Revision Date: | 2022-04-14 | Version: | 1 |
Title: | Security update for the Linux Kernel (Important) |
Description: |
The SUSE Linux Enterprise 12 SP5 kernel was updated.
The following security bugs were fixed:
- CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be used to both read from and write to relative stack data, which can lead to arbitrary code execution. (bsc#1197227) - CVE-2022-28389: Fixed a double free in drivers/net/can/usb/mcba_usb.c vulnerability in the Linux kernel. (bnc#1198033) - CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel. (bnc#1198031) - CVE-2022-28388: Fixed a double free in drivers/net/can/usb/usb_8dev.c vulnerability in the Linux kernel. (bnc#1198032) - CVE-2022-0812: Fixed an incorrect header size calculations which could lead to a memory leak. (bsc#1196639) - CVE-2022-1048: Fixed a race Condition in snd_pcm_hw_free leading to use-after-free due to the AB/BA lock with buffer_mutex and mmap_lock. (bsc#1197331) - CVE-2022-0850: Fixed a kernel information leak vulnerability in iov_iter.c. (bsc#1196761) - CVE-2022-26966: Fixed an issue in drivers/net/usb/sr9700.c, which allowed attackers to obtain sensitive information from the memory via crafted frame lengths from a USB device. (bsc#1196836) - CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-after-free if there is a corrupted quota file. (bnc#1197366) - CVE-2021-39713: Fixed a race condition in the network scheduling subsystem which could lead to a use-after-free. (bnc#1196973) - CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040,CVE-2022-23041,CVE-2022-23042: Fixed multiple issues which could have lead to read/write access to memory pages or denial of service. These issues are related to the Xen PV device frontend drivers. (bsc#1196488) - CVE-2022-26490: Fixed a buffer overflow in the st21nfca driver. An attacker with adjacent NFC access could crash the system or corrupt the system memory. (bsc#1196830) - CVE-2022-0001,CVE-2022-0002,CVE-2022-23960: Fixed a new kind of speculation issues, exploitable via JITed eBPF for instance. (bsc#1191580) - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197462)
The following non-security bugs were fixed:
- asix: Add rx->ax_skb = NULL after usbnet_skb_return() (git-fixes). - asix: Ensure asix_rx_fixup_info members are all reset (git-fixes). - asix: Fix small memory leak in ax88772_unbind() (git-fixes). - asix: fix uninit-value in asix_mdio_read() (git-fixes). - asix: fix wrong return value in asix_check_host_enable() (git-fixes). - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (bsc#1196018). - block: bfq: fix bfq_set_next_ioprio_data() (bsc#1191451). - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) (bsc#1194586). - can: dev: can_restart: fix use after free bug (git-fixes). - cgroup: Correct privileges check in release_agent writes (bsc#1196723). - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv (bsc#1196723). - cgroup: Use open-time cgroup namespace for process migration perm checks (bsc#1196723). - dax: update to new mmu_notifier semantic (bsc#1184207). - drm: add a locked version of drm_is_current_master (bsc#1197914). - drm: drm_file struct kABI compatibility workaround (bsc#1197914). - drm: protect drm_master pointers in drm_lease.c (bsc#1197914). - drm: serialize drm_file.master with a new spinlock (bsc#1197914). - drm: use the lookup lock in drm_is_current_master (bsc#1197914). - EDAC: Fix calculation of returned address and next offset in edac_align_ptr() (bsc#1114648). - ena_netdev: use generic power management (bsc#1197099 jsc#SLE-24125). - ena: Remove rcu_read_lock() around XDP program invocation (bsc#1197099 jsc#SLE-24125). - ethernet: amazon: ena: A typo fix in the file ena_com.h (bsc#1197099 jsc#SLE-24125). - ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1197754). - ext4: check for inconsistent extents between index and leaf block (bsc#1194163 bsc#1196339). - ext4: check for out-of-order index extents in ext4_valid_extent_entries() (bsc#1194163 bsc#1196339). - ext4: do not use the orphan list when migrating an inode (bsc#1197756). - ext4: fix an use-after-free issue about data=journal writeback mode (bsc#1195482). - ext4: Fix BUG_ON in ext4_bread when write quota data (bsc#1197755). - ext4: fix error handling in ext4_restore_inline_data() (bsc#1197757). - ext4: fix lazy initialization next