component of SUSE OpenStack Cloud 7 kernel-default-base-4.4.121-92.129.1 as a component of SUSE OpenStack Cloud 7 kernel-default-devel-4.4.121-92.129.1 as a component of SUSE OpenStack Cloud 7 kernel-default-man-4.4.121-92.129.1 as a component of SUSE OpenStack Cloud 7 kernel-devel-4.4.121-92.129.1 as a component of SUSE OpenStack Cloud 7 kernel-macros-4.4.121-92.129.1 as a component of SUSE OpenStack Cloud 7 kernel-source-4.4.121-92.129.1 as a component of SUSE OpenStack Cloud 7 kernel-syms-4.4.121-92.129.1 as a component of SUSE OpenStack Cloud 7 kgraft-patch-4_4_121-92_129-default-1-3.3.1 as a component of SUSE OpenStack Cloud 7 The perf_cpu_time_max_percent_handler function in kernel/events/core.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow) or possibly have unspecified other impact via a large value, as demonstrated by an incorrect sample-rate calculation. CVE-2017-18255 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2017-18255.html CVE-2017-18255 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1087813 SUSE Bug 1087813 Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf CVE-2018-12126 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2018-12126.html CVE-2018-12126 https://bugzilla.suse.com/1103186 SUSE Bug 1103186 https://bugzilla.suse.com/1111331 SUSE Bug 1111331 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1135409 SUSE Bug 1135409 https://bugzilla.suse.com/1135524 SUSE Bug 1135524 https://bugzilla.suse.com/1137916 SUSE Bug 1137916 https://bugzilla.suse.com/1138534 SUSE Bug 1138534 https://bugzilla.suse.com/1141977 SUSE Bug 1141977 https://bugzilla.suse.com/1149725 SUSE Bug 1149725 https://bugzilla.suse.com/1149726 SUSE Bug 1149726 https://bugzilla.suse.com/1149729 SUSE Bug 1149729 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf CVE-2018-12127 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2018-12127.html CVE-2018-12127 https://bugzilla.suse.com/1103186 SUSE Bug 1103186 https://bugzilla.suse.com/1111331 SUSE Bug 1111331 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1135409 SUSE Bug 1135409 https://bugzilla.suse.com/1138534 SUSE Bug 1138534 https://bugzilla.suse.com/1141977 SUSE Bug 1141977 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf CVE-2018-12130 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2018-12130.html CVE-2018-12130 https://bugzilla.suse.com/1103186 SUSE Bug 1103186 https://bugzilla.suse.com/1111331 SUSE Bug 1111331 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1135409 SUSE Bug 1135409 https://bugzilla.suse.com/1137916 SUSE Bug 1137916 https://bugzilla.suse.com/1138534 SUSE Bug 1138534 https://bugzilla.suse.com/1141977 SUSE Bug 1141977 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/rsi/rsi_91x_mac80211.c. CVE-2018-21008 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2018-21008.html CVE-2018-21008 https://bugzilla.suse.com/1149591 SUSE Bug 1149591 Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf CVE-2019-11091 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-11091.html CVE-2019-11091 https://bugzilla.suse.com/1103186 SUSE Bug 1103186 https://bugzilla.suse.com/1111331 SUSE Bug 1111331 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1133319 SUSE Bug 1133319 https://bugzilla.suse.com/1135394 SUSE Bug 1135394 https://bugzilla.suse.com/1138043 SUSE Bug 1138043 https://bugzilla.suse.com/1138534 SUSE Bug 1138534 https://bugzilla.suse.com/1141977 SUSE Bug 1141977 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access. CVE-2019-14615 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-14615.html CVE-2019-14615 https://bugzilla.suse.com/1160195 SUSE Bug 1160195 https://bugzilla.suse.com/1165881 SUSE Bug 1165881 A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code. CVE-2019-14895 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-14895.html CVE-2019-14895 https://bugzilla.suse.com/1157042 SUSE Bug 1157042 https://bugzilla.suse.com/1157158 SUSE Bug 1157158 https://bugzilla.suse.com/1173100 SUSE Bug 1173100 https://bugzilla.suse.com/1173660 SUSE Bug 1173660 A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP. CVE-2019-14896 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-14896.html CVE-2019-14896 https://bugzilla.suse.com/1157157 SUSE Bug 1157157 https://bugzilla.suse.com/1160468 SUSE Bug 1160468 A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA. CVE-2019-14897 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-14897.html CVE-2019-14897 https://bugzilla.suse.com/1157155 SUSE Bug 1157155 https://bugzilla.suse.com/1160467 SUSE Bug 1160467 https://bugzilla.suse.com/1160468 SUSE Bug 1160468 A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system. CVE-2019-14901 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-14901.html CVE-2019-14901 https://bugzilla.suse.com/1157042 SUSE Bug 1157042 https://bugzilla.suse.com/1173661 SUSE Bug 1173661 An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver. CVE-2019-15213 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-15213.html CVE-2019-15213 https://bugzilla.suse.com/1146519 SUSE Bug 1146519 https://bugzilla.suse.com/1146544 SUSE Bug 1146544 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c. CVE-2019-18660 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-18660.html CVE-2019-18660 https://bugzilla.suse.com/1157038 SUSE Bug 1157038 https://bugzilla.suse.com/1157923 SUSE Bug 1157923 The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation. CVE-2019-18675 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-18675.html CVE-2019-18675 https://bugzilla.suse.com/1157804 SUSE Bug 1157804 An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free. CVE-2019-18683 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-18683.html CVE-2019-18683 https://bugzilla.suse.com/1155897 SUSE Bug 1155897 https://bugzilla.suse.com/1173868 SUSE Bug 1173868 A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486. CVE-2019-19052 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19052.html CVE-2019-19052 https://bugzilla.suse.com/1157324 SUSE Bug 1157324 A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042. CVE-2019-19062 