{"affected":[{"ecosystem_specific":{"binaries":[{"kernel-default":"3.0.101-0.63.TDC.1","kernel-default-base":"3.0.101-0.63.TDC.1","kernel-default-devel":"3.0.101-0.63.TDC.1","kernel-source":"3.0.101-0.63.TDC.1","kernel-syms":"3.0.101-0.63.TDC.1","kernel-trace":"3.0.101-0.63.TDC.1","kernel-trace-base":"3.0.101-0.63.TDC.1","kernel-trace-devel":"3.0.101-0.63.TDC.1","kernel-xen":"3.0.101-0.63.TDC.1","kernel-xen-base":"3.0.101-0.63.TDC.1","kernel-xen-devel":"3.0.101-0.63.TDC.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","name":"kernel-default","purl":"pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.0.101-0.63.TDC.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-default":"3.0.101-0.63.TDC.1","kernel-default-base":"3.0.101-0.63.TDC.1","kernel-default-devel":"3.0.101-0.63.TDC.1","kernel-source":"3.0.101-0.63.TDC.1","kernel-syms":"3.0.101-0.63.TDC.1","kernel-trace":"3.0.101-0.63.TDC.1","kernel-trace-base":"3.0.101-0.63.TDC.1","kernel-trace-devel":"3.0.101-0.63.TDC.1","kernel-xen":"3.0.101-0.63.TDC.1","kernel-xen-base":"3.0.101-0.63.TDC.1","kernel-xen-devel":"3.0.101-0.63.TDC.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","name":"kernel-source","purl":"pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.0.101-0.63.TDC.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-default":"3.0.101-0.63.TDC.1","kernel-default-base":"3.0.101-0.63.TDC.1","kernel-default-devel":"3.0.101-0.63.TDC.1","kernel-source":"3.0.101-0.63.TDC.1","kernel-syms":"3.0.101-0.63.TDC.1","kernel-trace":"3.0.101-0.63.TDC.1","kernel-trace-base":"3.0.101-0.63.TDC.1","kernel-trace-devel":"3.0.101-0.63.TDC.1","kernel-xen":"3.0.101-0.63.TDC.1","kernel-xen-base":"3.0.101-0.63.TDC.1","kernel-xen-devel":"3.0.101-0.63.TDC.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","name":"kernel-syms","purl":"pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.0.101-0.63.TDC.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-default":"3.0.101-0.63.TDC.1","kernel-default-base":"3.0.101-0.63.TDC.1","kernel-default-devel":"3.0.101-0.63.TDC.1","kernel-source":"3.0.101-0.63.TDC.1","kernel-syms":"3.0.101-0.63.TDC.1","kernel-trace":"3.0.101-0.63.TDC.1","kernel-trace-base":"3.0.101-0.63.TDC.1","kernel-trace-devel":"3.0.101-0.63.TDC.1","kernel-xen":"3.0.101-0.63.TDC.1","kernel-xen-base":"3.0.101-0.63.TDC.1","kernel-xen-devel":"3.0.101-0.63.TDC.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","name":"kernel-trace","purl":"pkg:rpm/suse/kernel-trace&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.0.101-0.63.TDC.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-default":"3.0.101-0.63.TDC.1","kernel-default-base":"3.0.101-0.63.TDC.1","kernel-default-devel":"3.0.101-0.63.TDC.1","kernel-source":"3.0.101-0.63.TDC.1","kernel-syms":"3.0.101-0.63.TDC.1","kernel-trace":"3.0.101-0.63.TDC.1","kernel-trace-base":"3.0.101-0.63.TDC.1","kernel-trace-devel":"3.0.101-0.63.TDC.1","kernel-xen":"3.0.101-0.63.TDC.1","kernel-xen-base":"3.0.101-0.63.TDC.1","kernel-xen-devel":"3.0.101-0.63.TDC.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","name":"kernel-xen","purl":"pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.0.101-0.63.TDC.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"The SUSE Linux Enterprise 11 SP3 Teradata kernel was updated to fix the following bugs and security issues.\n\nThe following security issues have been fixed:\n\n- Update patches.fixes/udp-fix-behavior-of-wrong-checksums.patch (bsc#936831, CVE-2015-5364, CVE-2015-5366).\n- Btrfs: make xattr replace operations atomic (bnc#923908, CVE-2014-9710).\n- udp: fix behavior of wrong checksums (bsc#936831, CVE-2015-5364, CVE-2015-5366).\n- vfs: read file_handle only once in handle_to_path (bsc#915517, CVE-2015-1420).\n- x86: bpf_jit: fix compilation of large bpf programs (bnc#935705,CVE-2015-4700).\n- udf: Check length of extended attributes and allocation (bsc#936831, CVE-2015-5364, CVE-2015-5366).