{"id":"CVE-2015-0777","aliases":["BELL-CVE-2015-0777","EUVD-2015-0790","GHSA-c4qc-mjg8-qg72","SUSE-RU-2015:0621-1","SUSE-SU-2015:0581-1","SUSE-SU-2015:0658-1","SUSE-SU-2015:0736-1","SUSE-SU-2015:1174-1","SUSE-SU-2015:1376-1","SUSE-SU-2015:1478-1","SUSE-SU-2015:1592-1","SUSE-SU-2015:1611-1","SUSE-SU-2015:1678-1"],"status":"published","title":"drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for...","description":"drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00413,"percentile":0.3587,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2014-09-24T00:35:24Z","modified":"2026-06-17T00:20:53Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 12","package":"kgraft-patch-SLE12_Update_4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"kernel-obs-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.39-47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP2-LTSS","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.7.37.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-rt_trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-source-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 11 SP3","package":"kernel-syms-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101.rt130-0.33.40.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-bigsmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-0.47.67.2"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"kernel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-default","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-pae","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-ppc64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-syms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-trace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.101-65.1"}]}],"bundled":15}],"products":[{"vendor":"xen","product":"xen"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://bugzilla.novell.com/show_bug.cgi?id=917830","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00018.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.securityfocus.com/bid/73921","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0777"},{"url":"https://github.com/advisories/GHSA-c4qc-mjg8-qg72"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2015-0777","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement//suse-ru-20150621-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/599263","tags":["report"]},{"url":"https://bugzilla.suse.com/708296","tags":["report"]},{"url":"https://bugzilla.suse.com/733022","tags":["report"]},{"url":"https://bugzilla.suse.com/745640","tags":["report"]},{"url":"https://bugzilla.suse.com/755743","tags":["report"]},{"url":"https://bugzilla.suse.com/760407","tags":["report"]},{"url":"https://bugzilla.suse.com/763463","tags":["report"]},{"url":"https://bugzilla.suse.com/763968","tags":["report"]},{"url":"https://bugzilla.suse.com/765523","tags":["report"]},{"url":"https://bugzilla.suse.com/767610","tags":["report"]},{"url":"https://bugzilla.suse.com/769035","tags":["report"]},{"url":"https://bugzilla.suse.com/769644","tags":["report"]},{"url":"https://bugzilla.suse.com/770541","tags":["report"]},{"url":"https://bugzilla.suse.com/771619","tags":["report"]},{"url":"https://bugzilla.suse.com/773006","tags":["report"]},{"url":"https://bugzilla.suse.com/773255","tags":["report"]},{"url":"https://bugzilla.suse.com/773837","tags":["report"]},{"url":"https://bugzilla.suse.com/774818","tags":["report"]},{"url":"https://bugzilla.suse.com/779488","tags":["report"]},{"url":"https://bugzilla.suse.com/783475","tags":["report"]},{"url":"https://bugzilla.suse.com/785901","tags":["report"]},{"url":"https://bugzilla.suse.com/786450","tags":["report"]},{"url":"https://bugzilla.suse.com/787843","tags":["report"]},{"url":"https://bugzilla.suse.com/789010","tags":["report"]},{"url":"https://bugzilla.suse.com/789359","tags":["report"]},{"url":"https://bugzilla.suse.com/792271","tags":["report"]},{"url":"https://bugzilla.suse.com/793727","tags":["report"]},{"url":"https://bugzilla.suse.com/794824","tags":["report"]},{"url":"https://bugzilla.suse.com/797090","tags":["report"]},{"url":"https://bugzilla.suse.com/797526","tags":["report"]},{"url":"https://bugzilla.suse.com/797727","tags":["report"]},{"url":"https://bugzilla.suse.com/797909","tags":["report"]},{"url":"https://bugzilla.suse.com/798050","tags":["report"]},{"url":"https://bugzilla.suse.com/800255","tags":["report"]},{"url":"https://bugzilla.suse.com/800875","tags":["report"]},{"url":"https://bugzilla.suse.com/801341","tags":["report"]},{"url":"https://bugzilla.suse.com/801427