schedule time computation in more granular unit (bsc#1194580). - ext4: make sure quota gets properly shutdown on error (bsc#1195480). - ext4: prevent partial update of the extent blocks (bsc#1194163 bsc#1196339). - ext4: update i_disksize if direct write past ondisk size (bsc#1197806). - genirq: Use rcu in kstat_irqs_usr() (bsc#1193738). - gtp: fix an use-before-init in gtp_newlink() (git-fixes). - IB/core: Fix ODP get user pages flow (git-fixes) - IB/hfi1: Acquire lock to release TID entries when user file is closed (git-fixes) - IB/hfi1: Adjust pkey entry in index 0 (git-fixes) - IB/hfi1: Correct guard on eager buffer deallocation (git-fixes) - IB/hfi1: Ensure pq is not left on waitlist (git-fixes) - IB/hfi1: Fix another case where pq is left on waitlist (git-fixes) - IB/hfi1: Fix error return code in parse_platform_config() (git-fixes) - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (git-fixes) - IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() (git-fixes) - IB/hfi1: Insure use of smp_processor_id() is preempt disabled (git-fixes) - IB/hfi1: Use kzalloc() for mmu_rb_handler allocation (git-fixes) - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields (git-fixes) - IB/qib: Use struct_size() helper (git-fixes) - IB/sa: Resolv use-after-free in ib_nl_make_request() (git-fixes) - IB/umad: Return EIO in case of when device disassociated (git-fixes) - IB/umad: Return EPOLLERR in case of when device disassociated (git-fixes) - isofs: Fix out of bound access for corrupted isofs image (bsc#1194591). - llc: fix netdevice reference leaks in llc_ui_bind() (git-fixes). - macros.kernel-source: Fix conditional expansion. Fixes: bb95fef3cf19 ('rpm: Use bash for %() expansion (jsc#SLE-18234).') - mdio: fix mdio-thunder.c dependency build error (git-fixes). - mm: bdi: initialize bdi_min_ratio when bdi is unregistered (bsc#1197763). - mm: drop NULL return check of pte_offset_map_lock() (bsc#1184207). - mm/rmap: always do TTU_IGNORE_ACCESS (bsc#1184207). - mm/rmap: update to new mmu_notifier semantic v2 (bsc#1184207). - net: arc_emac: Fix memleak in arc_mdio_probe (git-fixes). - net: asix: add proper error handling of usb read errors (git-fixes). - net: asix: fix uninit value bugs (git-fixes). - net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (git-fixes). - net: dp83867: Fix OF_MDIO config check (git-fixes). - net: dsa: bcm_sf2: put device node before return (git-fixes). - net: ena: Add capabilities field with support for ENI stats capability (bsc#1197099 jsc#SLE-24125). - net: ena: Add debug prints for invalid req_id resets (bsc#1197099 jsc#SLE-24125). - net: ena: add device distinct log prefix to files (bsc#1197099 jsc#SLE-24125). - net: ena: add jiffies of last napi call to stats (bsc#1197099 jsc#SLE-24125). - net: ena: aggregate doorbell common operations into a function (bsc#1197099 jsc#SLE-24125). - net: ena: aggregate stats increase into a function (bsc#1197099 jsc#SLE-24125). - net: ena: Change ENI stats support check to use capabilities field (bsc#1197099 jsc#SLE-24125). - net: ena: Change return value of ena_calc_io_queue_size() to void (bsc#1197099 jsc#SLE-24125). - net: ena: Change the name of bad_csum variable (bsc#1197099 jsc#SLE-24125). - net: ena: Extract recurring driver reset code into a function (bsc#1197099 jsc#SLE-24125). - net: ena: fix coding style nits (bsc#1197099 jsc#SLE-24125). - net: ena: fix DMA mapping function issues in XDP (bsc#1197099 jsc#SLE-24125). - net: ena: fix inaccurate print type (bsc#1197099 jsc#SLE-24125). - net: ena: Fix wrong rx request id by resetting device (bsc#1197099 jsc#SLE-24125). - net: ena: Improve error logging in driver (bsc#1197099 jsc#SLE-24125). - net: ena: introduce ndo_xdp_xmit() function for XDP_REDIRECT (bsc#1197099 jsc#SLE-24125). - net: ena: introduce XDP redirect implementation (bsc#1197099 jsc#SLE-24125). - net: ena: make symbol 'ena_alloc_map_page' static (bsc#1197099 jsc#SLE-24125). - net: ena: Move reset completion print to the reset function (bsc#1197099 jsc#SLE-24125). - net: ena: optimize data access in fast-path code (bsc#1197099 jsc#SLE-24125). - net: ena: re-organize code to improve readability (bsc#1197099 jsc#SLE-24125). - net: ena: Remove ena_calc_queue_size_ctx struct (bsc#1197099 jsc#SLE-24125). - net: ena: remove extra words from comments (bsc#1197099 jsc#SLE-24125). - net: ena: Remove