Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

openSUSE Leap 15.2: 2020:2112-1 Important Kernel Security Update

opensuse
Calendar Grey November 29, 2020
Dist Opensuse Esm H88
This important patch for Fedora enhances system security by fixing critical core faults, mitigating risks and improving overall performance.
An update that solves 15 vulnerabilities and has 102 fixes is now available

Description

The openSUSE Leap 15.2 kernel was updated to receive various security and

bugfixes.

The following security bugs were fixed:

- CVE-2020-12351: Fixed a type confusion while processing AMP packets aka

"BleedingTooth" aka "BadKarma" (bsc#1177724).

- CVE-2020-24490: Fixed a heap buffer overflow when processing extended

advertising report events aka "BleedingTooth" aka "BadVibes"

(bsc#1177726).

- CVE-2020-12352: Fixed an information leak when processing certain AMP

packets aka "BleedingTooth" aka "BadChoice" (bsc#1177725).

- CVE-2020-25212: A TOCTOU mismatch in the NFS client code in the Linux

kernel could be used by local attackers to corrupt memory or possibly

have unspecified other impact because a size check is in

fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452

(bnc#1176381).

- CVE-2020-25645: Traffic between two Geneve endpoints may be unencrypted

when IPsec is...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory kernel update important security patch system stability security issues security fixes bugfix kernel issues openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.2:

zypper in -t patch openSUSE-2020-2112=1

Package List

- openSUSE Leap 15.2 (x86_64):

kernel-default-base-5.3.18-lp152.50.1.lp152.8.10.1

kernel-default-base-rebuild-5.3.18-lp152.50.1.lp152.8.10.1

References

https://www.suse.com/security/cve/CVE-2020-12351.html

https://www.suse.com/security/cve/CVE-2020-12352.html

https://www.suse.com/security/cve/CVE-2020-14351.html

https://www.suse.com/security/cve/CVE-2020-16120.html

https://www.suse.com/security/cve/CVE-2020-24490.html

https://www.suse.com/security/cve/CVE-2020-25212.html

https://www.suse.com/security/cve/CVE-2020-25285.html

https://www.suse.com/security/cve/CVE-2020-25641.html

https://www.suse.com/security/cve/CVE-2020-25643.html

https://www.suse.com/security/cve/CVE-2020-25645.html

https://www.suse.com/security/cve/CVE-2020-25656.html

https://www.suse.com/security/cve/CVE-2020-25668.html

https://www.suse.com/security/cve/CVE-2020-25704.html

https://www.suse.com/security/cve/CVE-2020-25705.html

https://www.suse.com/security/cve/CVE-2020-8694.html

https://bugzilla.suse.com/1055014

https://bugzilla.suse.com/1055186

https://bugzilla.suse.com/1061843

https://bugzilla.suse.com/1065600

https://bugzilla.suse.com/1065729

https://bugzilla.suse.com/1066382

https://...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2020:2112-1
Rating: important
Affected Products: openSUSE Leap 15.2 able.

Topics%20covered

Topics Covered

security advisory kernel update important security patch system stability security issues security fixes bugfix kernel issues openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here