The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-12351: Fixed a type confusion while processing AMP packets aka "BleedingTooth" aka "BadKarma" (bsc#1177724). - CVE-2020-12352: Fixed an information leak when processing certain AMP packets aka "BleedingTooth" aka "BadChoice" (bsc#1177725). - CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted (bsc#1177511). The following non-security bugs were fixed: - drm/sun4i: mixer: Extend regmap max_register (git-fixes).
#1065729 #1140683 #1172538 #1174748 #1175520
#1176400 #1176946 #1177027 #1177340 #1177511
#1177685 #1177724 #1177725
Cross- CVE-2020-12351 CVE-2020-12352 CVE-2020-25645
Affected Products:
SUSE Linux Enterprise Module for Live Patching 15-SP1
https://www.suse.com/security/cve/CVE-2020-12351.html
https://www.suse.com/security/cve/CVE-2020-12352.html
https://www.suse.com/security/cve/CVE-2020-25645.html
https://bugzilla.suse.com/1065729
https://bugzilla.suse.com/1140683
https://bugzilla.suse.com/1172538
https://bugzilla.suse.com/1174748
https://bugzilla.suse.com/1175520
https://bugzilla.suse.com/1176400
https://bugzilla.suse.com/1176946
https://bugzilla.suse.com/1177027
https://bugzilla.suse.com/1177340
Get the latest Linux and open source security news straight to your inbox.