module param and change message severity (bsc#1197099 jsc#SLE-24125). - net: ena: Remove redundant return code check (bsc#1197099 jsc#SLE-24125). - net: ena: Remove unused code (bsc#1197099 jsc#SLE-24125). - net: ena: store values in their appropriate variables types (bsc#1197099 jsc#SLE-24125). - net: ena: Update XDP verdict upon failure (bsc#1197099 jsc#SLE-24125). - net: ena: use build_skb() in RX path (bsc#1197099 jsc#SLE-24125). - net: ena: use constant value for net_device allocation (bsc#1197099 jsc#SLE-24125). - net: ena: Use dev_alloc() in RX buffer allocation (bsc#1197099 jsc#SLE-24125). - net: ena: Use pci_sriov_configure_simple() to enable VFs (bsc#1197099 jsc#SLE-24125). - net: ena: use xdp_frame in XDP TX flow (bsc#1197099 jsc#SLE-24125). - net: ena: use xdp_return_frame() to free xdp frames (bsc#1197099 jsc#SLE-24125). - net: ethernet: Fix memleak in ethoc_probe (git-fixes). - net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (git-fixes). - net: fec: only check queue 0 if RXF_0/TXF_0 interrupt is set (git-fixes). - net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (git-fixes). - net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup (git-fixes). - net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device (git-fixes). - net: hns: fix return value check in __lb_other_process() (git-fixes). - net: marvell: Fix OF_MDIO config check (git-fixes). - net: mcs7830: handle usb read errors properly (git-fixes). - net: usb: asix: add error handling for asix_mdio_* functions (git-fixes). - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (bsc#1196018). - net: usb: ax88179_178a: fix packet alignment padding (bsc#1196018). - net/mlx5e: Fix page DMA map/unmap attributes (bsc#1196468). - netxen_nic: fix MSI/MSI-x interrupts (git-fixes). - NFS: Avoid duplicate uncached readdir calls on eof (git-fixes). - NFS: Do not report writeback errors in nfs_getattr() (git-fixes). - NFS: Do not skip directory entries when doing uncached readdir (git-fixes). - NFS: Fix initialisation of nfs_client cl_flags field (git-fixes). - NFS: Return valid errors from nfs2/3_decode_dirent() (git-fixes). - NFS: Clamp WRITE offsets (git-fixes). - NFS: nfsd4_setclientid_confirm mistakenly expires confirmed client (git-fixes). - NFS: do not retry BIND_CONN_TO_SESSION on session error (git-fixes). - NFS: Fix another issue with a list iterator pointing to the head (git-fixes). - ocfs2: mount fails with buffer overflow in strlen (bsc#1197760). - ocfs2: remove ocfs2_is_o2cb_active() (bsc#1197758). - powercap: intel_rapl: add support for Sapphire Rapids (jsc#SLE-15288, jsc#ECO-2990). - powerpc/64: Fix kernel stack 16-byte alignment (bsc#1196999 ltc#196609S git-fixes). - powerpc/64: Interrupts save PPR on stack rather than thread_struct (bsc#1196999 ltc#196609). - powerpc/perf: consolidate GPCI hcall structs into asm/hvcall.h (jec#SLE-23780). - powerpc/pseries: Fix use after free in remove_phb_dynamic() (bsc#1065729). - powerpc/pseries: Fix use after free in remove_phb_dynamic() (bsc#1065729). - powerpc/pseries: new lparcfg key/value pair: partition_affinity_score (jec#SLE-23780). - powerpc/sysdev: fix incorrect use to determine if list is empty (bsc#1065729). - powerpc/tm: Fix more userspace r13 corruption (bsc#1065729). - powerpc/tm: Fix more userspace r13 corruption (bsc#1065729). - powerpc/xive: fix return value of __setup handler (bsc#1065729). - printk: Add panic_in_progress helper (bsc#1197894). - printk: disable optimistic spin during panic (bsc#1197894). - qed: select CONFIG_CRC32 (git-fixes). - quota: correct error number in free_dqentry() (bsc#1194590). - RDMA/addr: Be strict with gid size (git-fixes) - RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res (git-fixes) - RDMA/bnxt_re: Fix error return code in bnxt_qplib_cq_process_terminal() (git-fixes) - RDMA/bnxt_re: Scan the whole bitmap when checking if 'disabling RCFW with pending cmd-bit' (git-fixes) - RDMA/bnxt_re: Set queue pair state when being queried (git-fixes) - RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (git-fixes) - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests (git-fixes) - RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry (git-fixes) - RDMA/core: Do not infoleak GRH fields (git-fixes) - RDMA/core: Let ib_find_gid() continue search even after empty entry (git-fixes) - RDMA/cxgb4: add missing qpid increment (git-fixes) - RDMA/cxgb4: check for ipv6 address properly while destroying listener (git-fixes) - RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server (git-fixes) - RDMA/cxgb4: Fix the reported max_recv_sge value (git-fixes) - RDMA/cxgb4: Set queue pair state when being queried (git-fixes) - RDMA/cxgb4: Validate the number of CQEs (git-fixes) - RDMA/hns: Add a check for current state before modifying QP (git-fixes) - RDMA/hns: Encapsulate some lines for setting sq size in user mode (git-fixes) - RDMA/hns: Optimize hns_roce_modify_qp function (git-fixes) - RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size() (git-fixes) - RDMA/hns: Validate the pkey index (git-fixes) - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails (git-fixes) - RDMA/ib_srp: Fix a deadlock (git-fixes) - RDMA/iwcm: Release resources if iw_cm module initialization fails (git-fixes) - RDMA/mlx4: Do not continue event handler after memory allocation failure (git-fixes) - RDMA/mlx4: Return missed an error if device does not support steering (git-fixes) - RDMA/mlx5: Do not allow rereg of a ODP MR (git-fixes) - RDMA/mlx5: Fix corruption of reg_pages in mlx5_ib_rereg_user_mr() (git-fixes) - RDMA/mlx5: Fix potential race between destroy and CQE poll (git-fixes) - RDMA/mlx5: Fix udata response upon SRQ creation (git-fixes) - RDMA/mlx5: Put live in the correct place for ODP MRs (git-fixes) - RDMA/odp: Lift umem_mutex out of ib_umem_odp_unmap_dma_pages() (git-fixes) - RDMA/qedr: Fix NULL deref for query_qp on the GSI QP (git-fixes) - RDMA/qib: Remove superfluous fallthrough statements (git-fixes) - RDMA/rxe: Clear all QP fields if creation failed (git-fixes) - RDMA/rxe: Compute PSN windows correctly (git-fixes) - RDMA/rxe: Correct skb on loopback path (git-fixes) - RDMA/rxe: Do not overwrite errno from ib_umem_get() (git-fixes) - RDMA/rxe: Fix coding error in rxe_rcv_mcast_pkt (git-fixes) - RDMA/rxe: Fix coding error in rxe_recv.c (git-fixes) - RDMA/rxe: Fix extra copy in prepare_ack_packet (git-fixes) - RDMA/rxe: Fix failure during driver load (git-fixes) - RDMA/rxe: Fix missing kconfig dependency on CRYPTO (git-fixes) - RDMA/rxe: Fix over copying in get_srq_wqe (git-fixes) - RDMA/rxe: Fix panic when calling kmem_cache_create() (git-fixes) - RDMA/rxe: Fix redundant call to ip_send_check (git-fixes) - RDMA/rxe: Fix skb lifetime in rxe_rcv_mcast_pkt() (git-fixes) - RDMA/rxe: Fix wrong port_cap_flags (git-fixes) - RDMA/rxe: Handle skb_clone() failure in rxe_recv.c (git-fixes) - RDMA/rxe: Remove rxe_link_layer() (git-fixes) - RDMA/rxe: Return CQE error if invalid lkey was supplied (git-fixes) - RDMA/ucma: Fix locking for ctx->events_reported (git-fixes) - RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (git-fixes) - RDMA/uverbs: Fix create WQ to use the given user handle (git-fixes) - RDMA/uverbs: Tidy input validation of ib_uverbs_rereg_mr() (git-fixes) - s390/bpf: Perform r1 range checking before accessing jit->seen_reg (git-fixes). - s390/disassembler: increase ebpf disasm buffer size (git-fixes). - scsi: lpfc: Copyright updates for 14.2.0.0 patches (bsc#1197675). - scsi: lpfc: Drop lpfc_no_handler() (bsc#1197675). - scsi: lpfc: Fix broken SLI4 abort path (bsc#1197675). - scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup() (bsc#1197675). - scsi: lpfc: Fix queue failures when recovering from PCI parity error (bsc#1197675 bsc#1196478). - scsi: lpfc: Fix typos in comments (bsc#1197675). - scsi: lpfc: Fix unload hang after back to back PCI EEH faults (bsc#1197675 bsc#1196478). - scsi: lpfc: Improve PCI EEH Error and Recovery Handling (bsc#1197675 bsc#1196478). - scsi: lpfc: Kill lpfc_bus_reset_handler() (bsc#1197675). - scsi: lpfc: Reduce log messages seen after firmware download (bsc#1197675). - scsi: lpfc: Remove failing soft_wwn support (bsc#1197675). - scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled (bsc#1197675). - scsi: lpfc: Remove redundant flush_workqueue() call (bsc#1197675). - scsi: lpfc: SLI path split: Introduce lpfc_prep_wqe (bsc#1197675). - scsi: lpfc: SLI path split: Refactor Abort paths (bsc#1197675). - scsi: lpfc: SLI path split: Refactor base ELS paths and the FLOGI path (bsc#1197675). - scsi: lpfc: SLI path split: Refactor BSG paths (bsc#1197675). - scsi: lpfc: SLI path split: Refactor CT paths (bsc#1197675). - scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4 (bsc#1197675). - scsi: lpfc: SLI path split: Refactor FDISC paths (bsc#1197675). - scsi: lpfc: SLI path split: Refactor lpfc_iocbq (bsc#1197675). - scsi: lpfc: SLI path split: Refactor LS_ACC paths (bsc#1197675). - scsi: lpfc: SLI path split: Refactor LS_RJT paths (bsc#1197675). - scsi: lpfc: SLI path split: Refactor misc ELS paths (bsc#1197675). - scsi: lpfc: SLI path split: Refactor PLOGI/PRLI/ADISC/LOGO paths (bsc#1197675). - scsi: lpfc: SLI path split: Refactor SCSI paths (bsc#1197675). - scsi: lpfc: SLI path split: Refactor the RSCN/SCR/RDF/EDC/FARPR paths (bsc#1197675). - scsi: lpfc: Update lpfc version to 14.2.0.0 (bsc#1197675). - scsi: lpfc: Update lpfc version to 14.2.0.1 (bsc#1197675). - scsi: lpfc: Use fc_block_rport() (bsc#1197675). - scsi: lpfc: Use kcalloc() (bsc#1197675). - scsi: lpfc: Use rport as argument for lpfc_chk_tgt_mapped() (bsc#1197675). - scsi: lpfc: Use rport as argument for lpfc_send_taskmgmt() (bsc#1197675). - scsi: qla2xxx: Fix crash during module load unload test (bsc#1197661). - scsi: qla2xxx: Fix disk failure to rediscover (bsc#1197661). - scsi: qla2xxx: Fix hang due to session stuck (bsc#1197661). - scsi: qla2xxx: Fix incorrect reporting of task management failure (bsc#1197661). - scsi: qla2xxx: Fix laggy FC remote port session recovery (bsc#1197661). - scsi: qla2xxx: Fix loss of NVMe namespaces after driver reload test (bsc#1197661). - scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests (bsc#1197661). - scsi: qla2xxx: Fix N2N inconsistent PLOGI (bsc#1197661). - scsi: qla2xxx: Fix stuck session of PRLI reject (bsc#1197661). - scsi: qla2xxx: Fix typos in comments (bsc#1197661). - scsi: qla2xxx: Increase max limit of ql2xnvme_queues (bsc#1197661). - scsi: qla2xxx: Reduce false trigger to login (bsc#1197661). - scsi: qla2xxx: Stop using the SCSI pointer (bsc#1197661). - scsi: qla2xxx: Update version to 10.02.07.400-k (bsc#1197661). - scsi: qla2xxx: Use correct feature type field during RFF_ID processing (bsc#1197661). - scsi: qla2xxx: Use named initializers for port_state_str (bsc#1197661). - scsi: qla2xxx: Use named initializers for q_dev_state (bsc#1197661). - sr9700: sanity check for packet length (bsc#1196836). - SUNRPC: avoid race between mod_timer() and del_timer_sync() (bnc#1195403). - SUNRPC: change locking for xs_swap_enable/disable (bsc#1196367). - SUNRPC: Fix transport accounting when caller specifies an rpc_xprt (bsc#1197531). - tcp: add some entropy in __inet_hash_connect() (bsc#1180153). - tcp: change source port randomizarion at connect() time (bsc#1180153). - tcp: Export tcp_{sendpage,sendmsg}_locked() for ipv6 (bsc#1194541). - tracing: Fix return value of __setup handlers (git-fixes). - USB: Add unusual-devs entry for VL817 USB-SATA bridge (git-fixes). - USB: chipidea: fix interrupt deadlock (git-fixes). - USB: core: Fix hang in usb_kill_urb by adding memory barriers (git-fixes). - USB: ftdi-elan: fix memory leak on device disconnect (git-fixes). - USB: host: xen-hcd: add missing unlock in error path (git-fixes). - USB: host: xhci-rcar: Do not reload firmware after the completion (git-fixes). - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices (git-fixes). - USB: serial: cp210x: add CPI Bulk Coin Recycler id (git-fixes). - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 (git-fixes). - USB: serial: option: add support for DW5829e (git-fixes). - USB: serial: option: add Telit LE910R1 compositions (git-fixes). - USB: serial: option: add ZTE MF286D modem (git-fixes). - USB: storage: ums-realtek: fix error code in rts51x_read_mem() (git-fixes). - USB: zaurus: support another broken Zaurus (git-fixes). - virtio_net: Fix recursive call to cpus_read_lock() (git-fixes). - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (bsc#1114648). - x86/speculation: Warn about Spectre v2 LFENCE mitigation (bsc#1114648). - xen/gntdev: update to new mmu_notifier semantic (bsc#1184207). - xen/usb: do not use gnttab_end_foreign_access() in xenhcd_gnttab_done() (bsc#1196488, XSA-396). - xhci: Enable trust tx length quirk for Fresco FL11 USB controller (git-fixes). - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set (git-fixes). - xhci: Prevent futile URB re-submissions due to incorrect return value (git-fixes). - xhci: re-initialize the HC during resume if HCE was set (git-fixes).
