-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2020.1164
         SUSE-SU-2020:0836-1 Security update for the Linux Kernel
                               2 April 2020

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           linux kernel
Publisher:         SUSE
Operating System:  SUSE
Impact/Access:     Root Compromise        -- Existing Account
                   Access Privileged Data -- Existing Account
                   Denial of Service      -- Existing Account
Resolution:        Patch/Upgrade
CVE Names:         CVE-2020-9383 CVE-2020-8649 CVE-2020-8648
                   CVE-2020-8647 CVE-2019-19768 

Reference:         ESB-2020.0925
                   ESB-2020.0920
                   ESB-2020.0908
                   ESB-2020.0797

Original Bulletin: 
   https://www.suse.com/support/update/announcement/2020/suse-su-20200836-1.html

- --------------------------BEGIN INCLUDED TEXT--------------------

SUSE Security Update: Security update for the Linux Kernel

______________________________________________________________________________

Announcement ID:   SUSE-SU-2020:0836-1
Rating:            important
References:        #1044231 #1051510 #1051858 #1056686 #1060463 #1065729
                   #1103990 #1103992 #1104353 #1104745 #1109837 #1111666
                   #1111974 #1112178 #1112374 #1113956 #1114279 #1114685
                   #1119680 #1127611 #1133021 #1134090 #1136157 #1141895
                   #1144333 #1146539 #1156510 #1157424 #1158187 #1159285
                   #1160659 #1161561 #1161951 #1162928 #1162929 #1162931
                   #1164078 #1164507 #1165111 #1165404 #1165488 #1165527
                   #1165741 #1165813 #1165873 #1165929 #1165950 #1165980
                   #1165984 #1165985 #1166003 #1166101 #1166102 #1166103
                   #1166104 #1166632 #1166658 #1166730 #1166731 #1166732
                   #1166733 #1166734 #1166735
Cross-References:  CVE-2019-19768 CVE-2020-8647 CVE-2020-8648 CVE-2020-8649
                   CVE-2020-9383
Affected Products:
                   SUSE Linux Enterprise Workstation Extension 15-SP1
                   SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
                   SUSE Linux Enterprise Module for Live Patching 15-SP1
                   SUSE Linux Enterprise Module for Legacy Software 15-SP1
                   SUSE Linux Enterprise Module for Development Tools 15-SP1
                   SUSE Linux Enterprise Module for Basesystem 15-SP1
                   SUSE Linux Enterprise High Availability 15-SP1
______________________________________________________________________________

An update that solves 5 vulnerabilities and has 58 fixes is now available.

Description:

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security
and bugfixes.
The following security bugs were fixed:

  o CVE-2020-8647: Fixed a use-after-free in the vc_do_resize function in
    drivers/tty/vt/vt.c (bsc#1162929).
  o CVE-2020-8649: Fixed a use-after-free in the vgacon_invert_region function
    in drivers/video/console/vgacon.c (bsc#1162931).
  o CVE-2020-8648: Fixed a use-after-free in the n_tty_receive_buf_common
    function in drivers/tty/n_tty.c (bsc#1162928).
  o CVE-2020-9383: Fixed an out-of-bounds read due to improper error condition
    check of FDC index (bsc#1165111).
  o CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in
    kernel/trace/blktrace.c (bnc#1159285).


The following non-security bugs were fixed:

