Security update for s390-tools SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:0777-1 Final 1 1 2021-03-12T16:41:58Z current 2021-03-12T16:41:58Z 2021-03-12T16:41:58Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for s390-tools This update for s390-tools fixes the following issues: - Fixed an issue where IPL was not working when bootloader was installed on a SCSI disk with 4k physical blocksize without using a devicemapper target (bsc#1183041). - CVE-2021-25316: Do not use predictable temporary file names (bsc#1182777). - Made the name of the temporary configuration file in /tmp/ unpredictable (bsc#1182876). - Changing the scheduler from 'deadline' to the newly created 'mq-deadline' scheduler (bsc#1176574) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-777,SUSE-SLE-Module-Basesystem-15-SP2-2021-777 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20210777-1/ Link for SUSE-SU-2021:0777-1 https://lists.suse.com/pipermail/sle-security-updates/2021-March/008490.html E-Mail link for SUSE-SU-2021:0777-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1176574 SUSE Bug 1176574 https://bugzilla.suse.com/1182777 SUSE Bug 1182777 https://bugzilla.suse.com/1182876 SUSE Bug 1182876 https://bugzilla.suse.com/1183040 SUSE Bug 1183040 https://www.suse.com/security/cve/CVE-2021-25316/ SUSE CVE CVE-2021-25316 page SUSE Linux Enterprise Module for Basesystem 15 SP2 osasnmpd-2.11.0-9.20.1 s390-tools-2.11.0-9.20.1 s390-tools-hmcdrvfs-2.11.0-9.20.1 s390-tools-zdsfs-2.11.0-9.20.1 osasnmpd-2.11.0-9.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 s390-tools-2.11.0-9.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 s390-tools-hmcdrvfs-2.11.0-9.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 s390-tools-zdsfs-2.11.0-9.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux Enterprise Server 15-SP2 s390-tools versions prior to 2.11.0-9.20.1. CVE-2021-25316 SUSE Linux Enterprise Module for Basesystem 15 SP2:osasnmpd-2.11.0-9.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:s390-tools-2.11.0-9.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:s390-tools-hmcdrvfs-2.11.0-9.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:s390-tools-zdsfs-2.11.0-9.20.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210777-1/ https://www.suse.com/security/cve/CVE-2021-25316.html CVE-2021-25316 https://bugzilla.suse.com/1180877 SUSE Bug 1180877 https://bugzilla.suse.com/1182777 SUSE Bug 1182777 https://bugzilla.suse.com/1182876 SUSE Bug 1182876