|
Family: | unix | Class: | patch |
Status: | | Reference(s): | 1065729 1114648 1180153 1184207 1189562 1191428 1191451 1191580 1192273 1193738 1194163 1194541 1194580 1194586 1194590 1194591 1194943 1195051 1195353 1195403 1195480 1195482 1196018 1196114 1196339 1196367 1196468 1196478 1196488 1196514 1196639 1196657 1196723 1196761 1196830 1196836 1196901 1196942 1196973 1196999 1197099 1197227 1197331 1197366 1197462 1197531 1197661 1197675 1197754 1197755 1197756 1197757 1197758 1197760 1197763 1197806 1197894 1197914 1198031 1198032 1198033 CVE-2010-0295 CVE-2010-3430 CVE-2010-3431 CVE-2010-3853 CVE-2010-4341 CVE-2011-0421 CVE-2011-0461 CVE-2011-1145 CVE-2011-1758 CVE-2011-3148 CVE-2011-3149 CVE-2011-4362 CVE-2012-1162 CVE-2012-1163 CVE-2012-2369 CVE-2012-5533 CVE-2013-0219 CVE-2013-0220 CVE-2013-0287 CVE-2013-1983 CVE-2013-1984 CVE-2013-1990 CVE-2013-1995 CVE-2013-1998 CVE-2013-1999 CVE-2013-4508 CVE-2013-4559 CVE-2013-4560 CVE-2014-1829 CVE-2014-1830 CVE-2014-2323 CVE-2014-2324 CVE-2014-2583 CVE-2014-9654 CVE-2015-2296 CVE-2015-2331 CVE-2015-3200 CVE-2015-3238 CVE-2015-8833 CVE-2016-1000212 CVE-2016-3698 CVE-2016-7945 CVE-2016-7946 CVE-2016-7953 CVE-2017-12173 CVE-2017-13080 CVE-2017-13081 CVE-2017-14107 CVE-2017-5715 CVE-2018-1000223 CVE-2018-7409 CVE-2018-7485 CVE-2021-39713 CVE-2021-45868 CVE-2022-0001 CVE-2022-0002 CVE-2022-0812 CVE-2022-0850 CVE-2022-1016 CVE-2022-1048 CVE-2022-23036 CVE-2022-23037 CVE-2022-23038 CVE-2022-23039 CVE-2022-23040 CVE-2022-23041 CVE-2022-23042 CVE-2022-23960 CVE-2022-26490 CVE-2022-26966 CVE-2022-27666 CVE-2022-28388 CVE-2022-28389 CVE-2022-28390 SUSE-SU-2022:1196-1
|
Platform(s): | openSUSE 13.1 openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Desktop 12 SP5 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise for SAP 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Point of Sale 12 SP2 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP5
| Product(s): | |
Definition Synopsis |
SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.162-94.69 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Build System Kit 12 SP4 is installed
AND Package Information
libudev-mini-devel-228-150.53 is installed
OR libudev-mini1-228-150.53 is installed
OR systemd-mini-228-150.53 is installed
OR systemd-mini-devel-228-150.53 is installed
OR udev-mini-228-150.53 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 11 SP2 is installed
AND Package Information
openssh-5.1p1-41.57.1 is installed
OR openssh-askpass-5.1p1-41.57.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 11 SP3 is installed
AND Package Information
MozillaFirefox-31.8.0esr-0.13.2 is installed
OR MozillaFirefox-translations-31.8.0esr-0.13.2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
cpio-2.11-29 is installed
OR cpio-lang-2.11-29 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
grub2-2.02~beta2-73 is installed
OR grub2-i386-pc-2.02~beta2-73 is installed
OR grub2-snapper-plugin-2.02~beta2-73 is installed
OR grub2-x86_64-efi-2.02~beta2-73 is installed
OR grub2-x86_64-xen-2.02~beta2-73 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
icu-52.1-7 is installed
OR libicu52_1-52.1-7 is installed
OR libicu52_1-32bit-52.1-7 is installed
OR libicu52_1-data-52.1-7 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
kernel-firmware-20180525-3 is installed
OR ucode-amd-20180525-3 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Desktop 12 SP5 is installed
OR SUSE Linux Enterprise Server 12 SP5 is installed
OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
OR SUSE Linux Enterprise Workstation Extension 12 SP5 is installed
AND kernel-default-extra-4.12.14-122.116.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise for SAP 12 SP1 is installed
AND Package Information
kgraft-patch-3_12_69-60_64_32-default-7-4 is installed
OR kgraft-patch-3_12_69-60_64_32-xen-7-4 is installed
OR kgraft-patch-SLE12-SP1_Update_13-7-4 is installed
|
Definition Synopsis |
SUSE Linux Enterprise for SAP 12 SP2 is installed
AND cryptctl-1.2.6-5.3.11 is installed
|
Definition Synopsis |
SUSE Linux Enterprise High Availability 12 SP3 is installed
AND python-requests-2.8.1-6.16 is installed
|
Definition Synopsis |
SUSE Linux Enterprise High Availability 12 SP5 is installed
AND lighttpd-1.4.35-3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
AND Package Information
aaa_base-13.2+git20140911.61c1681-38.13 is installed
OR aaa_base-extras-13.2+git20140911.61c1681-38.13 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Live Patching 12 is installed
AND Package Information
kgraft-patch-3_12_57-60_35-default-8-2 is installed