  o ALSA: hda/realtek - Add Headset Button supported for ThinkPad X1 (bsc#
    1111666).
  o ALSA: hda/realtek - Add Headset Mic supported (bsc#1111666).
  o ALSA: hda/realtek - Add more codec supported Headset Button (bsc#1111666).
  o ALSA: hda/realtek - Apply quirk for MSI GP63, too (bsc#1111666).
  o ALSA: hda/realtek - Apply quirk for yet another MSI laptop (bsc#1111666).
  o ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294 (bsc#
    1111666).
  o ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1 (bsc#
    1111666).
  o ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master (bsc#
    1111666).
  o ALSA: usb-audio: Add boot quirk for MOTU M Series (bsc#1111666).
  o ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000 (bsc#
    1111666).
  o ALSA: usb-audio: add implicit fb quirk for MOTU M Series (bsc#1111666).
  o ALSA: usb-audio: add quirks for Line6 Helix devices fw>=2.82 (bsc#1111666).
  o ALSA: usb-audio: Apply 48kHz fixed rate playback for Jabra Evolve 65
    headset (bsc#1111666).
  o ALSA: usb-audio: fix Corsair Virtuoso mixer label collision (bsc#1111666).
  o ALSA: usb-audio: Fix UAC2/3 effect unit parsing (bsc#1111666).
  o ALSA: usb-audio: unlock on error in probe (bsc#1111666).
  o ALSA: usb-audio: Use lower hex numbers for IDs (bsc#1111666).
  o ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#
    1051510).
  o amdgpu/gmc_v9: save/restore sdpif regs during S3 (bsc#1113956)
  o ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#
    1051510).
  o ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path
    (bsc#1051510).
  o ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output (bsc#
    1051510).
  o ASoC: pcm: update FE/BE trigger order based on the command (bsc#1051510).
  o ASoC: topology: Fix memleak in soc_tplg_link_elems_load() (bsc#1051510).
  o atm: zatm: Fix empty body Clang warnings (bsc#1051510).
  o b43legacy: Fix -Wcast-function-type (bsc#1051510).
  o blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285).
  o blktrace: fix dereference after null check (bsc#1159285).
  o blktrace: fix trace mutex deadlock (bsc#1159285).
  o bnxt_en: Fix NTUPLE firmware command failures (bsc#1104745 ).
  o bnxt_en: Fix TC queue mapping (networking-stable-20_02_05).
  o bnxt_en: Improve device shutdown method (bsc#1104745 ).
  o bnxt_en: Issue PCIe FLR in kdump kernel to cleanup pending DMAs (bsc#
    1134090 jsc#SLE-5954).
  o bonding/alb: properly access headers in bond_alb_xmit()
    (networking-stable-20_02_09).
  o bpf, offload: Replace bitwise AND by logical AND in
    bpf_prog_offload_info_fill (bsc#1109837).
  o CIFS: add a debug macro that prints \\server\share for errors (bsc#
    1144333).
  o CIFS: add missing mount option to /proc/mounts (bsc#1144333).
  o CIFS: add new debugging macro cifs_server_dbg (bsc#1144333).
  o CIFS: add passthrough for smb2 setinfo (bsc#1144333).
  o CIFS: add SMB2_open() arg to return POSIX data (bsc#1144333).
  o CIFS: add smb2 POSIX info level (bsc#1144333).
  o CIFS: add SMB3 change notification support (bsc#1144333).
  o CIFS: add support for fallocate mode 0 for non-sparse files (bsc#1144333).
  o CIFS: Add support for setting owner info, dos attributes, and create time
    (bsc#1144333).
  o CIFS: Add tracepoints for errors on flush or fsync (bsc#1144333).
  o CIFS: Adjust indentation in smb2_open_file (bsc#1144333).
  o CIFS: allow chmod to set mode bits using special sid (bsc#1144333).
  o CIFS: Avoid doing network I/O while holding cache lock (bsc#1144333).
  o CIFS: call wake_up(server->response_q) inside of cifs_reconnect() (bsc#
    1144333).
  o CIFS: Clean up DFS referral cache (bsc#1144333).
  o CIFS: create a helper function to parse the query-directory response buffer
    (bsc#1144333).
  o CIFS: do d_move in rename (bsc#1144333).
  o CIFS: Do not display RDMA transport on reconnect (bsc#1144333).
  o CIFS: do not ignore the SYNC flags in getattr (bsc#1144333).
  o CIFS: do not leak -EAGAIN for stat() during reconnect (bsc#1144333).
  o CIFS: do not use 'pre:' for MODULE_SOFTDEP (bsc#1144333).
  o CIFS: enable change notification for SMB2.1 dialect (bsc#1144333).
  o CIFS: fail i/o on soft mounts if sessionsetup errors out (bsc#1144333).
  o CIFS: fix a comment for the timeouts when sending echos (bsc#1144333).
  o CIFS: fix a white space issue in cifs_get_inode_info() (bsc#1144333).
  o CIFS: fix dereference on ses before it is null checked (bsc#1144333).
  o CIFS: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).
  o CIFS: fix mode bits from dir listing when mounted with modefromsid (bsc#
    1144333).
  o CIFS: Fix mode output in debugging statements (bsc#1144333).
  o CIFS: Fix mount options set in automount (bsc#1144333).
  o CIFS: fix NULL dereference in match_prepath (bsc#1144333).
  o CIFS: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#
    1144333).
  o CIFS: fix potential mismatch of UNC paths (bsc#1144333).
  o CIFS: fix rename() by ensuring source handle opened with DELETE bit (bsc#
    1144333).
  o CIFS: Fix return value in __update_cache_entry (bsc#1144333).
  o CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333).
  o CIFS: fix soft mounts hanging in the reconnect code (bsc#1144333).
  o CIFS: Fix task struct use-after-free on reconnect (bsc#1144333).
  o CIFS: fix unitialized variable poential problem with network I/O cache lock
    patch (bsc#1144333).
  o CIFS: get mode bits from special sid on stat (bsc#1144333).
  o CIFS: Get rid of kstrdup_const()'d paths (bsc#1144333).
  o CIFS: handle prefix paths in reconnect (bsc#1144333).
  o CIFS: Introduce helpers for finding TCP connection (bsc#1144333).
  o CIFS: log warning message (once) if out of disk space (bsc#1144333).
  o CIFS: make sure we do not overflow the max EA buffer size (bsc#1144333).
  o CIFS: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1144333).
  o CIFS: Merge is_path_valid() into get_normalized_path() (bsc#1144333).
  o CIFS: modefromsid: make room for 4 ACE (bsc#1144333).
  o CIFS: modefromsid: write mode ACE first (bsc#1144333).
  o CIFS: Optimize readdir on reparse points (bsc#1144333).
  o CIFS: plumb smb2 POSIX dir enumeration (bsc#1144333).
  o CIFS: potential unintitliazed error code in cifs_getattr() (bsc#1144333).
  o CIFS: prepare SMB2_query_directory to be used with compounding (bsc#
    1144333).
  o CIFS: print warning once if mounting with vers=1.0 (bsc#1144333).
  o CIFS: refactor cifs_get_inode_info() (bsc#1144333).
  o CIFS: remove redundant assignment to pointer pneg_ctxt (bsc#1144333).
  o CIFS: remove redundant assignment to variable rc (bsc#1144333).
  o CIFS: remove set but not used variables (bsc#1144333).
  o CIFS: remove set but not used variable 'server' (bsc#1144333).
  o CIFS: remove unused variable (bsc#1144333).
  o CIFS: remove unused variable 'sid_user' (bsc#1144333).
  o CIFS: rename a variable in SendReceive() (bsc#1144333).
  o CIFS: rename posix create rsp (bsc#1144333).
  o CIFS: replace various strncpy with strscpy and similar (bsc#1144333).
  o CIFS: Return directly after a failed build_path_from_dentry() in
    cifs_do_create() (bsc#1144333).
  o CIFS: set correct max-buffer-size for smb2_ioctl_init() (bsc#1144333).
  o CIFS: smbd: Add messages on RDMA session destroy and reconnection (bsc#
    1144333).
  o CIFS: smbd: Invalidate and deregister memory registration on re-send for
    direct I/O (bsc#1144333).
  o CIFS: smbd: Only queue work for error recovery on memory registration (bsc#
    1144333).
  o CIFS: smbd: Return -EAGAIN when transport is reconnecting (bsc#1144333).
  o CIFS: smbd: Return -ECONNABORTED when trasnport is not in connected state