","tags":["report"]},{"url":"https://bugzilla.suse.com/803320","tags":["report"]},{"url":"https://bugzilla.suse.com/804482","tags":["report"]},{"url":"https://bugzilla.suse.com/804609","tags":["report"]},{"url":"https://bugzilla.suse.com/804950","tags":["report"]},{"url":"https://bugzilla.suse.com/805114","tags":["report"]},{"url":"https://bugzilla.suse.com/805371","tags":["report"]},{"url":"https://bugzilla.suse.com/805740","tags":["report"]},{"url":"https://bugzilla.suse.com/805804","tags":["report"]},{"url":"https://bugzilla.suse.com/806396","tags":["report"]},{"url":"https://bugzilla.suse.com/806976","tags":["report"]},{"url":"https://bugzilla.suse.com/806988","tags":["report"]},{"url":"https://bugzilla.suse.com/806990","tags":["report"]},{"url":"https://bugzilla.suse.com/807434","tags":["report"]},{"url":"https://bugzilla.suse.com/807471","tags":["report"]},{"url":"https://bugzilla.suse.com/807502","tags":["report"]},{"url":"https://bugzilla.suse.com/808015","tags":["report"]},{"url":"https://bugzilla.suse.com/808079","tags":["report"]},{"url":"https://bugzilla.suse.com/808136","tags":["report"]},{"url":"https://bugzilla.suse.com/808837","tags":["report"]},{"url":"https://bugzilla.suse.com/808855","tags":["report"]},{"url":"https://bugzilla.suse.com/808940","tags":["report"]},{"url":"https://bugzilla.suse.com/809122","tags":["report"]},{"url":"https://bugzilla.suse.com/809130","tags":["report"]},{"url":"https://bugzilla.suse.com/809463","tags":["report"]},{"url":"https://bugzilla.suse.com/809895","tags":["report"]},{"url":"https://bugzilla.suse.com/809975","tags":["report"]},{"url":"https://bugzilla.suse.com/810323","tags":["report"]},{"url":"https://bugzilla.suse.com/810722","tags":["report"]},{"url":"https://bugzilla.suse.com/812274","tags":["report"]},{"url":"https://bugzilla.suse.com/812281","tags":["report"]},{"url":"https://bugzilla.suse.com/812332","tags":["report"]},{"url":"https://bugzilla.suse.com/812526","tags":["report"]},{"url":"https://bugzilla.suse.com/812974","tags":["report"]},{"url":"https://bugzilla.suse.com/813245","tags":["report"]},{"url":"https://bugzilla.suse.com/813604","tags":["report"]},{"url":"https://bugzilla.suse.com/813733","tags":["report"]},{"url":"https://bugzilla.suse.com/813922","tags":["report"]},{"url":"https://bugzilla.suse.com/814336","tags":["report"]},{"url":"https://bugzilla.suse.com/815256","tags":["report"]},{"url":"https://bugzilla.suse.com/815320","tags":["report"]},{"url":"https://bugzilla.suse.com/815356","tags":["report"]},{"url":"https://bugzilla.suse.com/816043","tags":["report"]},{"url":"https://bugzilla.suse.com/816099","tags":["report"]},{"url":"https://bugzilla.suse.com/816451","tags":["report"]},{"url":"https://bugzilla.suse.com/816708","tags":["report"]},{"url":"https://bugzilla.suse.com/817035","tags":["report"]},{"url":"https://bugzilla.suse.com/817377","tags":["report"]},{"url":"https://bugzilla.suse.com/818047","tags":["report"]},{"url":"https://bugzilla.suse.com/818064","tags":["report"]},{"url":"https://bugzilla.suse.com/818371","tags":["report"]},{"url":"https://bugzilla.suse.com/818465","tags":["report"]},{"url":"https://bugzilla.suse.com/818545","tags":["report"]},{"url":"https://bugzilla.suse.com/819018","tags":["report"]},{"url":"https://bugzilla.suse.com/819195","tags":["report"]},{"url":"https://bugzilla.suse.com/819363","tags":["report"]},{"url":"https://bugzilla.suse.com/819523","tags":["report"]},{"url":"https://bugzilla.suse.com/819610","tags":["report"]},{"url":"https://bugzilla.suse.com/819655","tags":["report"]},{"url":"https://bugzilla.suse.com/819979","tags":["report"]},{"url":"https://bugzilla.suse.com/820102","tags":["report"]},{"url":"https://bugzilla.suse.com/820172","tags":["report"]},{"url":"https://bugzilla.suse.com/820338","tags":["report"]},{"url":"https://bugzilla.suse.com/820434","tags":["report"]},{"url":"https://bugzilla.suse.com/820848","tags":["report"]},{"url":"https://bugzilla.suse.com/821052","tags":["report"]},{"url":"https://bugzilla.suse.com/821070","tags":["report"]},{"url":"https://bugzilla.suse.com/821235","tags":["report"]},{"url":"https://bugzilla.suse.com/821259","tags":["report"]},{"url":"https://bugzilla.suse.com/821465","tags":["report"]},{"url":"https://bugzilla.suse.com/821619","tags":["report"]},{"url":"https://bugzilla.suse.com/821799","tags":["report"]},{"url":"https://bugzilla.suse.com/821859","tags":["report"]},{"url":"https://bugzilla.suse.com/821930","tags":["report"]},{"url":"https://bugzilla.suse.com/821948","tags":["report"]},{"url":"https://bugzilla.suse.com/821980","tags":["report