OR kgraft-patch-3_12_57-60_35-xen-8-2 is installed
OR kgraft-patch-SLE12-SP1_Update_4-8-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Live Patching 12 SP3 is installed
AND Package Information
kgraft-patch-4_4_82-6_3-default-2-2 is installed
OR kgraft-patch-SLE12-SP3_Update_1-2-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed
AND Package Information
puppet-3.8.5-15.3 is installed
OR puppet-server-3.8.5-15.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Containers 12 is installed
AND docker-1.8.3-49 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Legacy Software 12 is installed
AND Package Information
cups154-1.5.4-9 is installed
OR cups154-client-1.5.4-9 is installed
OR cups154-filters-1.5.4-9 is installed
OR cups154-libs-1.5.4-9 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Public Cloud 12 is installed
AND Package Information
kernel-ec2-3.12.74-60.64.66 is installed
OR kernel-ec2-devel-3.12.74-60.64.66 is installed
OR kernel-ec2-extra-3.12.74-60.64.66 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Web Scripting 12 is installed
AND apache2-mod_wsgi-4.4.13-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Point of Sale 12 SP2 is installed
AND Package Information
python2-salt-2018.3.0-46.28 is installed
OR salt-2018.3.0-46.28 is installed
OR salt-minion-2018.3.0-46.28 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed
AND Package Information
java-1_7_0-openjdk-1.7.0.181-43.15 is installed
OR java-1_7_0-openjdk-demo-1.7.0.181-43.15 is installed
OR java-1_7_0-openjdk-devel-1.7.0.181-43.15 is installed
OR java-1_7_0-openjdk-headless-1.7.0.181-43.15 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 11 SP2 is installed
AND Package Information
ecryptfs-utils-61-1.29.1 is installed
OR ecryptfs-utils-32bit-61-1.29.1 is installed
OR ecryptfs-utils-x86-61-1.29.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 11 SP3 is installed
AND Package Information
apache2-2.2.12-1.38.2 is installed
OR apache2-doc-2.2.12-1.38.2 is installed
OR apache2-example-pages-2.2.12-1.38.2 is installed
OR apache2-prefork-2.2.12-1.38.2 is installed
OR apache2-utils-2.2.12-1.38.2 is installed
OR apache2-worker-2.2.12-1.38.2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 11 SP3-LTSS is installed
AND Package Information
libopenssl0_9_8-0.9.8j-0.89.1 is installed
OR libopenssl0_9_8-32bit-0.9.8j-0.89.1 is installed
OR libopenssl0_9_8-hmac-0.9.8j-0.89.1 is installed
OR libopenssl0_9_8-hmac-32bit-0.9.8j-0.89.1 is installed
OR openssl-0.9.8j-0.89.1 is installed
OR openssl-doc-0.9.8j-0.89.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 11 SP4 is installed
AND Package Information
ark-4.3.5-0.3.3 is installed
OR kcalc-4.3.5-0.3.3 is installed
OR kcharselect-4.3.5-0.3.3 is installed
OR kdessh-4.3.5-0.3.3 is installed
OR kdf-4.3.5-0.3.3 is installed
OR kfloppy-4.3.5-0.3.3 is installed
OR kgpg-4.3.5-0.3.3 is installed
OR ktimer-4.3.5-0.3.3 is installed
OR kwalletmanager-4.3.5-0.3.3 is installed
OR kwikdisk-4.3.5-0.3.3 is installed
OR okteta-4.3.5-0.3.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 is installed
AND Package Information
augeas-1.2.0-1 is installed
OR augeas-lenses-1.2.0-1 is installed
OR libaugeas0-1.2.0-1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
accountsservice-0.6.35-3 is installed
OR accountsservice-lang-0.6.35-3 is installed
OR libaccountsservice0-0.6.35-3 is installed
OR typelib-1_0-AccountsService-1_0-0.6.35-3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
DirectFB-1.7.1-6 is installed
OR lib++dfb-1_7-1-1.7.1-6 is installed
OR libdirectfb-1_7-1-1.7.1-6 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
aaa_base-13.2+git20140911.61c1681-36 is installed
OR aaa_base-extras-13.2+git20140911.61c1681-36 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP4 is installed
AND Package Information
alsa-1.0.27.2-15 is installed
OR alsa-docs-1.0.27.2-15 is installed
OR libasound2-1.0.27.2-15 is installed
OR libasound2-32bit-1.0.27.2-15 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12-LTSS is installed
AND Package Information
kgraft-patch-3_12_48-52_27-default-5-2.2 is installed
OR kgraft-patch-3_12_48-52_27-xen-5-2.2 is installed
OR kgraft-patch-SLE12_Update_8-5-2.2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
AND Package Information
libX11-1.6.2-8 is installed
OR libX11-6-1.6.2-8 is installed
OR libX11-data-1.6.2-8 is installed
OR libX11-xcb1-1.6.2-8 is installed
OR libXfixes-5.0.1-7 is installed
OR libXfixes3-5.0.1-7 is installed
OR libXi-1.7.4-14 is installed
OR libXi6-1.7.4-14 is installed
OR libXrender-0.9.8-7 is installed
OR libXrender1-0.9.8-7 is installed
OR libXtst-1.2.2-7 is installed
