[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2021:0736-1 -- SLES kernel

ID: oval:org.secpod.oval:def:89044055Date: (C)2021-03-25   (M)2024-04-17
Class: PATCHFamily: unix




The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-26930: Fixed an improper error handling in blkback"s grant mapping . - CVE-2021-26931: Fixed an issue where Linux kernel was treating grant mapping errors as bugs . - CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping . by remote attackers to read or write files via directory traversal in an XCOPY request . - CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check . The following non-security bugs were fixed: - cifs: check all path components in resolved dfs target . - cifs: fix check of tcon dfs in smb1 . - cifs: fix nodfs mount option . - cifs: introduce helper for finding referral server . - kernel-{binary,source}.spec.in: do not create loop symlinks - kernel-binary.spec: Add back initrd and image symlink ghosts to filelist . Fixes: 76a9256314c3 - kernel-source.spec: Fix build with rpm 4.16 . RPM_BUILD_ROOT is cleared before %%install. Do the unpack into RPM_BUILD_ROOT in %%install - rpm/kernel-binary.spec.in: avoid using barewords - rpm/kernel-binary.spec.in: avoid using more barewords %split_extra still contained two. - rpm/kernel-binary.spec.in: Fix compressed module handling for in-tree KMP - rpm/kernel-binary.spec.in: use grep -E instead of egrep egrep is only a deprecated bash wrapper for quot;grep -Equot;. So use the latter instead. - rpm/kernel-module-subpackage: make Group tag optional - rpm/kernel-obs-build.spec.in: Add -q option to modprobe calls - rpm/kernel-{source,binary}.spec: do not include ghost symlinks . - rpm/mkspec: do not build kernel-obs-build on x86_32 We want to use 64bit kernel due to various bugs . There is: ExportFilter: ^kernel-obs-build.*\.x86_64.rpm$ . i586 in Factory"s prjconf now. No other actively maintained distro builds a x86_32 kernel, hence pushing to packaging directly. - rpm/post.sh: Avoid purge-kernel for the first installed kernel - scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section - scsi: fc: add FPIN ELS definition . - scsi/fc: kABI fixes for new ELS_FPIN definition - scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs . - scsi: Fix trivial spelling . - scsi: qla2xxx: Add IOCB resource tracking . - scsi: qla2xxx: Add more BUILD_BUG_ON statements . - scsi: qla2xxx: Address a set of sparse warnings . - scsi: qla2xxx: Add rport fields in debugfs . - scsi: qla2xxx: Add SLER and PI control support . - scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices . - scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime . - scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t . - scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests . - scsi: qla2xxx: Change post del message from debug level to log level . - scsi: qla2xxx: Change {RD,WRT}_REG_* function names from upper case into lower case . - scsi: qla2xxx: Change two hardcoded constants into offsetof / sizeof expressions . - scsi: qla2xxx: Check if FW supports MQ before enabling . - scsi: qla2xxx: Check the size of struct fcp_hdr at compile time . - scsi: qla2xxx: Correct the check for sscanf return value . - scsi: qla2xxx: Do not check for fw_started while posting NVMe command . - scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG . - scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs . - scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump . - scsi: qla2xxx: Fix buffer-buffer credit extraction error . - scsi: qla2xxx: Fix compilation issue in PPC systems . - scsi: qla2xxx: Fix crash during driver load on big endian machines . - scsi: qla2xxx: Fix crash on session cleanup with unload . - scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit . - scsi: qla2xxx: Fix device loss on 4G and older HBAs . - scsi: qla2xxx: Fix endianness annotations in header files . - scsi: qla2xxx: Fix endianness annotations in source files . - scsi: qla2xxx: Fix failure message in qlt_disable_vha . - scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines . - scsi: qla2xxx: Fix FW initialization error on big endian machines . - scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c . - scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c . - scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c . - scsi: qla2xxx: Fix I/O errors during LIP reset tests . - scsi: qla2xxx: Fix I/O failures during remote port toggle testing . - scsi: qla2xxx: Fix issue with adapter"s stopping state . - scsi: qla2xxx: Fix login timeout . - scsi: qla2xxx: Fix memory size truncation . - scsi: qla2xxx: Fix MPI failure AEN handling . - scsi: qla2xxx: Fix MPI reset needed message . - scsi: qla2xxx: Fix N2N and NVMe connect