[LU-14077] kernel update [SLES15 SP1 4.12.14-197.64.1]

• Type: Improvement
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.14.0
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various
security and bugfixes.

The following security bugs were fixed:

• CVE-2020-12351: Fixed a type confusion while processing AMP packets aka
  "BleedingTooth" aka "BadKarma" (bsc#1177724).
• CVE-2020-12352: Fixed an information leak when processing certain AMP
  packets aka "BleedingTooth" aka "BadChoice" (bsc#1177725).
• CVE-2020-25645: Fixed an issue which traffic between two Geneve
  endpoints may be unencrypted when IPsec is configured to encrypt traffic
  for the specific UDP port used by the GENEVE tunnel allowing anyone
  between the two endpoints to read the traffic unencrypted (bsc#1177511).

The following non-security bugs were fixed:
https://lists.suse.com/pipermail/sle-security-updates/2020-October/007595.html

Issue Links

• is related to: LU-14218 kernel update [SLES15 SP1 4.12.14-197.75.1]
• is related to: LU-14028 kernel update [SLES15 SP1 4.12.14-197.61.1]

Comments

[Peter Jones]

Landed for 2.14

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch https://review.whamcloud.com/40477/
Subject: LU-14077 kernel: kernel update SLES15 SP1 [4.12.14-197.64.1]
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 12531667529f5a327f8050f0a9f1495cf9e8b002

[Gerrit Updater]

Jian Yu ([e-mail]) uploaded a new patch: https://review.whamcloud.com/40479
Subject: LU-14077 kernel: new kernel [SLES15 SP1 4.12.14-197.64]
Project: fs/lustre-release
Branch: b2_12
Current Patch Set: 1
Commit: 55f0512becd8990bc35ffeccda28b24874079b4a

[Gerrit Updater]

Jian Yu ([e-mail]) uploaded a new patch: https://review.whamcloud.com/40477
Subject: LU-14077 kernel: kernel update SLES15 SP1 [4.12.14-197.64.1]
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 8b613db39c38bd0f07af175e21b69ec8efdcfab0