[LU-14079] kernel update [SLES12 SP5 4.12.14-122.46.1]

• Type: Improvement
• Resolution: Won't Fix
• Priority: Minor
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various
security and bugfixes.

The following security bugs were fixed:

• CVE-2020-12351: Fixed a type confusion while processing AMP packets aka
  "BleedingTooth" aka "BadKarma" (bsc#1177724).
• CVE-2020-12352: Fixed an information leak when processing certain AMP
  packets aka "BleedingTooth" aka "BadChoice" (bsc#1177725).
• CVE-2020-25645: Fixed an issue which traffic between two Geneve
  endpoints may be unencrypted when IPsec is configured to encrypt traffic
  for the specific UDP port used by the GENEVE tunnel allowing anyone
  between the two endpoints to read the traffic unencrypted (bsc#1177511).
• CVE-2020-25212: Fixed a TOCTOU mismatch in the NFS client code
  (bsc#1176381).

The following non-security bugs were fixed:
https://lists.suse.com/pipermail/sle-security-updates/2020-October/007604.html

Issue Links

• is related to: LU-14222 kernel update [SLES12 SP5 4.12.14-122.54.1]
• is related to: LU-14030 kernel update [SLES12 SP5 4.12.14-122.41.1]

Comments

[Jian Yu]

A new version is available in LU-14222.

[Gerrit Updater]

Jian Yu ([e-mail]) uploaded a new patch: https://review.whamcloud.com/40622
Subject: LU-14079 kernel: kernel update SLES12 SP5 [4.12.14-122.46.1]
Project: fs/lustre-release
Branch: b2_12
Current Patch Set: 1
Commit: 32b278c9a71d6245d39e938ff09934ba21499f09

[Gerrit Updater]

Jian Yu ([e-mail]) uploaded a new patch: https://review.whamcloud.com/40621
Subject: LU-14079 kernel: kernel update SLES12 SP5 [4.12.14-122.46.1]
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 2444e8a80e677e9a7b688cbdb3a988c1c07e16a6