[LU-14077] kernel update [SLES15 SP1 4.12.14-197.64.1]

• Type: Improvement
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.14.0
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various
security and bugfixes.

The following security bugs were fixed:

• CVE-2020-12351: Fixed a type confusion while processing AMP packets aka
  "BleedingTooth" aka "BadKarma" (bsc#1177724).
• CVE-2020-12352: Fixed an information leak when processing certain AMP
  packets aka "BleedingTooth" aka "BadChoice" (bsc#1177725).
• CVE-2020-25645: Fixed an issue which traffic between two Geneve
  endpoints may be unencrypted when IPsec is configured to encrypt traffic
  for the specific UDP port used by the GENEVE tunnel allowing anyone
  between the two endpoints to read the traffic unencrypted (bsc#1177511).

The following non-security bugs were fixed:
https://lists.suse.com/pipermail/sle-security-updates/2020-October/007595.html

Issue Links

• is related to: LU-14218 kernel update [SLES15 SP1 4.12.14-197.75.1]
• is related to: LU-14028 kernel update [SLES15 SP1 4.12.14-197.61.1]