[SECURITY] [DLA 2051-1] intel-microcode security update

Package : intel-microcode Version : 3.20191115.2deb8u1 CVE ID : CVE-2019-11135 CVE-2019-11139 This update ships updated CPU microcode for some types of Intel CPUs. In particular it provides mitigations for the TAA TSX Asynchronous Abort vulnerability. For affected CPUs, to fully mitigate the...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3389-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-16746: There was an issue in net/wireless/nl80211.c where the kernel did not check the length of variable elements in a beacon head, leading to a buffer...

Updated microcode packages fix security vulnerabilities

NOTE! This is a refresh of the 20191112 security update we released as MGASA-2019-0334. This update provides the Intel 20191115 microcode release that adds more microcode side fixes and mitigations for the Core Gen 6 to Core gen 10, some Xeon E series, adressing at least the following security...

Kernel update: Virtuozzo ReadyKernel patch 94.0 for Virtuozzo 7.0 and Virtuozzo Infrastructure Platform 3.0

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the kernels 3.10.0-957.12.2.vz7.96.21 Virtuozzo 7.0.11 and Virtuozzo Infrastructure Platform 3.0, 3.10.0-1062.4.2.vz7.116.6 Virtuozzo 7.0.12, 3.10.0-1062.4.2.vz7.116.7 Virtuozzo 7.0.12 HF1...

SUSE-SU-2019:3371-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could occur when the station attempts a...

RHEL 6 : kernel (RHSA-2019:4256)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4256 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Kernel: KVM: OOB memory access via mmio ring...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:3317-1)

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver bnc1158445. CVE-2019-19543: The...

SUSE-SU-2019:3317-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-19531: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver bnc1158445. - CVE-2019-19543:...

[SECURITY] Fedora 31 Update: kernel-5.3.16-300.fc31

The kernel meta package...

Updated kernel packages fix security vulnerability

This update provides an update to 5.4 series kernels, currently based on upstream 5.4.2, adding support for new hardware and features, and fixing at least the following security issue: KVM: x86: fix out-of-bounds write in KVMGETEMULATEDCPUID CVE-2019-19332 WireGuard has been updated to...

MGASA-2019-0388 Updated kernel packages fix security vulnerability

This update provides an update to 5.4 series kernels, currently based on upstream 5.4.2, adding support for new hardware and features, and fixing at least the following security issue: KVM: x86: fix out-of-bounds write in KVMGETEMULATEDCPUID CVE-2019-19332 WireGuard has been updated to...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3232-1)

This update for the Linux Kernel 4.4.121-92101 fixes several issues. The following security issues were fixed : CVE-2018-20856: Fixed a use-after-free in blkdrainqueue due to an improper error handling bsc1156331. CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3228-1)

This update for the Linux Kernel 4.4.180-94100 fixes several issues. The following security issues were fixed : CVE-2018-20856: Fixed a use-after-free in blkdrainqueue due to an improper error handling bsc1156331. CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

SUSE SLES12 Security Update : kernel (SUSE-SU-2019:3261-1)

This update for the Linux Kernel 4.4.121-92114 fixes several issues. The following security issues were fixed : CVE-2018-20856: Fixed a use-after-free in blkdrainqueue due to an improper error handling bsc1156331. CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

SUSE-SU-2019:3261-1 Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92117 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in blkdrainqueue due to an improper error handling bsc1156331. - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

SUSE-SU-2019:3260-1 Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92109 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in blkdrainqueue due to an improper error handling bsc1156331. - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

SUSE-SU-2019:3252-1 Security update for the Linux Kernel (Live Patch 1 for SLE 12 SP4)

This update for the Linux Kernel 4.12.14-953 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hciuartregisterdev fails in hciuartsetproto bsc1156334. - CVE-2018-20856: Fixed a use-after-free in block/blk-core.c due to improper error...

SUSE-SU-2019:3249-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-1974 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship bsc115632...

SUSE-SU-2019:3247-1 Security update for the Linux Kernel (Live Patch 9 for SLE 15)

This update for the Linux Kernel 4.12.14-15014 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hciuartregisterdev fails in hciuartsetproto bsc1156334. - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper...

Kernel update: Virtuozzo ReadyKernel patch 93.0 for Virtuozzo 7.0

The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to the kernel 3.10.0-1062.4.2.vz7.116.6 Virtuozzo 7.0.12. Vulnerability id: PSBM-100158 Memory leak in kvm: kernel structures for a VM could remain after the VM was stopped...