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19062.html CVE-2019-19062 https://bugzilla.suse.com/1157333 SUSE Bug 1157333 A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e62395da2bd. CVE-2019-19066 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19066.html CVE-2019-19066 https://bugzilla.suse.com/1157303 SUSE Bug 1157303 Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering wait_for_completion_timeout() failures. This affects the htc_config_pipe_credits() function, the htc_setup_complete() function, and the htc_connect_service() function, aka CID-853acf7caf10. CVE-2019-19073 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19073.html CVE-2019-19073 https://bugzilla.suse.com/1157070 SUSE Bug 1157070 A memory leak in the ath9k_wmi_cmd() function in drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption), aka CID-728c1e2a05e4. CVE-2019-19074 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19074.html CVE-2019-19074 https://bugzilla.suse.com/1157143 SUSE Bug 1157143 In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call, aka CID-345c0dbf3a30. CVE-2019-19319 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19319.html CVE-2019-19319 https://bugzilla.suse.com/1158021 SUSE Bug 1158021 An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service. CVE-2019-19332 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19332.html CVE-2019-19332 https://bugzilla.suse.com/1158827 SUSE Bug 1158827 In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c. CVE-2019-19447 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19447.html CVE-2019-19447 https://bugzilla.suse.com/1158819 SUSE Bug 1158819 https://bugzilla.suse.com/1173869 SUSE Bug 1173869 In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79. CVE-2019-19523 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19523.html CVE-2019-19523 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158823 SUSE Bug 1158823 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/input/ff-memless.c driver, aka CID-fa3a5a1880c9. CVE-2019-19524 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19524.html CVE-2019-19524 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158413 SUSE Bug 1158413 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 In the Linux kernel before 5.3.6, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/ieee802154/atusb.c driver, aka CID-7fd25e6fc035. CVE-2019-19525 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19525.html CVE-2019-19525 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158417 SUSE Bug 1158417 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e. CVE-2019-19527 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19527.html CVE-2019-19527 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 https://bugzilla.suse.com/1158900 SUSE Bug 1158900 In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef. CVE-2019-19530 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19530.html CVE-2019-19530 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158410 SUSE Bug 1158410 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver, aka CID-fc05481b2fca. CVE-2019-19531 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19531.html CVE-2019-19531 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158427 SUSE Bug 1158427 https://bugzilla.suse.com/1158445 SUSE Bug 1158445 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-gaff.c, drivers/hid/hid-holtekff.c, drivers/hid/hid-lg2ff.c, drivers/hid/hid-lg3ff.c, drivers/hid/hid-lg4ff.c, drivers/hid/hid-lgff.c, drivers/hid/hid-logitech-hidpp.c, drivers/hid/hid-microsoft.c, drivers/hid/hid-sony.c, drivers/hid/hid-tmff.c, and drivers/hid/hid-zpff.c. CVE-2019-19532 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19532.html CVE-2019-19532 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158823 SUSE Bug 1158823 https://bugzilla.suse.com/1158824 SUSE Bug 1158824 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464. CVE-2019-19533 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19533.html CVE-2019-19533 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29. CVE-2019-19534 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19534.html CVE-2019-19534 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158398 SUSE Bug 1158398 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042. CVE-2019-19535 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19535.html CVE-2019-19535 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 https://bugzilla.suse.com/1158903 SUSE Bug 1158903 In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver, aka CID-ead16e53c2f0. CVE-2019-19536 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19536.html CVE-2019-19536 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158394 SUSE Bug 1158394 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c. CVE-2019-19537 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19537.html CVE-2019-19537 https://bugzilla.suse.com/1158381 SUSE Bug 1158381 https://bugzilla.suse.com/1158834 SUSE Bug 1158834 https://bugzilla.suse.com/1158904 SUSE Bug 1158904 The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163. CVE-2019-19767 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19767.html CVE-2019-19767 https://bugzilla.suse.com/1159297 SUSE Bug 1159297 In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer). CVE-2019-19768 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19768.html CVE-2019-19768 https://bugzilla.suse.com/1159285 SUSE Bug 1159285 In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5. CVE-2019-19965 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19965.html CVE-2019-19965 https://bugzilla.suse.com/1159911 SUSE Bug 1159911 In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655. CVE-2019-19966 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-19966.html CVE-2019-19966 https://bugzilla.suse.com/1159841 SUSE Bug 1159841 In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e. CVE-2019-20054 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-20054.html