"]},{"url":"https://bugzilla.suse.com/822052","tags":["report"]},{"url":"https://bugzilla.suse.com/822066","tags":["report"]},{"url":"https://bugzilla.suse.com/822077","tags":["report"]},{"url":"https://bugzilla.suse.com/822080","tags":["report"]},{"url":"https://bugzilla.suse.com/822164","tags":["report"]},{"url":"https://bugzilla.suse.com/822225","tags":["report"]},{"url":"https://bugzilla.suse.com/822340","tags":["report"]},{"url":"https://bugzilla.suse.com/822431","tags":["report"]},{"url":"https://bugzilla.suse.com/822433","tags":["report"]},{"url":"https://bugzilla.suse.com/822575","tags":["report"]},{"url":"https://bugzilla.suse.com/822579","tags":["report"]},{"url":"https://bugzilla.suse.com/822722","tags":["report"]},{"url":"https://bugzilla.suse.com/822825","tags":["report"]},{"url":"https://bugzilla.suse.com/822878","tags":["report"]},{"url":"https://bugzilla.suse.com/823082","tags":["report"]},{"url":"https://bugzilla.suse.com/823223","tags":["report"]},{"url":"https://bugzilla.suse.com/823342","tags":["report"]},{"url":"https://bugzilla.suse.com/823386","tags":["report"]},{"url":"https://bugzilla.suse.com/823517","tags":["report"]},{"url":"https://bugzilla.suse.com/823597","tags":["report"]},{"url":"https://bugzilla.suse.com/823618","tags":["report"]},{"url":"https://bugzilla.suse.com/823795","tags":["report"]},{"url":"https://bugzilla.suse.com/824159","tags":["report"]},{"url":"https://bugzilla.suse.com/824256","tags":["report"]},{"url":"https://bugzilla.suse.com/824295","tags":["report"]},{"url":"https://bugzilla.suse.com/824568","tags":["report"]},{"url":"https://bugzilla.suse.com/824915","tags":["report"]},{"url":"https://bugzilla.suse.com/825006","tags":["report"]},{"url":"https://bugzilla.suse.com/825037","tags":["report"]},{"url":"https://bugzilla.suse.com/825048","tags":["report"]},{"url":"https://bugzilla.suse.com/825142","tags":["report"]},{"url":"https://bugzilla.suse.com/825227","tags":["report"]},{"url":"https://bugzilla.suse.com/825291","tags":["report"]},{"url":"https://bugzilla.suse.com/825591","tags":["report"]},{"url":"https://bugzilla.suse.com/825657","tags":["report"]},{"url":"https://bugzilla.suse.com/825696","tags":["report"]},{"url":"https://bugzilla.suse.com/825887","tags":["report"]},{"url":"https://bugzilla.suse.com/825896","tags":["report"]},{"url":"https://bugzilla.suse.com/826102","tags":["report"]},{"url":"https://bugzilla.suse.com/826186","tags":["report"]},{"url":"https://bugzilla.suse.com/826350","tags":["report"]},{"url":"https://bugzilla.suse.com/826486","tags":["report"]},{"url":"https://bugzilla.suse.com/826602","tags":["report"]},{"url":"https://bugzilla.suse.com/826756","tags":["report"]},{"url":"https://bugzilla.suse.com/826960","tags":["report"]},{"url":"https://bugzilla.suse.com/826978","tags":["report"]},{"url":"https://bugzilla.suse.com/827246","tags":["report"]},{"url":"https://bugzilla.suse.com/827271","tags":["report"]},{"url":"https://bugzilla.suse.com/827372","tags":["report"]},{"url":"https://bugzilla.suse.com/827376","tags":["report"]},{"url":"https://bugzilla.suse.com/827378","tags":["report"]},{"url":"https://bugzilla.suse.com/827416","tags":["report"]},{"url":"https://bugzilla.suse.com/827527","tags":["report"]},{"url":"https://bugzilla.suse.com/827670","tags":["report"]},{"url":"https://bugzilla.suse.com/827749","tags":["report"]},{"url":"https://bugzilla.suse.com/827750","tags":["report"]},{"url":"https://bugzilla.suse.com/827767","tags":["report"]},{"url":"https://bugzilla.suse.com/827930","tags":["report"]},{"url":"https://bugzilla.suse.com/827966","tags":["report"]},{"url":"https://bugzilla.suse.com/828087","tags":["report"]},{"url":"https://bugzilla.suse.com/828119","tags":["report"]},{"url":"https://bugzilla.suse.com/828192","tags":["report"]},{"url":"https://bugzilla.suse.com/828236","tags":["report"]},{"url":"https://bugzilla.suse.com/828265","tags":["report"]},{"url":"https://bugzilla.suse.com/828574","tags":["report"]},{"url":"https://bugzilla.suse.com/828714","tags":["report"]},{"url":"https://bugzilla.suse.com/828886","tags":["report"]},{"url":"https://bugzilla.suse.com/828894","tags":["report"]},{"url":"https://bugzilla.suse.com/828914","tags":["report"]},{"url":"https://bugzilla.suse.com/829001","tags":["report"]},{"url":"https://bugzilla.suse.com/829082","tags":["report"]},{"url":"https://bugzilla.suse.com/829110","tags":["report"]},{"url":"https://bugzilla.suse.com/829357","tags":["report"]},{"url":"https://bugzilla.suse.com/829539","tags":["report"]},{"url":"https://bugzilla.suse.com/829622","tags":["report"]},{"url":"https://