    (bsc#1144333).
  o CIFS: smbd: Return -EINVAL when the number of iovs exceeds
    SMBDIRECT_MAX_SGE (bsc#1144333).
  o CIFS: Use common error handling code in smb2_ioctl_query_info() (bsc#
    1144333).
  o CIFS: use compounding for open and first query-dir for readdir() (bsc#
    1144333).
  o CIFS: Use #define in cifs_dbg (bsc#1144333).
  o CIFS: Use memdup_user() rather than duplicating its implementation (bsc#
    1144333).
  o CIFS: use mod_delayed_work() for server->reconnect if already queued (bsc#
    1144333).
  o CIFS: use PTR_ERR_OR_ZERO() to simplify code (bsc#1144333).
  o cls_rsvp: fix rsvp_policy (networking-stable-20_02_05).
  o core: Do not skip generic XDP program execution for cloned SKBs (bsc#
    1109837).
  o cpufreq: powernv: Fix unsafe notifiers (bsc#1065729).
  o cpufreq: powernv: Fix use-after-free (bsc#1065729).
  o crypto: pcrypt - Fix user-after-free on module unload (git-fixes).
  o devlink: report 0 after hitting end in region read (bsc#1109837).
  o dmaengine: coh901318: Fix a double lock bug in dma_tc_handle() (bsc#
    1051510).
  o driver core: platform: fix u32 greater or equal to zero comparison (bsc#
    1051510).
  o driver core: platform: Prevent resouce overflow from causing infinite loops
    (bsc#1051510).
  o driver core: Print device when resources present in really_probe() (bsc#
    1051510).
  o drivers/md/raid5.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#
    1166003).
  o drivers/md/raid5-ppl.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc
    #1166003).
  o drm/amd/dm/mst: Ignore payload update failures (bsc#1112178)
  o drm/amdkfd: fix a use after free race with mmu_notifer unregister (bsc#
    1114279)
  o drm: atmel-hlcdc: enable clock before configuring timing engine (bsc#
    1114279)
  o drm/etnaviv: fix dumping of iommuv2 (bsc#1114279)
  o drm/gma500: Fixup fbdev stolen size usage evaluation (bsc#1051510).
  o drm/i915/gvt: Fix orphan vgpu dmabuf_objs' lifetime (git-fixes).
  o drm/i915/gvt: Fix unnecessary schedule timer when no vGPU exits
    (git-fixes).
  o drm/i915/gvt: Separate display reset from ALL_ENGINES reset (bsc#1114279)
  o drm/i915: Program MBUS with rmw during initialization (git-fixes).
  o drm/i915/selftests: Fix return in assert_mmap_offset() (bsc#1114279)
  o drm/i915/userptr: fix size calculation (bsc#1114279)
  o drm/i915/userptr: Try to acquire the page lock around (bsc#1114279)
  o drm/i915: Wean off drm_pci_alloc/drm_pci_free (bsc#1114279)
  o drm/mediatek: Add gamma property according to hardware capability (bsc#
    1114279)
  o drm/mediatek: disable all the planes in atomic_disable (bsc#1114279)
  o drm/mediatek: handle events when enabling/disabling crtc (bsc#1051510).
  o drm/mipi_dbi: Fix off-by-one bugs in mipi_dbi_blank() (bsc#1114279)
  o drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1114279)
  o drm/nouveau/disp/nv50-: prevent oops when no channel method map provided
    (bsc#1051510).
  o drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw
    (bsc#1051510).
  o drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets (git-fixes).
  o drm: rcar-du: Recognize "renesas,vsps" in addition to "vsps" (bsc#1114279)
  o drm: remove the newline for CRC source name (bsc#1051510).
  o EDAC/mc: Fix use-after-free and memleaks during device removal (bsc#
    1114279).
  o Enabled the following two patches in series.conf, and refresh the KABI
    patch due to previous md commit (bsc#1119680)
  o ethtool: Factored out similar ethtool link settings for virtual devices to
    core (bsc#1136157 ltc#177197).
  o fcntl: fix typo in RWH_WRITE_LIFE_NOT_SET r/w hint name (bsc#1166003).
  o firmware: imx: misc: Align imx sc msg structs to 4 (git-fixes).
  o firmware: imx: scu: Ensure sequential TX (git-fixes).
  o firmware: imx: scu-pd: Align imx sc msg structs to 4 (git-fixes).
  o Fixed memory leak in large read decrypt offload (bsc#1144333).
  o Fixed some regressions (bsc#1165527 ltc#184149).
  o fs/cifs/cifssmb.c: use true,false for bool variable (bsc#1144333).
  o fs: cifs: cifsssmb: remove redundant assignment to variable ret (bsc#
    1144333).
  o fs: cifs: Initialize filesystem timestamp ranges (bsc#1144333).
  o fs: cifs: mute -Wunused-const-variable message (bsc#1144333).
  o fs/cifs/sess.c: Remove set but not used variable 'capabilities' (bsc#
    1144333).
  o fs/cifs/smb2ops.c: use true,false for bool variable (bsc#1144333).
  o fs/cifs/smb2pdu.c: Make SMB2_notify_init static (bsc#1144333).
  o fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#
    1165985).
  o gtp: make sure only SOCK_DGRAM UDP sockets are accepted
    (networking-stable-20_01_27).
  o gtp: use __GFP_NOWARN to avoid memalloc warning
    (networking-stable-20_02_05).
  o HID: core: fix off-by-one memset in hid_report_raw_event() (bsc#1051510).
  o HID: hiddev: Fix race in in hiddev_disconnect() (git-fixes).
  o hv_netvsc: Fix memory leak when removing rndis device
    (networking-stable-20_01_20).
  o hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT() (bsc#1051510).
  o IB/hfi1: Close window for pq and request coliding (bsc#1060463 ).
  o ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551).
  o ibmvnic: Do not process device remove during device reset (bsc#1065729).
  o ibmvnic: Warn unknown speed message only when carrier is present (bsc#
    1065729).
  o Input: edt-ft5x06 - work around first register access error (bsc#1051510).
  o Input: synaptics - enable SMBus on ThinkPad L470 (bsc#1051510).
  o Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list (bsc#
    1051510).
  o Input: synaptics - switch T470s to RMI4 by default (bsc#1051510).
  o iommu/amd: Check feature support bit before accessing MSI capability
    registers (bsc#1166101).
  o iommu/amd: Only support x2APIC with IVHD type 11h/40h (bsc#1166102).
  o iommu/amd: Remap the IOMMU device table with the memory encryption mask for
    kdump (bsc#1141895).
  o iommu/dma: Fix MSI reservation allocation (bsc#1166730).
  o iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint (bsc#
    1166731).
  o iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page (bsc#
    1166732).
  o iommu/vt-d: Fix compile warning from intel-svm.h (bsc#1166103).
  o iommu/vt-d: Fix the wrong printing in RHSA parsing (bsc#1166733).
  o iommu/vt-d: Ignore devices with out-of-spec domain number (bsc#1166734).
  o iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn +
    add_taint (bsc#1166735).
  o ipv4: ensure rcu_read_lock() in cipso_v4_error() (git-fixes).
  o ipv6: restrict IPV6_ADDRFORM operation (bsc#1109837).
  o iwlegacy: Fix -Wcast-function-type (bsc#1051510).
  o iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices (bsc#
    1166632).
  o iwlwifi: mvm: Fix thermal zone registration (bsc#1051510).
  o kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (bsc#
    1141895).
  o kernel/module.c: Only return -EEXIST for modules that have finished loading
    (bsc#1165488).
  o kernel/module.c: wakeup processes in module_wq on module unload (bsc#
    1165488).
  o kexec: Allocate decrypted control pages for kdump if SME is enabled (bsc#
    1141895).
  o KVM: arm64: Store vcpu on the stack during __guest_enter() (bsc#1133021).
  o KVM: s390: do not clobber registers during guest reset/store status (bsc#
    1133021).
  o KVM: s390: ENOTSUPP -> EOPNOTSUPP fixups (bsc#1133021).
  o KVM: VMX: check descriptor table exits on instruction emulation (bsc#
    1166104).
  o l2tp: Allow duplicate session creation with UDP
    (networking-stable-20_02_05).
  o libnvdimm/pfn_dev: Do not clear device memmap area during generic namespace
    probe (bsc#1165929 bsc#1165950).