\n- Update patches.fixes/udf-Check-component-length-before-reading-it.patch (bsc#933904, CVE-2014-9728, CVE-2014-9730).\n- Update patches.fixes/udf-Verify-i_size-when-loading-inode.patch (bsc#933904, CVE-2014-9728, CVE-2014-9729).\n- Update patches.fixes/udf-Verify-symlink-size-before-loading-it.patch (bsc#933904, CVE-2014-9728).\n- Update patches.fixes/udf-Check-path-length-when-reading-symlink.patch (bnc#933896, CVE-2014-9731).\n- pipe: fix iov overrun for failed atomic copy (bsc#933429, CVE-2015-1805).\n- ipv6: Don't reduce hop limit for an interface (bsc#922583, CVE-2015-2922).\n- net: llc: use correct size for sysctl timeout entries (bsc#919007, CVE-2015-2041).\n- ipv4: Missing sk_nulls_node_init() in ping_unhash() (bsc#929525, CVE-2015-3636).\n- ipv6: Don't reduce hop limit for an interface (bsc#922583, CVE-2015-2922).\n- net: llc: use correct size for sysctl timeout entries (bsc#919007, CVE-2015-2041).\n- ipv4: Missing sk_nulls_node_init() in ping_unhash() (bsc#929525, CVE-2015-3636).\n\nThe following non-security issues have been fixed:\n\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- net/mlx4_core: Don't disable SRIOV if there are active VFs (bsc#927355).\n- udf: Remove repeated loads blocksize (bsc#933907).\n- Refresh patches.fixes/deal-with-deadlock-in-d_walk-fix.patch. based on 3.2 stable fix 20defcec264c ('dcache: Fix locking bugs in backported 'deal with deadlock in d_walk()''). Not harmfull for regular SLES kernels but RT or PREEMPT kernels would see disbalance.\n- sched: Fix potential near-infinite distribute_cfs_runtime() loop (bnc#930786)\n- tty: Correct tty buffer flush (bnc#929647).\n- tty: hold lock across tty buffer finding and buffer filling (bnc#929647).\n","id":"SUSE-SU-2015:1224-1","modified":"2015-07-31T10:31:13Z","published":"2015-07-31T10:31:13Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151224-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/915517"},{"type":"REPORT","url":"https://bugzilla.suse.com/919007"},{"type":"REPORT","url":"https://bugzilla.suse.com/922583"},{"type":"REPORT","url":"https://bugzilla.suse.com/923908"},{"type":"REPORT","url":"https://bugzilla.suse.com/927355"},{"type":"REPORT","url":"https://bugzilla.suse.com/929525"},{"type":"REPORT","url":"https://bugzilla.suse.com/929647"},{"type":"REPORT","url":"https://bugzilla.suse.com/930786"},{"type":"REPORT","url":"https://bugzilla.suse.com/933429"},{"type":"REPORT","url":"https://bugzilla.suse.com/933896"},{"type":"REPORT","url":"https://bugzilla.suse.com/933904"},{"type":"REPORT","url":"https://bugzilla.suse.com/933907"},{"type":"REPORT","url":"https://bugzilla.suse.com/935705"},{"type":"REPORT","url":"https://bugzilla.suse.com/936831"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2014-9710"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2014-9728"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2014-9729"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2014-9730"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2014-9731"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-1420"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-1805"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-2041"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-2922"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-3636"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-4700"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-5364"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-5366"}],"related":["CVE-2014-9710","CVE-2014-9728","CVE-2014-9729","CVE-2014-9730","CVE-2014-9731","CVE-2015-1420","CVE-2015-1805","CVE-2015-2041","CVE-2015-2922","CVE-2015-3636","CVE-2015-4700","CVE-2015-5364","CVE-2015-5366"],"summary":"Security update for the Linux Kernel","upstream":["CVE-2014-9710","CVE-2014-9728","CVE-2014-9729","CVE-2014-9730","CVE-2014-9731","CVE-2015-1420","CVE-2015-1805","CVE-2015-2041","CVE-2015-2922","CVE-2015-3636","CVE-2015-4700","CVE-2015-5364","CVE-2015-5366"]}