bugzilla.suse.com/829682","tags":["report"]},{"url":"https://bugzilla.suse.com/830346","tags":["report"]},{"url":"https://bugzilla.suse.com/830478","tags":["report"]},{"url":"https://bugzilla.suse.com/830766","tags":["report"]},{"url":"https://bugzilla.suse.com/830822","tags":["report"]},{"url":"https://bugzilla.suse.com/830901","tags":["report"]},{"url":"https://bugzilla.suse.com/830985","tags":["report"]},{"url":"https://bugzilla.suse.com/831029","tags":["report"]},{"url":"https://bugzilla.suse.com/831055","tags":["report"]},{"url":"https://bugzilla.suse.com/831058","tags":["report"]},{"url":"https://bugzilla.suse.com/831103","tags":["report"]},{"url":"https://bugzilla.suse.com/831143","tags":["report"]},{"url":"https://bugzilla.suse.com/831380","tags":["report"]},{"url":"https://bugzilla.suse.com/831410","tags":["report"]},{"url":"https://bugzilla.suse.com/831422","tags":["report"]},{"url":"https://bugzilla.suse.com/831424","tags":["report"]},{"url":"https://bugzilla.suse.com/831438","tags":["report"]},{"url":"https://bugzilla.suse.com/831623","tags":["report"]},{"url":"https://bugzilla.suse.com/831949","tags":["report"]},{"url":"https://bugzilla.suse.com/832292","tags":["report"]},{"url":"https://bugzilla.suse.com/832309","tags":["report"]},{"url":"https://bugzilla.suse.com/832318","tags":["report"]},{"url":"https://bugzilla.suse.com/832710","tags":["report"]},{"url":"https://bugzilla.suse.com/833073","tags":["report"]},{"url":"https://bugzilla.suse.com/833097","tags":["report"]},{"url":"https://bugzilla.suse.com/833148","tags":["report"]},{"url":"https://bugzilla.suse.com/833151","tags":["report"]},{"url":"https://bugzilla.suse.com/833321","tags":["report"]},{"url":"https://bugzilla.suse.com/833588","tags":["report"]},{"url":"https://bugzilla.suse.com/833635","tags":["report"]},{"url":"https://bugzilla.suse.com/833820","tags":["report"]},{"url":"https://bugzilla.suse.com/833858","tags":["report"]},{"url":"https://bugzilla.suse.com/833968","tags":["report"]},{"url":"https://bugzilla.suse.com/834116","tags":["report"]},{"url":"https://bugzilla.suse.com/834204","tags":["report"]},{"url":"https://bugzilla.suse.com/834473","tags":["report"]},{"url":"https://bugzilla.suse.com/834600","tags":["report"]},{"url":"https://bugzilla.suse.com/834647","tags":["report"]},{"url":"https://bugzilla.suse.com/834708","tags":["report"]},{"url":"https://bugzilla.suse.com/834742","tags":["report"]},{"url":"https://bugzilla.suse.com/834808","tags":["report"]},{"url":"https://bugzilla.suse.com/834905","tags":["report"]},{"url":"https://bugzilla.suse.com/835074","tags":["report"]},{"url":"https://bugzilla.suse.com/835094","tags":["report"]},{"url":"https://bugzilla.suse.com/835175","tags":["report"]},{"url":"https://bugzilla.suse.com/835186","tags":["report"]},{"url":"https://bugzilla.suse.com/835189","tags":["report"]},{"url":"https://bugzilla.suse.com/835684","tags":["report"]},{"url":"https://bugzilla.suse.com/835839","tags":["report"]},{"url":"https://bugzilla.suse.com/835930","tags":["report"]},{"url":"https://bugzilla.suse.com/836218","tags":["report"]},{"url":"https://bugzilla.suse.com/836347","tags":["report"]},{"url":"https://bugzilla.suse.com/836718","tags":["report"]},{"url":"https://bugzilla.suse.com/836801","tags":["report"]},{"url":"https://bugzilla.suse.com/837206","tags":["report"]},{"url":"https://bugzilla.suse.com/837372","tags":["report"]},{"url":"https://bugzilla.suse.com/837563","tags":["report"]},{"url":"https://bugzilla.suse.com/837596","tags":["report"]},{"url":"https://bugzilla.suse.com/837739","tags":["report"]},{"url":"https://bugzilla.suse.com/837741","tags":["report"]},{"url":"https://bugzilla.suse.com/837803","tags":["report"]},{"url":"https://bugzilla.suse.com/838346","tags":["report"]},{"url":"https://bugzilla.suse.com/838448","tags":["report"]},{"url":"https://bugzilla.suse.com/838623","tags":["report"]},{"url":"https://bugzilla.suse.com/839407","tags":["report"]},{"url":"https://bugzilla.suse.com/839973","tags":["report"]},{"url":"https://bugzilla.suse.com/840116","tags":["report"]},{"url":"https://bugzilla.suse.com/840226","tags":["report"]},{"url":"https://bugzilla.suse.com/840524","tags":["report"]},{"url":"https://bugzilla.suse.com/840830","tags":["report"]},{"url":"https://bugzilla.suse.com/841050","tags":["report"]},{"url":"https://bugzilla.suse.com/841094","tags":["report"]},{"url":"https://bugzilla.suse.com/841402","tags":["report"]},{"url":"https://bugzilla.suse.com/841445","tags":["report"]},{"url":"https://bugzilla.suse.com/841498","tags":["report"]},{"url":"https://bugzilla.suse.com/