OR libXtst6-1.2.2-7 is installed
OR libXv-1.0.10-7 is installed
OR libXv1-1.0.10-7 is installed
OR libXvMC-1.0.8-7 is installed
OR libXvMC1-1.0.8-7 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed
AND Package Information
libsqlite3-0-3.8.10.2-9.3 is installed
OR libsqlite3-0-32bit-3.8.10.2-9.3 is installed
OR sqlite3-3.8.10.2-9.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
AND Package Information
MozillaFirefox-60.8.0-109.83 is installed
OR MozillaFirefox-translations-common-60.8.0-109.83 is installed
OR libfreebl3-3.44.1-58.28 is installed
OR libfreebl3-32bit-3.44.1-58.28 is installed
OR libfreebl3-hmac-3.44.1-58.28 is installed
OR libfreebl3-hmac-32bit-3.44.1-58.28 is installed
OR libsoftokn3-3.44.1-58.28 is installed
OR libsoftokn3-32bit-3.44.1-58.28 is installed
OR libsoftokn3-hmac-3.44.1-58.28 is installed
OR libsoftokn3-hmac-32bit-3.44.1-58.28 is installed
OR mozilla-nss-3.44.1-58.28 is installed
OR mozilla-nss-32bit-3.44.1-58.28 is installed
OR mozilla-nss-certs-3.44.1-58.28 is installed
OR mozilla-nss-certs-32bit-3.44.1-58.28 is installed
OR mozilla-nss-sysinit-3.44.1-58.28 is installed
OR mozilla-nss-sysinit-32bit-3.44.1-58.28 is installed
OR mozilla-nss-tools-3.44.1-58.28 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
AND Package Information
GraphicsMagick-1.2.5-4.33.1 is installed
OR libGraphicsMagick2-1.2.5-4.33.1 is installed
OR perl-GraphicsMagick-1.2.5-4.33.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 11 SP3 is installed
AND MozillaFirefox-devel-17.0.9esr-0.7.1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
AND NetworkManager-devel-0.7.1_git20090811-3.28.2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 12 is installed
AND Package Information
file-5.19-5 is installed
OR file-devel-5.19-5 is installed
OR python-magic-5.19-5 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
AND Package Information
FastCGI-2.4.0-167 is installed
OR perl-FastCGI-2.4.0-167 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
AND MozillaFirefox-devel-45.4.0esr-81 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
AND gnome-shell-devel-3.20.4-76 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
AND apache-pdfbox-1.8.12-3.5 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Workstation Extension 12 is installed
AND Package Information
libreoffice-4.3.5.2-10.1 is installed
OR libreoffice-base-4.3.5.2-10.1 is installed
OR libreoffice-base-drivers-mysql-4.3.5.2-10.1 is installed
OR libreoffice-base-drivers-postgresql-4.3.5.2-10.1 is installed
OR libreoffice-calc-4.3.5.2-10.1 is installed
OR libreoffice-calc-extensions-4.3.5.2-10.1 is installed
OR libreoffice-draw-4.3.5.2-10.1 is installed
OR libreoffice-filters-optional-4.3.5.2-10.1 is installed
OR libreoffice-gnome-4.3.5.2-10.1 is installed
OR libreoffice-icon-theme-tango-4.3.5.2-10.1 is installed
OR libreoffice-impress-4.3.5.2-10.1 is installed
OR libreoffice-l10n-af-4.3.5.2-10.1 is installed
OR libreoffice-l10n-ar-4.3.5.2-10.1 is installed
OR libreoffice-l10n-ca-4.3.5.2-10.1 is installed
OR libreoffice-l10n-cs-4.3.5.2-10.1 is installed
OR libreoffice-l10n-da-4.3.5.2-10.1 is installed
OR libreoffice-l10n-de-4.3.5.2-10.1 is installed
OR libreoffice-l10n-en-4.3.5.2-10.1 is installed
OR libreoffice-l10n-es-4.3.5.2-10.1 is installed
OR libreoffice-l10n-fi-4.3.5.2-10.1 is installed
OR libreoffice-l10n-fr-4.3.5.2-10.1 is installed
OR libreoffice-l10n-gu-4.3.5.2-10.1 is installed
OR libreoffice-l10n-hi-4.3.5.2-10.1 is installed
OR libreoffice-l10n-hu-4.3.5.2-10.1 is installed
OR libreoffice-l10n-it-4.3.5.2-10.1 is installed
OR libreoffice-l10n-ja-4.3.5.2-10.1 is installed
OR libreoffice-l10n-ko-4.3.5.2-10.1 is installed
OR libreoffice-l10n-nb-4.3.5.2-10.1 is installed
OR libreoffice-l10n-nl-4.3.5.2-10.1 is installed
OR libreoffice-l10n-nn-4.3.5.2-10.1 is installed
OR libreoffice-l10n-pl-4.3.5.2-10.1 is installed
OR libreoffice-l10n-pt-BR-4.3.5.2-10.1 is installed
OR libreoffice-l10n-pt-PT-4.3.5.2-10.1 is installed
OR libreoffice-l10n-ru-4.3.5.2-10.1 is installed
OR libreoffice-l10n-sk-4.3.5.2-10.1 is installed
OR libreoffice-l10n-sv-4.3.5.2-10.1 is installed
OR libreoffice-l10n-xh-4.3.5.2-10.1 is installed
OR libreoffice-l10n-zh-Hans-4.3.5.2-10.1 is installed
OR libreoffice-l10n-zh-Hant-4.3.5.2-10.1 is installed
OR libreoffice-l10n-zu-4.3.5.2-10.1 is installed
OR libreoffice-mailmerge-4.3.5.2-10.1 is installed
OR libreoffice-math-4.3.5.2-10.1 is installed
OR libreoffice-officebean-4.3.5.2-10.1 is installed
OR libreoffice-pyuno-4.3.5.2-10.1 is installed
OR libreoffice-writer-4.3.5.2-10.1 is installed
OR libreoffice-writer-extensions-4.3.5.2-10.1 is installed
|