  o libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields (bsc#
    1165929).
  o libnvdimm: remove redundant __func__ in dev_dbg (bsc#1165929).
  o lib/raid6: add missing include for raid6test (bsc#1166003).
  o lib/raid6: add option to skip algo benchmarking (bsc#1166003).
  o lib/raid6: avoid __attribute_const__ redefinition (bsc#1166003).
  o md: add __acquires/__releases annotations to handle_active_stripes (bsc#
    1166003).
  o md: add __acquires/__releases annotations to (un)lock_two_stripes (bsc#
    1166003).
  o md: add a missing endianness conversion in check_sb_changes (bsc#1166003).
  o md: add bitmap_abort label in md_run (bsc#1166003).
  o md: add feature flag MD_FEATURE_RAID0_LAYOUT (bsc#1166003).
  o md: allow last device to be forcibly removed from RAID1/RAID10 (bsc#
    1166003).
  o md: avoid invalid memory access for array sb->dev_roles (bsc#1166003).
  o md/bitmap: avoid race window between md_bitmap_resize and
    bitmap_file_clear_bit (bsc#1166003).
  o md-bitmap: create and destroy wb_info_pool with the change of backlog (bsc#
    1166003).
  o md-bitmap: create and destroy wb_info_pool with the change of bitmap (bsc#
    1166003).
  o md-bitmap: small cleanups (bsc#1166003).
  o md/bitmap: use mddev_suspend/resume instead of ->quiesce() (bsc#1166003).
  o md-cluster/bitmap: do not call md_bitmap_sync_with_cluster during reshaping
    stage (bsc#1166003).
  o md-cluster: introduce resync_info_get interface for sanity check (bsc#
    1166003).
  o md-cluster/raid10: call update_size in md_reap_sync_thread (bsc#1166003).
  o md-cluster/raid10: do not call remove_and_add_spares during reshaping stage
    (bsc#1166003).
  o md-cluster/raid10: resize all the bitmaps before start reshape (bsc#
    1166003).
  o md-cluster/raid10: support add disk under grow mode (bsc#1166003).
  o md-cluster: remove suspend_info (bsc#1166003).
  o md-cluster: send BITMAP_NEEDS_SYNC message if reshaping is interrupted (bsc
    #1166003).
  o md: convert to kvmalloc (bsc#1166003).
  o md: do not call spare_active in md_reap_sync_thread if all member devices
    can't work (bsc#1166003).
  o md: do not set In_sync if array is frozen (bsc#1166003).
  o md: fix a typo s/creat/create (bsc#1166003).
  o md: fix for divide error in status_resync (bsc#1166003).
  o md: fix spelling typo and add necessary space (bsc#1166003).
  o md: introduce mddev_create/destroy_wb_pool for the change of member device
    (bsc#1166003).
  o md-linear: use struct_size() in kzalloc() (bsc#1166003).
  o md: Make bio_alloc_mddev use bio_alloc_bioset (bsc#1166003).
  o md: make sure desc_nr less than MD_SB_DISKS (bsc#1166003).
  o md: md.c: Return -ENODEV when mddev is NULL in rdev_attr_show (bsc#
    1166003).
  o md: no longer compare spare disk superblock events in super_load (bsc#
    1166003).
  o md/raid0: Fix an error message in raid0_make_request() (bsc#1166003).
  o md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone
    (bsc#1166003).
  o md/raid10: end bio when the device faulty (bsc#1166003).
  o md/raid10: Fix raid10 replace hang when new added disk faulty (bsc#
    1166003).
  o md/raid10: prevent access of uninitialized resync_pages offset (bsc#
    1166003).
  o md/raid10: read balance chooses idlest disk for SSD (bsc#1166003).
  o md: raid10: Use struct_size() in kmalloc() (bsc#1166003).
  o md/raid1: avoid soft lockup under high load (bsc#1166003).
  o md: raid1: check rdev before reference in raid1_sync_request func (bsc#
    1166003).
  o md/raid1: end bio when the device faulty (bsc#1166003).
  o md/raid1: fail run raid1 array when active disk less than one (bsc#
    1166003).
  o md/raid1: Fix a warning message in remove_wb() (bsc#1166003).
  o md/raid1: fix potential data inconsistency issue with write behind device
    (bsc#1166003).
  o md/raid1: get rid of extra blank line and space (bsc#1166003).
  o md/raid5: use bio_end_sector to calculate last_sector (bsc#1166003).
  o md/raid6: fix algorithm choice under larger PAGE_SIZE (bsc#1166003).
  o md: remove set but not used variable 'bi_rdev' (bsc#1166003).
  o md: rename wb stuffs (bsc#1166003).
  o md: return -ENODEV if rdev has no mddev assigned (bsc#1166003).
  o md: use correct type in super_1_load (bsc#1166003).
  o md: use correct type in super_1_sync (bsc#1166003).
  o md: use correct types in md_bitmap_print_sb (bsc#1166003).
  o media: uvcvideo: Refactor teardown of uvc on USB disconnect (bsc#1164507).
  o mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters (bsc#1112374).
  o mlxsw: spectrum: Wipe xstats.backlog of down ports (bsc#1112374).
  o net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM
    (networking-stable-20_01_27).
  o net: dsa: mv88e6xxx: Preserve priority when setting CPU port
    (networking-stable-20_01_11).
  o net: dsa: tag_qca: fix doubled Tx statistics (networking-stable-20_01_20).
  o net/ethtool: Introduce link_ksettings API for virtual network devices (bsc#
    1136157 ltc#177197).
  o net: Fix Tx hash bound checking (bsc#1109837).
  o net: hns3: fix a copying IPv6 address error in hclge_fd_get_flow_tuples()
    (bsc#1104353).
  o net: hns: fix soft lockup when there is not enough memory
    (networking-stable-20_01_20).
  o net: hsr: fix possible NULL deref in hsr_handle_frame()
    (networking-stable-20_02_05).
  o net: ip6_gre: fix moving ip6gre between namespaces
    (networking-stable-20_01_27).
  o net, ip6_tunnel: fix namespaces move (networking-stable-20_01_27).
  o net, ip_tunnel: fix namespaces move (networking-stable-20_01_27).
  o net: macb: Limit maximum GEM TX length in TSO (networking-stable-20_02_09).
  o net: macb: Remove unnecessary alignment check for TSO
    (networking-stable-20_02_09).
  o net/mlx5: Fix lowest FDB pool size (bsc#1103990).
  o net/mlx5: IPsec, Fix esp modify function attribute (bsc#1103990 ).
  o net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx (bsc#
    1103990).
  o net/mlx5: Update the list of the PCI supported devices (bsc#1127611).
  o net/mlxfw: Verify FSM error code translation does not exceed array size
    (bsc#1051858).
  o net: mvneta: move rx_dropped and rx_errors in per-cpu stats
    (networking-stable-20_02_09).
  o net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
    (networking-stable-20_01_27).
  o net_sched: ematch: reject invalid TCF_EM_SIMPLE
    (networking-stable-20_01_30).
  o net_sched: fix an OOB access in cls_tcindex (networking-stable-20_02_05).
  o net_sched: fix a resource leak in tcindex_set_parms()
    (networking-stable-20_02_09).
  o net_sched: fix datalen for ematch (networking-stable-20_01_27).
  o net: sch_prio: When ungrafting, replace with FIFO
    (networking-stable-20_01_11).
  o net/smc: add fallback check to connect() (git-fixes).
  o net/smc: fix cleanup for linkgroup setup failures (git-fixes).
  o net/smc: no peer ID in CLC decline for SMCD (git-fixes).
  o net/smc: transfer fasync_list in case of fallback (git-fixes).
  o net: stmmac: dwmac-sunxi: Allow all RGMII modes
    (networking-stable-20_01_11).
  o net-sysfs: Fix reference count leak (networking-stable-20_01_27).
  o net: systemport: Avoid RBUF stuck in Wake-on-LAN mode
    (networking-stable-20_02_09).
  o net/tls: fix async operation (bsc#1109837).
  o net/tls: free the record on encryption error (bsc#1109837).
  o net/tls: take into account that bpf_exec_tx_verdict() may free the record
    (bsc#1109837).
  o net: usb: lan78xx: Add .ndo_features_check (networking-stable-20_01_27).
  o net: usb: lan78xx: fix possible skb leak (networking-stable-20_01_11).
  o net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info
    (networking-stable-20_01_20).