841654","tags":["report"]},{"url":"https://bugzilla.suse.com/841656","tags":["report"]},{"url":"https://bugzilla.suse.com/842057","tags":["report"]},{"url":"https://bugzilla.suse.com/842063","tags":["report"]},{"url":"https://bugzilla.suse.com/842239","tags":["report"]},{"url":"https://bugzilla.suse.com/842604","tags":["report"]},{"url":"https://bugzilla.suse.com/842820","tags":["report"]},{"url":"https://bugzilla.suse.com/843185","tags":["report"]},{"url":"https://bugzilla.suse.com/843419","tags":["report"]},{"url":"https://bugzilla.suse.com/843429","tags":["report"]},{"url":"https://bugzilla.suse.com/843445","tags":["report"]},{"url":"https://bugzilla.suse.com/843642","tags":["report"]},{"url":"https://bugzilla.suse.com/843645","tags":["report"]},{"url":"https://bugzilla.suse.com/843654","tags":["report"]},{"url":"https://bugzilla.suse.com/843732","tags":["report"]},{"url":"https://bugzilla.suse.com/843753","tags":["report"]},{"url":"https://bugzilla.suse.com/843950","tags":["report"]},{"url":"https://bugzilla.suse.com/844513","tags":["report"]},{"url":"https://bugzilla.suse.com/845352","tags":["report"]},{"url":"https://bugzilla.suse.com/845378","tags":["report"]},{"url":"https://bugzilla.suse.com/845621","tags":["report"]},{"url":"https://bugzilla.suse.com/845729","tags":["report"]},{"url":"https://bugzilla.suse.com/846036","tags":["report"]},{"url":"https://bugzilla.suse.com/846298","tags":["report"]},{"url":"https://bugzilla.suse.com/846404","tags":["report"]},{"url":"https://bugzilla.suse.com/846654","tags":["report"]},{"url":"https://bugzilla.suse.com/846656","tags":["report"]},{"url":"https://bugzilla.suse.com/846690","tags":["report"]},{"url":"https://bugzilla.suse.com/846790","tags":["report"]},{"url":"https://bugzilla.suse.com/846984","tags":["report"]},{"url":"https://bugzilla.suse.com/846989","tags":["report"]},{"url":"https://bugzilla.suse.com/847261","tags":["report"]},{"url":"https://bugzilla.suse.com/847319","tags":["report"]},{"url":"https://bugzilla.suse.com/847652","tags":["report"]},{"url":"https://bugzilla.suse.com/847660","tags":["report"]},{"url":"https://bugzilla.suse.com/847672","tags":["report"]},{"url":"https://bugzilla.suse.com/847721","tags":["report"]},{"url":"https://bugzilla.suse.com/847842","tags":["report"]},{"url":"https://bugzilla.suse.com/848055","tags":["report"]},{"url":"https://bugzilla.suse.com/848317","tags":["report"]},{"url":"https://bugzilla.suse.com/848321","tags":["report"]},{"url":"https://bugzilla.suse.com/848335","tags":["report"]},{"url":"https://bugzilla.suse.com/848336","tags":["report"]},{"url":"https://bugzilla.suse.com/848544","tags":["report"]},{"url":"https://bugzilla.suse.com/848652","tags":["report"]},{"url":"https://bugzilla.suse.com/848864","tags":["report"]},{"url":"https://bugzilla.suse.com/849021","tags":["report"]},{"url":"https://bugzilla.suse.com/849029","tags":["report"]},{"url":"https://bugzilla.suse.com/849034","tags":["report"]},{"url":"https://bugzilla.suse.com/849123","tags":["report"]},{"url":"https://bugzilla.suse.com/849256","tags":["report"]},{"url":"https://bugzilla.suse.com/849362","tags":["report"]},{"url":"https://bugzilla.suse.com/849364","tags":["report"]},{"url":"https://bugzilla.suse.com/849404","tags":["report"]},{"url":"https://bugzilla.suse.com/849675","tags":["report"]},{"url":"https://bugzilla.suse.com/849809","tags":["report"]},{"url":"https://bugzilla.suse.com/849855","tags":["report"]},{"url":"https://bugzilla.suse.com/849950","tags":["report"]},{"url":"https://bugzilla.suse.com/850072","tags":["report"]},{"url":"https://bugzilla.suse.com/850103","tags":["report"]},{"url":"https://bugzilla.suse.com/850324","tags":["report"]},{"url":"https://bugzilla.suse.com/850493","tags":["report"]},{"url":"https://bugzilla.suse.com/850640","tags":["report"]},{"url":"https://bugzilla.suse.com/850915","tags":["report"]},{"url":"https://bugzilla.suse.com/851066","tags":["report"]},{"url":"https://bugzilla.suse.com/851101","tags":["report"]},{"url":"https://bugzilla.suse.com/851290","tags":["report"]},{"url":"https://bugzilla.suse.com/851314","tags":["report"]},{"url":"https://bugzilla.suse.com/851426","tags":["report"]},{"url":"https://bugzilla.suse.com/851603","tags":["report"]},{"url":"https://bugzilla.suse.com/851879","tags":["report"]},{"url":"https://bugzilla.suse.com/852153","tags":["report"]},{"url":"https://bugzilla.suse.com/852373","tags":["report"]},{"url":"https://bugzilla.suse.com/852488","tags":["report"]},{"url":"https://bugzilla.suse.com/852553","tags":["report"]},{"url":"https://bugzilla.suse.com/852558","tags":["report