retry failure . - scsi: qla2xxx: Fix null pointer access during disconnect from subsystem . - scsi: qla2xxx: Fix point-to-point device discovery issue . - scsi: qla2xxx: Fix regression on sparc64 . - scsi: qla2xxx: Fix reset of MPI firmware . - scsi: qla2xxx: Fix return of uninitialized value in rval . - scsi: qla2xxx: Fix spelling of a variable name . - scsi: qla2xxx: Fix the call trace for flush workqueue . - scsi: qla2xxx: Fix the code that reads from mailbox registers . - scsi: qla2xxx: Fix the return value . - scsi: qla2xxx: Fix the size used in a "dma_free_coherent" call . - scsi: qla2xxx: Fix warning after FC target reset . - scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba . - scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba . - scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg . - scsi: qla2xxx: Flush all sessions on zone disable . - scsi: qla2xxx: Flush I/O on zone disable . - scsi: qla2xxx: Handle aborts correctly for port undergoing deletion . - scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec . - scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry . - scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE . - scsi: qla2xxx: Indicate correct supported speeds for Mezz card . - scsi: qla2xxx: Initialize "n" before using it . - scsi: qla2xxx: Initialize variable in qla8044_poll_reg . - scsi: qla2xxx: Introduce a function for computing the debug message prefix . - scsi: qla2xxx: Keep initiator ports after RSCN . - scsi: qla2xxx: Limit interrupt vectors to number of CPUs . - scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle . - scsi: qla2xxx: make 1-bit bit-fields unsigned int . - scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit . - scsi: qla2xxx: Make __qla2x00_alloc_iocbs initialize 32 bits of request_t.handle . - scsi: qla2xxx: Make qla2x00_restart_isp easier to read . - scsi: qla2xxx: Make qla82xx_flash_wait_write_finish easier to read . - scsi: qla2xxx: Make qlafx00_process_aen return void . - scsi: qla2xxx: Make qla_set_ini_mode return void . - scsi: qla2xxx: Make tgt_port_database available in initiator mode . - scsi: qla2xxx: Move sess cmd list/lock to driver . - scsi: qla2xxx: Performance tweak . - scsi: qla2xxx: Reduce duplicate code in reporting speed . - scsi: qla2xxx: Reduce noisy debug message . - scsi: qla2xxx: Remove an unused function . - scsi: qla2xxx: Remove a superfluous cast . - scsi: qla2xxx: remove incorrect sparse #ifdef . - scsi: qla2xxx: Remove in_interrupt from qla82xx-specific code . - scsi: qla2xxx: Remove in_interrupt from qla83xx-specific code . - scsi: qla2xxx: Remove pci-dma-compat wrapper API . - scsi: qla2xxx: Remove redundant variable initialization . - scsi: qla2xxx: Remove return value from qla_nvme_ls . - scsi: qla2xxx: Remove superfluous memset . - scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le . - scsi: qla2xxx: Remove trailing semicolon in macro definition . - scsi: qla2xxx: Remove unneeded variable "rval" . - scsi: qla2xxx: Return EBUSY on fcport deletion . - scsi: qla2xxx: SAN congestion management implementation . - scsi: qla2xxx: Setup debugfs entries for remote ports . - scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle . - scsi: qla2xxx: Simplify the functions for dumping firmware . - scsi: qla2xxx: Sort BUILD_BUG_ON statements alphabetically . - scsi: qla2xxx: Split qla2x00_configure_local_loop . - scsi: qla2xxx: Tear down session if FW say it is down . - scsi: qla2xxx: Update version to 10.02.00.102-k . - scsi: qla2xxx: Update version to 10.02.00.103-k . - scsi: qla2xxx: Update version to 10.02.00.104-k . - scsi: qla2xxx: Use ARRAY_SIZE instead of open-coding it . - scsi: qla2xxx: Use constant when it is known . - scsi: qla2xxx: Use make_handle instead of open-coding it . - scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values . - scsi: qla2xxx: Use register names instead of register offsets . - scsi: qla2xxx: Use true, false for ha-gt;fw_dumped . - scsi: qla2xxx: Use true, false for need_mpi_reset . - scsi: qla2xxx: Warn if done or free are called on an already freed srb . - scsi: scsi_transport_fc: Add FPIN fc event codes . - scsi: scsi_transport_fc: refactor event posting routines . - scsi: target: tcm_qla2xxx: Remove BUG_ON . - x86/hyperv: Fix kexec panic/hang issues . - xen/netback: avoid race in xenvif_rx_ring_slots_available . - xen/netback: fix spurious event detection for common event case . Special Instructions and Notes: Please reboot the system after installing this update.

Platform:
SUSE Linux Enterprise Server 12 SP4
Product:
kernel
Reference:
SUSE-SU-2021:0736-1
CVE-2020-29368
CVE-2020-29374
CVE-2021-26930
CVE-2021-26931
CVE-2021-26932
CVE    5
CVE-2020-29368
CVE-2021-26931
CVE-2021-26932
CVE-2021-26930
...

© SecPod Technologies