  o NFC: pn544: Fix a typo in a debug message (bsc#1051510).
  o NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu
    () (bsc#1051510).
  o nvme: Fix parsing of ANA log page (bsc#1166658).
  o nvme: resync include/linux/nvme.h with nvmecli (bsc#1156510).
  o nvme: Translate more status codes to blk_status_t (bsc#1156510).
  o orinoco: avoid assertion in case of NULL pointer (bsc#1051510).
  o padata: always acquire cpu_hotplug_lock before pinst->lock (git-fixes).
  o PCI/AER: Clear device status bits during ERR_COR handling (bsc#1161561).
  o PCI/AER: Clear device status bits during ERR_FATAL and ERR_NONFATAL (bsc#
    1161561).
  o PCI/AER: Clear only ERR_FATAL status bits during fatal recovery (bsc#
    1161561).
  o PCI/AER: Clear only ERR_NONFATAL bits during non-fatal recovery (bsc#
    1161561).
  o PCI/AER: Do not clear AER bits if error handling is Firmware-First (bsc#
    1161561).
  o PCI/AER: Do not read upstream ports below fatal errors (bsc#1161561).
  o PCI/AER: Factor out ERR_NONFATAL status bit clearing (bsc#1161561).
  o PCI/AER: Take reference on error devices (bsc#1161561).
  o PCI/ERR: Run error recovery callbacks for all affected devices (bsc#
    1161561).
  o PCI/ERR: Use slot reset if available (bsc#1161561).
  o pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins (bsc#
    1051510).
  o pinctrl: imx: scu: Align imx sc msg structs to 4 (git-fixes).
  o pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs (bsc#1051510).
  o pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs (bsc#1051510).
  o pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
    (networking-stable-20_01_11).
  o platform/mellanox: fix potential deadlock in the tmfifo driver (bsc#1136333
    jsc#SLE-4994).
  o powerpc: fix hardware PMU exception bug on PowerVM compatibility mode
    systems (bsc#1056686).
  o powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable
    (bsc#1160659).
  o powerpc/pseries: fix of_read_drc_info_cell() to point at next record (bsc#
    1165980 ltc#183834).
  o powerpc/pseries: group lmb operation and memblock's (bsc#1165404 ltc#
    183498).
  o powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR
    request (bsc#1165404 ltc#183498).
  o powerpc/pseries: update device tree before ejecting hotplug uevents (bsc#
    1165404 ltc#183498).
  o powerpc/smp: Use nid as fallback for package_id (bsc#1165813 ltc#184091).
  o ptr_ring: add include of linux/mm.h (bsc#1109837).
  o qmi_wwan: re-add DW5821e pre-production variant (bsc#1051510).
  o raid10: refactor common wait code from regular read/write request (bsc#
    1166003).
  o raid1: factor out a common routine to handle the completion of sync write
    (bsc#1166003).
  o raid1: simplify raid1_error function (bsc#1166003).
  o raid1: use an int as the return value of raise_barrier() (bsc#1166003).
  o raid5: block failing device if raid will be failed (bsc#1166003).
  o raid5: do not increment read_errors on EILSEQ return (bsc#1166003).
  o raid5: do not set STRIPE_HANDLE to stripe which is in batch list (bsc#
    1166003).
  o raid5 improve too many read errors msg by adding limits (bsc#1166003).
  o raid5: need to set STRIPE_HANDLE for batch head (bsc#1166003).
  o raid5: remove STRIPE_OPS_REQ_PENDING (bsc#1166003).
  o raid5: remove worker_cnt_per_group argument from alloc_thread_groups (bsc#
    1166003).
  o raid5: set write hint for PPL (bsc#1166003).
  o raid5: use bio_end_sector in r5_next_bio (bsc#1166003).
  o raid6/test: fix a compilation error (bsc#1166003).
  o raid6/test: fix a compilation warning (bsc#1166003).
  o RDMA/cma: Fix unbalanced cm_id reference count during address resolve (bsc#
    1103992).
  o RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create (bsc#1114685).
  o RDMA/uverbs: Verify MR access flags (bsc#1103992).
  o remoteproc: Initialize rproc_class before use (bsc#1051510).
  o Revert "HID: add NOGET quirk for Eaton Ellipse MAX UPS" (git-fixes).
  o rtlwifi: rtl_pci: Fix -Wcast-function-type (bsc#1051510).
  o rxrpc: Fix insufficient receive notification generation
    (networking-stable-20_02_05).
  o s390/pci: Fix unexpected write combine on resource (git-fixes).
  o s390/uv: Fix handling of length extensions (git-fixes).
  o scsi: fnic: do not queue commands during fwreset (bsc#1146539).
  o scsi: ibmvfc: Add failed PRLI to cmd_status lookup array (bsc#1161951 ltc#
    183551).
  o scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (bsc#1161951
    ltc#183551).
  o scsi: ibmvfc: Byte swap status and error codes when logging (bsc#1161951
    ltc#183551).
  o scsi: ibmvfc: Clean up transport events (bsc#1161951 ltc#183551).
  o scsi: ibmvfc: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
  o scsi: ibmvfc: Do not call fc_block_scsi_eh() on host reset (bsc#1161951 ltc
    #183551).
  o scsi: ibmvfc: ibmvscsi: ibmvscsi_tgt: constify vio_device_id (bsc#1161951
    ltc#183551).
  o scsi: ibmvfc: Mark expected switch fall-throughs (bsc#1161951 ltc#183551).
  o scsi: ibmvfc: Remove "failed" from logged errors (bsc#1161951 ltc#183551).
  o scsi: ibmvfc: Remove unneeded semicolons (bsc#1161951 ltc#183551).
  o scsi: ibmvscsi: change strncpy+truncation to strlcpy (bsc#1161951 ltc#
    183551).
  o scsi: ibmvscsi: constify dev_pm_ops structures (bsc#1161951 ltc#183551).
  o scsi: ibmvscsi: Do not use rc uninitialized in ibmvscsi_do_work (bsc#
    1161951 ltc#183551).
  o scsi: ibmvscsi: fix tripping of blk_mq_run_hw_queue WARN_ON (bsc#1161951
    ltc#183551).
  o scsi: ibmvscsi: Improve strings handling (bsc#1161951 ltc#183551).
  o scsi: ibmvscsi: redo driver work thread to use enum action states (bsc#
    1161951 ltc#183551).
  o scsi: ibmvscsi: Wire up host_reset() in the driver's scsi_host_template
    (bsc#1161951 ltc#183551).
  o scsi: qla2xxx: Add 16.0GT for PCI String (bsc#1157424).
  o scsi: qla2xxx: Add beacon LED config sysfs interface (bsc#1157424).
  o scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (bsc
    #1157424).
  o scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (bsc#
    1157424).
  o scsi: qla2xxx: Add endianizer macro calls to fc host stats (bsc#1157424).
  o scsi: qla2xxx: Add fixes for mailbox command (bsc#1157424).
  o scsi: qla2xxx: add more FW debug information (bsc#1157424).
  o scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (bsc#1157424).
  o scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (bsc#
    1157424).
  o scsi: qla2xxx: Add vendor extended FDMI commands (bsc#1157424).
  o scsi: qla2xxx: Add vendor extended RDP additions and amendments (bsc#
    1157424).
  o scsi: qla2xxx: Avoid setting firmware options twice in
    24xx_update_fw_options (bsc#1157424).
  o scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb()
    (bsc#1157424).
  o scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (bsc#1157424).
  o scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function
    (bsc#1157424).
  o scsi: qla2xxx: Correction to selection of loopback/echo test (bsc#1157424).
  o scsi: qla2xxx: Display message for FCE enabled (bsc#1157424).
  o scsi: qla2xxx: Fix control flags for login/logout IOCB (bsc#1157424).
  o scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (bsc#1157424).
  o scsi: qla2xxx: fix FW resource count values (bsc#1157424).
  o scsi: qla2xxx: Fix NPIV instantiation after FW dump (bsc#1157424).
  o scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (bsc#1157424).
  o scsi: qla2xxx: Fix RDP respond data format (bsc#1157424).
  o scsi: qla2xxx: Fix RDP response size (bsc#1157424).
  o scsi: qla2xxx: Fix sparse warning reported by kbuild bot (bsc#1157424).
  o scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code