"]},{"url":"https://bugzilla.suse.com/852559","tags":["report"]},{"url":"https://bugzilla.suse.com/852624","tags":["report"]},{"url":"https://bugzilla.suse.com/852652","tags":["report"]},{"url":"https://bugzilla.suse.com/852761","tags":["report"]},{"url":"https://bugzilla.suse.com/852967","tags":["report"]},{"url":"https://bugzilla.suse.com/853040","tags":["report"]},{"url":"https://bugzilla.suse.com/853050","tags":["report"]},{"url":"https://bugzilla.suse.com/853051","tags":["report"]},{"url":"https://bugzilla.suse.com/853052","tags":["report"]},{"url":"https://bugzilla.suse.com/853053","tags":["report"]},{"url":"https://bugzilla.suse.com/853162","tags":["report"]},{"url":"https://bugzilla.suse.com/853166","tags":["report"]},{"url":"https://bugzilla.suse.com/853428","tags":["report"]},{"url":"https://bugzilla.suse.com/853455","tags":["report"]},{"url":"https://bugzilla.suse.com/853465","tags":["report"]},{"url":"https://bugzilla.suse.com/854025","tags":["report"]},{"url":"https://bugzilla.suse.com/854445","tags":["report"]},{"url":"https://bugzilla.suse.com/854516","tags":["report"]},{"url":"https://bugzilla.suse.com/854546","tags":["report"]},{"url":"https://bugzilla.suse.com/854634","tags":["report"]},{"url":"https://bugzilla.suse.com/854722","tags":["report"]},{"url":"https://bugzilla.suse.com/855126","tags":["report"]},{"url":"https://bugzilla.suse.com/855657","tags":["report"]},{"url":"https://bugzilla.suse.com/855825","tags":["report"]},{"url":"https://bugzilla.suse.com/856307","tags":["report"]},{"url":"https://bugzilla.suse.com/856481","tags":["report"]},{"url":"https://bugzilla.suse.com/856760","tags":["report"]},{"url":"https://bugzilla.suse.com/856848","tags":["report"]},{"url":"https://bugzilla.suse.com/857358","tags":["report"]},{"url":"https://bugzilla.suse.com/857643","tags":["report"]},{"url":"https://bugzilla.suse.com/857926","tags":["report"]},{"url":"https://bugzilla.suse.com/858534","tags":["report"]},{"url":"https://bugzilla.suse.com/858604","tags":["report"]},{"url":"https://bugzilla.suse.com/858831","tags":["report"]},{"url":"https://bugzilla.suse.com/858869","tags":["report"]},{"url":"https://bugzilla.suse.com/858870","tags":["report"]},{"url":"https://bugzilla.suse.com/858872","tags":["report"]},{"url":"https://bugzilla.suse.com/859225","tags":["report"]},{"url":"https://bugzilla.suse.com/859342","tags":["report"]},{"url":"https://bugzilla.suse.com/859840","tags":["report"]},{"url":"https://bugzilla.suse.com/860441","tags":["report"]},{"url":"https://bugzilla.suse.com/860593","tags":["report"]},{"url":"https://bugzilla.suse.com/861093","tags":["report"]},{"url":"https://bugzilla.suse.com/861636","tags":["report"]},{"url":"https://bugzilla.suse.com/861980","tags":["report"]},{"url":"https://bugzilla.suse.com/862429","tags":["report"]},{"url":"https://bugzilla.suse.com/862796","tags":["report"]},{"url":"https://bugzilla.suse.com/862934","tags":["report"]},{"url":"https://bugzilla.suse.com/862957","tags":["report"]},{"url":"https://bugzilla.suse.com/863178","tags":["report"]},{"url":"https://bugzilla.suse.com/863300","tags":["report"]},{"url":"https://bugzilla.suse.com/863335","tags":["report"]},{"url":"https://bugzilla.suse.com/863410","tags":["report"]},{"url":"https://bugzilla.suse.com/863526","tags":["report"]},{"url":"https://bugzilla.suse.com/863586","tags":["report"]},{"url":"https://bugzilla.suse.com/863873","tags":["report"]},{"url":"https://bugzilla.suse.com/864025","tags":["report"]},{"url":"https://bugzilla.suse.com/864058","tags":["report"]},{"url":"https://bugzilla.suse.com/864401","tags":["report"]},{"url":"https://bugzilla.suse.com/864404","tags":["report"]},{"url":"https://bugzilla.suse.com/864409","tags":["report"]},{"url":"https://bugzilla.suse.com/864411","tags":["report"]},{"url":"https://bugzilla.suse.com/864464","tags":["report"]},{"url":"https://bugzilla.suse.com/864833","tags":["report"]},{"url":"https://bugzilla.suse.com/864880","tags":["report"]},{"url":"https://bugzilla.suse.com/865310","tags":["report"]},{"url":"https://bugzilla.suse.com/865330","tags":["report"]},{"url":"https://bugzilla.suse.com/865342","tags":["report"]},{"url":"https://bugzilla.suse.com/865419","tags":["report"]},{"url":"https://bugzilla.suse.com/865783","tags":["report"]},{"url":"https://bugzilla.suse.com/865882","tags":["report"]},{"url":"https://bugzilla.suse.com/866081","tags":["report"]},{"url":"https://bugzilla.suse.com/866102","tags":["report"]},{"url":"https://bugzilla.suse.com/866130","tags":["report"]},{"url":"https://bugzilla.suse.com/866253","tags":["report"]},{"url":"https