CVE-2019-20054 https://bugzilla.suse.com/1159910 SUSE Bug 1159910 In the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b. CVE-2019-20096 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-20096.html CVE-2019-20096 https://bugzilla.suse.com/1159908 SUSE Bug 1159908 An issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwise logical operations that can be also applied to the can_dlc field. The privileged user "root" with CAP_NET_ADMIN can create a CAN frame modification rule that makes the data length code a higher value than the available CAN frame data size. In combination with a configured checksum calculation where the result is stored relatively to the end of the data (e.g. cgw_csum_xor_rel) the tail of the skb (e.g. frag_list pointer in skb_shared_info) can be rewritten which finally can cause a system crash. Because of a missing check, the CAN drivers may write arbitrary content beyond the data registers in the CAN controller's I/O memory when processing can-gw manipulated outgoing frames. CVE-2019-3701 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-3701.html CVE-2019-3701 https://bugzilla.suse.com/1120386 SUSE Bug 1120386 An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability. CVE-2019-5108 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-5108.html CVE-2019-5108 https://bugzilla.suse.com/1159912 SUSE Bug 1159912 https://bugzilla.suse.com/1159913 SUSE Bug 1159913 In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. CVE-2019-9455 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-9455.html CVE-2019-9455 https://bugzilla.suse.com/1170345 SUSE Bug 1170345 In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. CVE-2019-9458 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2019-9458.html CVE-2019-9458 https://bugzilla.suse.com/1168295 SUSE Bug 1168295 https://bugzilla.suse.com/1173963 SUSE Bug 1173963 There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode. CVE-2020-10690 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2020-10690.html CVE-2020-10690 https://bugzilla.suse.com/1170056 SUSE Bug 1170056 A flaw was found in the Linux kernel's implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system. CVE-2020-10720 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2020-10720.html CVE-2020-10720 https://bugzilla.suse.com/1170778 SUSE Bug 1170778 In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls. CVE-2020-10942 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2020-10942.html CVE-2020-10942 https://bugzilla.suse.com/1167629 SUSE Bug 1167629 An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL, aka CID-b9258a2cece4. CVE-2020-11494 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2020-11494.html CVE-2020-11494 https://bugzilla.suse.com/1168424 SUSE Bug 1168424 An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_regs when there are zero endpoints, aka CID-998912346c0d. CVE-2020-11608 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2020-11608.html CVE-2020-11608 https://bugzilla.suse.com/1168829 SUSE Bug 1168829 An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xx_pb0100.c mishandle invalid descriptors, as demonstrated by a NULL pointer dereference, aka CID-485b06aadb93. CVE-2020-11609 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2020-11609.html CVE-2020-11609 https://bugzilla.suse.com/1168854 SUSE Bug 1168854 A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest. CVE-2020-2732 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2020-2732.html CVE-2020-2732 https://bugzilla.suse.com/1163971 SUSE Bug 1163971 There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c. CVE-2020-8647 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2020-8647.html CVE-2020-8647 https://bugzilla.suse.com/1162929 SUSE Bug 1162929 https://bugzilla.suse.com/1164078 SUSE Bug 1164078 There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c. CVE-2020-8648 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2020-8648.html CVE-2020-8648 https://bugzilla.suse.com/1162928 SUSE Bug 1162928 There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c. CVE-2020-8649 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2020-8649.html CVE-2020-8649 https://bugzilla.suse.com/1162929 SUSE Bug 1162929 https://bugzilla.suse.com/1162931 SUSE Bug 1162931 ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size. CVE-2020-8992 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2020-8992.html CVE-2020-8992 https://bugzilla.suse.com/1164069 SUSE Bug 1164069 An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2. CVE-2020-9383 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-md-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:cluster-network-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:dlm-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:gfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise High Availability Extension 12 SP2:ocfs2-kmp-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-BCL:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-base-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-default-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-devel-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-macros-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-source-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-syms-4.4.121-92.129.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-1-3.3.1 SUSE OpenStack Cloud 7:kernel-default-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-base-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-default-man-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-devel-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-macros-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-source-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kernel-syms-4.4.121-92.129.1 SUSE OpenStack Cloud 7:kgraft-patch-4_4_121-92_129-default-1-3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201255-1/ https://www.suse.com/security/cve/CVE-2020-9383.html CVE-2020-9383 https://bugzilla.suse.com/1165111 SUSE Bug 1165111