    (bsc#1157424).
  o scsi: qla2xxx: Force semaphore on flash validation failure (bsc#1157424).
  o scsi: qla2xxx: Handle cases for limiting RDP response payload length (bsc#
    1157424).
  o scsi: qla2xxx: Handle NVME status iocb correctly (bsc#1157424).
  o scsi: qla2xxx: Improved secure flash support messages (bsc#1157424).
  o scsi: qla2xxx: Move free of fcport out of interrupt context (bsc#1157424).
  o scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (bsc#
    1157424).
  o scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (bsc#1157424).
  o scsi: qla2xxx: Return appropriate failure through BSG Interface (bsc#
    1157424).
  o scsi: qla2xxx: Save rscn_gen for new fcport (bsc#1157424).
  o scsi: qla2xxx: Serialize fc_port alloc in N2N (bsc#1157424).
  o scsi: qla2xxx: Set Nport ID for N2N (bsc#1157424).
  o scsi: qla2xxx: Show correct port speed capabilities for RDP command (bsc#
    1157424).
  o scsi: qla2xxx: Simplify the code for aborting SCSI commands (bsc#1157424).
  o scsi: qla2xxx: Suppress endianness complaints in
    qla2x00_configure_local_loop() (bsc#1157424).
  o scsi: qla2xxx: Update BPM enablement semantics (bsc#1157424).
  o scsi: qla2xxx: Update driver version to 10.01.00.24-k (bsc#1157424).
  o scsi: qla2xxx: Update driver version to 10.01.00.25-k (bsc#1157424).
  o scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required'
    ISPs (bsc#1157424).
  o scsi: qla2xxx: Use correct ISP28xx active FW region (bsc#1157424).
  o scsi: qla2xxx: Use endian macros to assign static fields in fwdump header
    (bsc#1157424).
  o scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx
    (bsc#1157424).
  o scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (bsc#1157424).
  o scsi: tcm_qla2xxx: Make qlt_alloc_qfull_cmd() set cmd->se_cmd.map_tag (bsc#
    1157424).
  o sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY
    (networking-stable-20_01_11).
  o smb3: add debug messages for closing unmatched open (bsc#1144333).
  o smb3: Add defines for new information level, FileIdInformation (bsc#
    1144333).
  o smb3: add dynamic tracepoints for flush and close (bsc#1144333).
  o smb3: add missing flag definitions (bsc#1144333).
  o smb3: Add missing reparse tags (bsc#1144333).
  o smb3: add missing worker function for SMB3 change notify (bsc#1144333).
  o smb3: add mount option to allow forced caching of read only share (bsc#
    1144333).
  o smb3: add mount option to allow RW caching of share accessed by only 1
    client (bsc#1144333).
  o smb3: add one more dynamic tracepoint missing from strict fsync path (bsc#
    1144333).
  o smb3: add some more descriptive messages about share when mounting cache=ro
    (bsc#1144333).
  o smb3: allow decryption keys to be dumped by admin for debugging (bsc#
    1144333).
  o smb3: allow disabling requesting leases (bsc#1144333).
  o smb3: allow parallelizing decryption of reads (bsc#1144333).
  o smb3: allow skipping signature verification for perf sensitive
    configurations (bsc#1144333).
  o smb3: Backup intent flag missing from some more ops (bsc#1144333).
  o smb3: cleanup some recent endian errors spotted by updated sparse (bsc#
    1144333).
  o smb3: display max smb3 requests in flight at any one time (bsc#1144333).
  o smb3: dump in_send and num_waiters stats counters by default (bsc#1144333).
  o smb3: enable offload of decryption of large reads via mount option (bsc#
    1144333).
  o smb3: fix default permissions on new files when mounting with modefromsid
    (bsc#1144333).
  o smb3: fix mode passed in on create for modetosid mount option (bsc#
    1144333).
  o smb3: fix performance regression with setting mtime (bsc#1144333).
  o smb3: fix potential null dereference in decrypt offload (bsc#1144333).
  o smb3: fix problem with null cifs super block with previous patch (bsc#
    1144333).
  o smb3: Fix regression in time handling (bsc#1144333).
  o smb3: improve check for when we send the security descriptor context on
    create (bsc#1144333).
  o smb3: log warning if CSC policy conflicts with cache mount option (bsc#
    1144333).
  o smb3: missing ACL related flags (bsc#1144333).
  o smb3: only offload decryption of read responses if multiple requests (bsc#
    1144333).
  o smb3: pass mode bits into create calls (bsc#1144333).
  o smb3: print warning once if posix context returned on open (bsc#1144333).
  o smb3: query attributes on file close (bsc#1144333).
  o smb3: remove noisy debug message and minor cleanup (bsc#1144333).
  o smb3: remove unused flag passed into close functions (bsc#1144333).
  o staging: rtl8188eu: Fix potential overuse of kernel memory (bsc#1051510).
  o staging: rtl8188eu: Fix potential security hole (bsc#1051510).
  o staging: rtl8723bs: Fix potential overuse of kernel memory (bsc#1051510).
  o staging: rtl8723bs: Fix potential security hole (bsc#1051510).
  o SUNRPC: Fix svcauth_gss_proxy_init() (bsc#1103992).
  o tcp_bbr: improve arithmetic division in bbr_update_bw()
    (networking-stable-20_01_27).
  o tcp: clear tp->data_segs{in|out} in tcp_disconnect()
    (networking-stable-20_02_05).
  o tcp: clear tp->delivered in tcp_disconnect() (networking-stable-20_02_05).
  o tcp: clear tp->segs_{in|out} in tcp_disconnect()
    (networking-stable-20_02_05).
  o tcp: clear tp->total_retrans in tcp_disconnect()
    (networking-stable-20_02_05).
  o tcp: fix marked lost packets not being retransmitted
    (networking-stable-20_01_20).
  o tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK
    (networking-stable-20_01_11).
  o thunderbolt: Prevent crash if non-active NVMem file is read (git-fixes).
  o tick: broadcast-hrtimer: Fix a race in bc_set_next (bsc#1044231).
  o tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on
    failure (git-fixes).
  o tools: Update include/uapi/linux/fcntl.h copy from the kernel (bsc#
    1166003).
  o ttyprintk: fix a potential deadlock in interrupt context issue (git-fixes).
  o tun: add mutex_unlock() call and napi.skb clearing in tun_get_user() (bsc#
    1109837).
  o Updated block layer, timers and md code for SLE15-SP1 kernel (bsc#1111974).
  o Updated "drm/i915: Wean off drm_pci_alloc/drm_pci_free" (bsc#1114279)
  o USB: core: add endpoint-blacklist quirk (git-fixes).
  o USBip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit()
    (git-fixes).
  o USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 (git-fixes).
  o uvcvideo: Refactor teardown of uvc on USB disconnect (https://
    patchwork.kernel.org/patch/9683663/) (bsc#1164507)
  o vgacon: Fix a UAF in vgacon_invert_region (bsc#1114279)
  o virtio-blk: fix hw_queue stopped on arbitrary error (git-fixes).
  o vlan: fix memory leak in vlan_dev_set_egress_priority
    (networking-stable-20_01_11).
  o vlan: vlan_changelink() should propagate errors
    (networking-stable-20_01_11).
  o vxlan: fix tos value before xmit (networking-stable-20_01_11).
  o x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF (bsc#
    1114279).
  o x86/ioremap: Add an ioremap_encrypted() helper (bsc#1141895).
  o x86/kdump: Export the SME mask to vmcoreinfo (bsc#1141895).
  o x86/mce/amd: Fix kobject lifetime (bsc#1114279).
  o x86/mce/amd: Publish the bank pointer only after setup has succeeded (bsc#
    1114279).
  o x86/mm: Split vmalloc_sync_all() (bsc#1165741).
  o xfs: also remove cached ACLs when removing the underlying attr (bsc#
    1165873).
  o xfs: bulkstat should copy lastip whenever userspace supplies one (bsc#
    1165984).
  o xhci: fix runtime pm enabling for quirky Intel hosts (bsc#1051510).
  o xhci: Force Maximum Packet size for Full-speed bulk devices to valid range
    (bsc#1051510).