://bugzilla.suse.com/866428","tags":["report"]},{"url":"https://bugzilla.suse.com/866615","tags":["report"]},{"url":"https://bugzilla.suse.com/866800","tags":["report"]},{"url":"https://bugzilla.suse.com/866864","tags":["report"]},{"url":"https://bugzilla.suse.com/866911","tags":["report"]},{"url":"https://bugzilla.suse.com/867362","tags":["report"]},{"url":"https://bugzilla.suse.com/867517","tags":["report"]},{"url":"https://bugzilla.suse.com/867531","tags":["report"]},{"url":"https://bugzilla.suse.com/867723","tags":["report"]},{"url":"https://bugzilla.suse.com/867953","tags":["report"]},{"url":"https://bugzilla.suse.com/868049","tags":["report"]},{"url":"https://bugzilla.suse.com/868488","tags":["report"]},{"url":"https://bugzilla.suse.com/868528","tags":["report"]},{"url":"https://bugzilla.suse.com/868653","tags":["report"]},{"url":"https://bugzilla.suse.com/868748","tags":["report"]},{"url":"https://bugzilla.suse.com/869033","tags":["report"]},{"url":"https://bugzilla.suse.com/869055","tags":["report"]},{"url":"https://bugzilla.suse.com/869414","tags":["report"]},{"url":"https://bugzilla.suse.com/869563","tags":["report"]},{"url":"https://bugzilla.suse.com/869934","tags":["report"]},{"url":"https://bugzilla.suse.com/870161","tags":["report"]},{"url":"https://bugzilla.suse.com/870173","tags":["report"]},{"url":"https://bugzilla.suse.com/870335","tags":["report"]},{"url":"https://bugzilla.suse.com/870450","tags":["report"]},{"url":"https://bugzilla.suse.com/870496","tags":["report"]},{"url":"https://bugzilla.suse.com/870498","tags":["report"]},{"url":"https://bugzilla.suse.com/870576","tags":["report"]},{"url":"https://bugzilla.suse.com/870591","tags":["report"]},{"url":"https://bugzilla.suse.com/870618","tags":["report"]},{"url":"https://bugzilla.suse.com/870801","tags":["report"]},{"url":"https://bugzilla.suse.com/870877","tags":["report"]},{"url":"https://bugzilla.suse.com/870958","tags":["report"]},{"url":"https://bugzilla.suse.com/871134","tags":["report"]},{"url":"https://bugzilla.suse.com/871561","tags":["report"]},{"url":"https://bugzilla.suse.com/871634","tags":["report"]},{"url":"https://bugzilla.suse.com/871676","tags":["report"]},{"url":"https://bugzilla.suse.com/871728","tags":["report"]},{"url":"https://bugzilla.suse.com/871797","tags":["report"]},{"url":"https://bugzilla.suse.com/871854","tags":["report"]},{"url":"https://bugzilla.suse.com/871861","tags":["report"]},{"url":"https://bugzilla.suse.com/871899","tags":["report"]},{"url":"https://bugzilla.suse.com/872188","tags":["report"]},{"url":"https://bugzilla.suse.com/872540","tags":["report"]},{"url":"https://bugzilla.suse.com/872634","tags":["report"]},{"url":"https://bugzilla.suse.com/873061","tags":["report"]},{"url":"https://bugzilla.suse.com/873228","tags":["report"]},{"url":"https://bugzilla.suse.com/873374","tags":["report"]},{"url":"https://bugzilla.suse.com/873463","tags":["report"]},{"url":"https://bugzilla.suse.com/874108","tags":["report"]},{"url":"https://bugzilla.suse.com/874145","tags":["report"]},{"url":"https://bugzilla.suse.com/874440","tags":["report"]},{"url":"https://bugzilla.suse.com/874577","tags":["report"]},{"url":"https://bugzilla.suse.com/875051","tags":["report"]},{"url":"https://bugzilla.suse.com/875386","tags":["report"]},{"url":"https://bugzilla.suse.com/875690","tags":["report"]},{"url":"https://bugzilla.suse.com/875798","tags":["report"]},{"url":"https://bugzilla.suse.com/876017","tags":["report"]},{"url":"https://bugzilla.suse.com/876055","tags":["report"]},{"url":"https://bugzilla.suse.com/876086","tags":["report"]},{"url":"https://bugzilla.suse.com/876102","tags":["report"]},{"url":"https://bugzilla.suse.com/876114","tags":["report"]},{"url":"https://bugzilla.suse.com/876176","tags":["report"]},{"url":"https://bugzilla.suse.com/876463","tags":["report"]},{"url":"https://bugzilla.suse.com/876590","tags":["report"]},{"url":"https://bugzilla.suse.com/876594","tags":["report"]},{"url":"https://bugzilla.suse.com/876633","tags":["report"]},{"url":"https://bugzilla.suse.com/877013","tags":["report"]},{"url":"https://bugzilla.suse.com/877257","tags":["report"]},{"url":"https://bugzilla.suse.com/877456","tags":["report"]},{"url":"https://bugzilla.suse.com/877497","tags":["report"]},{"url":"https://bugzilla.suse.com/877593","tags":["report"]},{"url":"https://bugzilla.suse.com/877775","tags":["report"]},{"url":"https://bugzilla.suse.com/878115","tags":["report"]},{"url":"https://bugzilla.suse.com/878123","tags":["report"]},{"url":"https://bugzilla.suse.com/878274","tags":["report"]},{"url":"https://bugzilla.suse.