Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

openSUSE Leap 15.1: 2021:0075-1 Critical: Kernel Security Update

opensuse
Calendar Grey January 16, 2021
Dist Opensuse Esm H88
A security announcement for openSUSE has been issued, delivering crucial patches for the Linux kernel due to various security weaknesses.
An update that solves 17 vulnerabilities and has 62 fixes is now available

Description

The openSUSE Leap 15.1 kernel was updated to receive various security and

bugfixes.

The following security bugs were fixed:

- CVE-2020-29568: An issue was discovered in Xen through 4.14.x. Some OSes

(such as Linux, FreeBSD, and NetBSD) are processing watch events using a

single thread. If the events are received faster than the thread is able

to handle, they will get queued. As the queue is unbounded, a guest may

be able to trigger an OOM in the backend. All systems with a FreeBSD,

Linux, or NetBSD (any version) dom0 are vulnerable (bnc#1179508).

- CVE-2020-29569: The Linux kernel PV block backend expects the kernel

thread handler to reset ring->xenblkd to NULL when stopped. However, the

handler may not have time to run if the frontend quickly toggles between

the states connect and disconnect. As a consequence, the block backend

may re-use a pointer after it was freed. A misbehaving guest can trigger

a dom0 crash by...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory critical security fix vulnerability important kernel fix kernel system update Linux kernel openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.1:

zypper in -t patch openSUSE-2021-75=1

Package List

- openSUSE Leap 15.1 (noarch):

kernel-devel-4.12.14-lp151.28.91.1

kernel-docs-4.12.14-lp151.28.91.1

kernel-docs-html-4.12.14-lp151.28.91.1

kernel-macros-4.12.14-lp151.28.91.1

kernel-source-4.12.14-lp151.28.91.1

kernel-source-vanilla-4.12.14-lp151.28.91.1

- openSUSE Leap 15.1 (x86_64):

kernel-debug-4.12.14-lp151.28.91.1

kernel-debug-base-4.12.14-lp151.28.91.1

kernel-debug-base-debuginfo-4.12.14-lp151.28.91.1

kernel-debug-debuginfo-4.12.14-lp151.28.91.1

kernel-debug-debugsource-4.12.14-lp151.28.91.1

kernel-debug-devel-4.12.14-lp151.28.91.1

kernel-debug-devel-debuginfo-4.12.14-lp151.28.91.1

kernel-default-4.12.14-lp151.28.91.1

kernel-default-base-4.12.14-lp151.28.91.1

kernel-default-base-debuginfo-4.12.14-lp151.28.91.1

kernel-default-debuginfo-4.12.14-lp151.28.91.1

kernel-default-debugsource-4.12.14-lp151.28.91.1

kernel-default-devel-4.12.14-lp151.28.91.1

kernel-default-devel-debuginfo-4.12.14-lp151.28.91.1

kernel-kvmsmall-4.12.14-lp151.28.91.1

kernel-kvmsmall-base-4.12.14-lp151.28.91.1

kernel-kvmsmall-base-debu...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2019-20934.html

https://www.suse.com/security/cve/CVE-2020-0444.html

https://www.suse.com/security/cve/CVE-2020-0465.html

https://www.suse.com/security/cve/CVE-2020-0466.html

https://www.suse.com/security/cve/CVE-2020-11668.html

https://www.suse.com/security/cve/CVE-2020-25639.html

https://www.suse.com/security/cve/CVE-2020-27068.html

https://www.suse.com/security/cve/CVE-2020-27777.html

https://www.suse.com/security/cve/CVE-2020-27786.html

https://www.suse.com/security/cve/CVE-2020-27825.html

https://www.suse.com/security/cve/CVE-2020-28374.html

https://www.suse.com/security/cve/CVE-2020-29568.html

https://www.suse.com/security/cve/CVE-2020-29569.html

https://www.suse.com/security/cve/CVE-2020-29660.html

https://www.suse.com/security/cve/CVE-2020-29661.html

https://www.suse.com/security/cve/CVE-2020-36158.html

https://www.suse.com/security/cve/CVE-2020-4788.html

https://bugzilla.suse.com/1040855

https://bugzilla.suse.com/1044120

https://bugzilla.suse.com/1044767

http...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2021:0075-1
Rating: important
Affected Products: openSUSE Leap 15.1 ble.

Topics%20covered

Topics Covered

security advisory critical security fix vulnerability important kernel fix kernel system update Linux kernel openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.