Special Instructions and Notes:

Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation
methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  o SUSE Linux Enterprise Workstation Extension 15-SP1:
    zypper in -t patch SUSE-SLE-Product-WE-15-SP1-2020-836=1
  o SUSE Linux Enterprise Module for Open Buildservice Development Tools
    15-SP1:
    zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-836=1
  o SUSE Linux Enterprise Module for Live Patching 15-SP1:
    zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP1-2020-836=1
  o SUSE Linux Enterprise Module for Legacy Software 15-SP1:
    zypper in -t patch SUSE-SLE-Module-Legacy-15-SP1-2020-836=1
  o SUSE Linux Enterprise Module for Development Tools 15-SP1:
    zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP1-2020-836=1
  o SUSE Linux Enterprise Module for Basesystem 15-SP1:
    zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2020-836=1
  o SUSE Linux Enterprise High Availability 15-SP1:
    zypper in -t patch SUSE-SLE-Product-HA-15-SP1-2020-836=1

Package List:

  o SUSE Linux Enterprise Workstation Extension 15-SP1 (x86_64):
       kernel-default-debuginfo-4.12.14-197.37.1
       kernel-default-debugsource-4.12.14-197.37.1
       kernel-default-extra-4.12.14-197.37.1
       kernel-default-extra-debuginfo-4.12.14-197.37.1
  o SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
    (aarch64 ppc64le s390x x86_64):
       kernel-default-debuginfo-4.12.14-197.37.1
       kernel-default-debugsource-4.12.14-197.37.1
       kernel-obs-qa-4.12.14-197.37.1
       kernel-vanilla-4.12.14-197.37.1
       kernel-vanilla-base-4.12.14-197.37.1
       kernel-vanilla-base-debuginfo-4.12.14-197.37.1
       kernel-vanilla-debuginfo-4.12.14-197.37.1
       kernel-vanilla-debugsource-4.12.14-197.37.1
       kernel-vanilla-devel-4.12.14-197.37.1
       kernel-vanilla-devel-debuginfo-4.12.14-197.37.1
       kernel-vanilla-livepatch-devel-4.12.14-197.37.1
       kselftests-kmp-default-4.12.14-197.37.1
       kselftests-kmp-default-debuginfo-4.12.14-197.37.1
  o SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
    (ppc64le x86_64):
       kernel-debug-4.12.14-197.37.1
       kernel-debug-base-4.12.14-197.37.1
       kernel-debug-base-debuginfo-4.12.14-197.37.1
       kernel-debug-debuginfo-4.12.14-197.37.1
       kernel-debug-debugsource-4.12.14-197.37.1
       kernel-debug-devel-4.12.14-197.37.1
       kernel-debug-devel-debuginfo-4.12.14-197.37.1
       kernel-debug-livepatch-devel-4.12.14-197.37.1
  o SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
    (aarch64 s390x):
       kernel-default-livepatch-4.12.14-197.37.1
  o SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
    (noarch):
       kernel-docs-html-4.12.14-197.37.1
       kernel-source-vanilla-4.12.14-197.37.1
  o SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
    (x86_64):
       kernel-kvmsmall-4.12.14-197.37.1
       kernel-kvmsmall-base-4.12.14-197.37.1
       kernel-kvmsmall-base-debuginfo-4.12.14-197.37.1
       kernel-kvmsmall-debuginfo-4.12.14-197.37.1
       kernel-kvmsmall-debugsource-4.12.14-197.37.1
       kernel-kvmsmall-devel-4.12.14-197.37.1
       kernel-kvmsmall-devel-debuginfo-4.12.14-197.37.1
       kernel-kvmsmall-livepatch-devel-4.12.14-197.37.1
  o SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
    (s390x):
       kernel-zfcpdump-debuginfo-4.12.14-197.37.1
       kernel-zfcpdump-debugsource-4.12.14-197.37.1
       kernel-zfcpdump-man-4.12.14-197.37.1
  o SUSE Linux Enterprise Module for Live Patching 15-SP1 (ppc64le x86_64):
       kernel-default-debuginfo-4.12.14-197.37.1
       kernel-default-debugsource-4.12.14-197.37.1
       kernel-default-livepatch-4.12.14-197.37.1
       kernel-default-livepatch-devel-4.12.14-197.37.1
       kernel-livepatch-4_12_14-197_37-default-1-3.3.1
  o SUSE Linux Enterprise Module for Legacy Software 15-SP1 (aarch64 ppc64le
    s390x x86_64):
       kernel-default-debuginfo-4.12.14-197.37.1
       kernel-default-debugsource-4.12.14-197.37.1
       reiserfs-kmp-default-4.12.14-197.37.1
       reiserfs-kmp-default-debuginfo-4.12.14-197.37.1
  o SUSE Linux Enterprise Module for Development Tools 15-SP1 (aarch64 ppc64le
    s390x x86_64):
       kernel-obs-build-4.12.14-197.37.1
       kernel-obs-build-debugsource-4.12.14-197.37.1
       kernel-syms-4.12.14-197.37.1
  o SUSE Linux Enterprise Module for Development Tools 15-SP1 (noarch):
       kernel-docs-4.12.14-197.37.1
       kernel-source-4.12.14-197.37.1
  o SUSE Linux Enterprise Module for Basesystem 15-SP1 (aarch64 ppc64le s390x
    x86_64):
       kernel-default-4.12.14-197.37.1
       kernel-default-base-4.12.14-197.37.1
       kernel-default-base-debuginfo-4.12.14-197.37.1
       kernel-default-debuginfo-4.12.14-197.37.1
       kernel-default-debugsource-4.12.14-197.37.1
       kernel-default-devel-4.12.14-197.37.1
       kernel-default-devel-debuginfo-4.12.14-197.37.1
  o SUSE Linux Enterprise Module for Basesystem 15-SP1 (noarch):
       kernel-devel-4.12.14-197.37.1
       kernel-macros-4.12.14-197.37.1
  o SUSE Linux Enterprise Module for Basesystem 15-SP1 (s390x):
       kernel-default-man-4.12.14-197.37.1
       kernel-zfcpdump-debuginfo-4.12.14-197.37.1
       kernel-zfcpdump-debugsource-4.12.14-197.37.1
  o SUSE Linux Enterprise High Availability 15-SP1 (aarch64 ppc64le s390x
    x86_64):
       cluster-md-kmp-default-4.12.14-197.37.1
       cluster-md-kmp-default-debuginfo-4.12.14-197.37.1
       dlm-kmp-default-4.12.14-197.37.1
       dlm-kmp-default-debuginfo-4.12.14-197.37.1
       gfs2-kmp-default-4.12.14-197.37.1
       gfs2-kmp-default-debuginfo-4.12.14-197.37.1
       kernel-default-debuginfo-4.12.14-197.37.1
       kernel-default-debugsource-4.12.14-197.37.1
       ocfs2-kmp-default-4.12.14-197.37.1
       ocfs2-kmp-default-debuginfo-4.12.14-197.37.1


