| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2) (Important) |
| Description: |
This update for the Linux Kernel 4.4.121-92_101 fixes several issues.
The following security issues were fixed:
- CVE-2019-11477: Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. (bsc#1137586) - CVE-2019-11478: Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. (bsc#1137586) - CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network (bsc#1136424).
This update contains a regression fix for CVE-2019-11477 and CVE-2019-11478 (bsc#1140747).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1065237
1090671
1107832
1110233
1112142
1112143
1112144
1112146
1112147
1112148
1112152
1112153
1119183
1121816
1121821
1123823
1123828
1123832
1131709
1136446
1137597
1140747
1141780
1141782
1141783
1141785
1141789
1147021
1154862
1167231
1168630
1169511
1170643
1172437
1173377
1173378
1173380
1173576
1173613
1175070
1175071
1175072
CVE-2012-1571
CVE-2013-1762
CVE-2014-0016
CVE-2014-3710
CVE-2014-8116
CVE-2014-8117
CVE-2015-3644
CVE-2018-13785
CVE-2018-14633
CVE-2018-16435
CVE-2018-17182
CVE-2018-20748
CVE-2018-20749
CVE-2018-20750
CVE-2018-3136
CVE-2018-3139
CVE-2018-3149
CVE-2018-3169
CVE-2018-3180
CVE-2018-3183
CVE-2018-3214
CVE-2019-11477
CVE-2019-11478
CVE-2019-11771
CVE-2019-11775
CVE-2019-17498
CVE-2019-2762
CVE-2019-2766
CVE-2019-2769
CVE-2019-2816
CVE-2019-3846
CVE-2019-4473
CVE-2019-6109
CVE-2019-6111
CVE-2019-7317
CVE-2020-10757
CVE-2020-11985
CVE-2020-11993
CVE-2020-12402
CVE-2020-12415
CVE-2020-12416
CVE-2020-12417
CVE-2020-12418
CVE-2020-12419
CVE-2020-12420
CVE-2020-12421
CVE-2020-12422
CVE-2020-12423
CVE-2020-12424
CVE-2020-12425
CVE-2020-12426
CVE-2020-15563
CVE-2020-15565
CVE-2020-15567
CVE-2020-2756
CVE-2020-2757
CVE-2020-2773
CVE-2020-2781
CVE-2020-2800
CVE-2020-2803
CVE-2020-2805
CVE-2020-2830
CVE-2020-3899
CVE-2020-6819
CVE-2020-6820
CVE-2020-9490
SUSE-SU-2019:0057-1
SUSE-SU-2019:0313-1
SUSE-SU-2019:1524-1
SUSE-SU-2019:2336-1
SUSE-SU-2020:0928-1
SUSE-SU-2020:1211-1
SUSE-SU-2020:1571-1
SUSE-SU-2020:1886-1
SUSE-SU-2020:1899-1
SUSE-SU-2020:2450-1
|
| Platform(s): | openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.0 is installed AND Package Information
alsa-1.1.5-lp150.4 is installed
OR libasound2-1.1.5-lp150.4 is installed
OR libasound2-32bit-1.1.5-lp150.4 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.1 is installed
AND putty-0.72-lp151.3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
openssh-7.2p2-74.42 is installed
OR openssh-askpass-gnome-7.2p2-74.42 is installed
OR openssh-fips-7.2p2-74.42 is installed
OR openssh-helpers-7.2p2-74.42 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
kgraft-patch-4_4_121-92_92-default-4-2 is installed
OR kgraft-patch-SLE12-SP2_Update_24-4-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
kgraft-patch-4_4_121-92_101-default-4-2 is installed
OR kgraft-patch-SLE12-SP2_Update_27-4-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
file-5.19-9 is installed
OR file-magic-5.19-9 is installed
OR libmagic1-5.19-9 is installed
OR libmagic1-32bit-5.19-9 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-BCL is installed
AND Package Information
xen-4.9.4_04-3.56 is installed
OR xen-doc-html-4.9.4_04-3.56 is installed
OR xen-libs-4.9.4_04-3.56 is installed
OR xen-libs-32bit-4.9.4_04-3.56 is installed
OR xen-tools-4.9.4_04-3.56 is installed
OR xen-tools-domU-4.9.4_04-3.56 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
AND ucode-intel-20191112-13.53 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
kgraft-patch-4_4_180-94_100-default-3-2 is installed
OR kgraft-patch-SLE12-SP3_Update_27-3-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
libprocps3-3.3.9-11.14 is installed
OR procps-3.3.9-11.14 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND Package Information
dracut-044.1-9 is installed
OR dracut-fips-044.1-9 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND Package Information
java-1_7_0-openjdk-1.7.0.261-43.38 is installed
OR java-1_7_0-openjdk-demo-1.7.0.261-43.38 is installed
OR java-1_7_0-openjdk-devel-1.7.0.261-43.38 is installed
OR java-1_7_0-openjdk-headless-1.7.0.261-43.38 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
xen-4.9.4_04-3.56 is installed
OR xen-doc-html-4.9.4_04-3.56 is installed
OR xen-libs-4.9.4_04-3.56 is installed
OR xen-libs-32bit-4.9.4_04-3.56 is installed
OR xen-tools-4.9.4_04-3.56 is installed
OR xen-tools-domU-4.9.4_04-3.56 is installed
|