References:

  o https://www.suse.com/security/cve/CVE-2019-19768.html
  o https://www.suse.com/security/cve/CVE-2020-8647.html
  o https://www.suse.com/security/cve/CVE-2020-8648.html
  o https://www.suse.com/security/cve/CVE-2020-8649.html
  o https://www.suse.com/security/cve/CVE-2020-9383.html
  o https://bugzilla.suse.com/1044231
  o https://bugzilla.suse.com/1051510
  o https://bugzilla.suse.com/1051858
  o https://bugzilla.suse.com/1056686
  o https://bugzilla.suse.com/1060463
  o https://bugzilla.suse.com/1065729
  o https://bugzilla.suse.com/1103990
  o https://bugzilla.suse.com/1103992
  o https://bugzilla.suse.com/1104353
  o https://bugzilla.suse.com/1104745
  o https://bugzilla.suse.com/1109837
  o https://bugzilla.suse.com/1111666
  o https://bugzilla.suse.com/1111974
  o https://bugzilla.suse.com/1112178
  o https://bugzilla.suse.com/1112374
  o https://bugzilla.suse.com/1113956
  o https://bugzilla.suse.com/1114279
  o https://bugzilla.suse.com/1114685
  o https://bugzilla.suse.com/1119680
  o https://bugzilla.suse.com/1127611
  o https://bugzilla.suse.com/1133021
  o https://bugzilla.suse.com/1134090
  o https://bugzilla.suse.com/1136157
  o https://bugzilla.suse.com/1141895
  o https://bugzilla.suse.com/1144333
  o https://bugzilla.suse.com/1146539
  o https://bugzilla.suse.com/1156510
  o https://bugzilla.suse.com/1157424
  o https://bugzilla.suse.com/1158187
  o https://bugzilla.suse.com/1159285
  o https://bugzilla.suse.com/1160659
  o https://bugzilla.suse.com/1161561
  o https://bugzilla.suse.com/1161951
  o https://bugzilla.suse.com/1162928
  o https://bugzilla.suse.com/1162929
  o https://bugzilla.suse.com/1162931
  o https://bugzilla.suse.com/1164078
  o https://bugzilla.suse.com/1164507
  o https://bugzilla.suse.com/1165111
  o https://bugzilla.suse.com/1165404
  o https://bugzilla.suse.com/1165488
  o https://bugzilla.suse.com/1165527
  o https://bugzilla.suse.com/1165741
  o https://bugzilla.suse.com/1165813
  o https://bugzilla.suse.com/1165873
  o https://bugzilla.suse.com/1165929
  o https://bugzilla.suse.com/1165950
  o https://bugzilla.suse.com/1165980
  o https://bugzilla.suse.com/1165984
  o https://bugzilla.suse.com/1165985
  o https://bugzilla.suse.com/1166003
  o https://bugzilla.suse.com/1166101
  o https://bugzilla.suse.com/1166102
  o https://bugzilla.suse.com/1166103
  o https://bugzilla.suse.com/1166104
  o https://bugzilla.suse.com/1166632
  o https://bugzilla.suse.com/1166658
  o https://bugzilla.suse.com/1166730
  o https://bugzilla.suse.com/1166731
  o https://bugzilla.suse.com/1166732
  o https://bugzilla.suse.com/1166733
  o https://bugzilla.suse.com/1166734
  o https://bugzilla.suse.com/1166735

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=8/0r
-----END PGP SIGNATURE-----