com/878407","tags":["report"]},{"url":"https://bugzilla.suse.com/878509","tags":["report"]},{"url":"https://bugzilla.suse.com/879304","tags":["report"]},{"url":"https://bugzilla.suse.com/879921","tags":["report"]},{"url":"https://bugzilla.suse.com/879957","tags":["report"]},{"url":"https://bugzilla.suse.com/880007","tags":["report"]},{"url":"https://bugzilla.suse.com/880344","tags":["report"]},{"url":"https://bugzilla.suse.com/880357","tags":["report"]},{"url":"https://bugzilla.suse.com/880370","tags":["report"]},{"url":"https://bugzilla.suse.com/880437","tags":["report"]},{"url":"https://bugzilla.suse.com/880484","tags":["report"]},{"url":"https://bugzilla.suse.com/880892","tags":["report"]},{"url":"https://bugzilla.suse.com/881051","tags":["report"]},{"url":"https://bugzilla.suse.com/881571","tags":["report"]},{"url":"https://bugzilla.suse.com/881759","tags":["report"]},{"url":"https://bugzilla.suse.com/881761","tags":["report"]},{"url":"https://bugzilla.suse.com/881939","tags":["report"]},{"url":"https://bugzilla.suse.com/882317","tags":["report"]},{"url":"https://bugzilla.suse.com/882324","tags":["report"]},{"url":"https://bugzilla.suse.com/882470","tags":["report"]},{"url":"https://bugzilla.suse.com/882639","tags":["report"]},{"url":"https://bugzilla.suse.com/882804","tags":["report"]},{"url":"https://bugzilla.suse.com/882900","tags":["report"]},{"url":"https://bugzilla.suse.com/883096","tags":["report"]},{"url":"https://bugzilla.suse.com/883376","tags":["report"]},{"url":"https://bugzilla.suse.com/883380","tags":["report"]},{"url":"https://bugzilla.suse.com/883518","tags":["report"]},{"url":"https://bugzilla.suse.com/883724","tags":["report"]},{"url":"https://bugzilla.suse.com/883795","tags":["report"]},{"url":"https://bugzilla.suse.com/883948","tags":["report"]},{"url":"https://bugzilla.suse.com/884333","tags":["report"]},{"url":"https://bugzilla.suse.com/884582","tags":["report"]},{"url":"https://bugzilla.suse.com/884725","tags":["report"]},{"url":"https://bugzilla.suse.com/884767","tags":["report"]},{"url":"https://bugzilla.suse.com/884817","tags":["report"]},{"url":"https://bugzilla.suse.com/885077","tags":["report"]},{"url":"https://bugzilla.suse.com/885262","tags":["report"]},{"url":"https://bugzilla.suse.com/885382","tags":["report"]},{"url":"https://bugzilla.suse.com/885422","tags":["report"]},{"url":"https://bugzilla.suse.com/885509","tags":["report"]},{"url":"https://bugzilla.suse.com/885725","tags":["report"]},{"url":"https://bugzilla.suse.com/886840","tags":["report"]},{"url":"https://bugzilla.suse.com/887082","tags":["report"]},{"url":"https://bugzilla.suse.com/887418","tags":["report"]},{"url":"https://bugzilla.suse.com/887503","tags":["report"]},{"url":"https://bugzilla.suse.com/887597","tags":["report"]},{"url":"https://bugzilla.suse.com/887608","tags":["report"]},{"url":"https://bugzilla.suse.com/887645","tags":["report"]},{"url":"https://bugzilla.suse.com/887680","tags":["report"]},{"url":"https://bugzilla.suse.com/888058","tags":["report"]},{"url":"https://bugzilla.suse.com/888105","tags":["report"]},{"url":"https://bugzilla.suse.com/888591","tags":["report"]},{"url":"https://bugzilla.suse.com/888607","tags":["report"]},{"url":"https://bugzilla.suse.com/888847","tags":["report"]},{"url":"https://bugzilla.suse.com/888849","tags":["report"]},{"url":"https://bugzilla.suse.com/888968","tags":["report"]},{"url":"https://bugzilla.suse.com/889061","tags":["report"]},{"url":"https://bugzilla.suse.com/889173","tags":["report"]},{"url":"https://bugzilla.suse.com/889221","tags":["report"]},{"url":"https://bugzilla.suse.com/889451","tags":["report"]},{"url":"https://bugzilla.suse.com/889614","tags":["report"]},{"url":"https://bugzilla.suse.com/889727","tags":["report"]},{"url":"https://bugzilla.suse.com/890297","tags":["report"]},{"url":"https://bugzilla.suse.com/890426","tags":["report"]},{"url":"https://bugzilla.suse.com/890513","tags":["report"]},{"url":"https://bugzilla.suse.com/890526","tags":["report"]},{"url":"https://bugzilla.suse.com/891087","tags":["report"]},{"url":"https://bugzilla.suse.com/891211","tags":["report"]},{"url":"https://bugzilla.suse.com/891212","tags":["report"]},{"url":"https://bugzilla.suse.com/891259","tags":["report"]},{"url":"https://bugzilla.suse.com/891277","tags":["report"]},{"url":"https://bugzilla.suse.com/891281","tags":["report"]},{"url":"https://bugzilla.suse.com/891368","tags":["report"]},{"url":"https://bugzilla.suse.com/891619","tags":["report"]},{"url":"https://bugzilla.suse.com/891641","tags":["report"]},{"url":"https://bugzilla.suse.com/891746","tags":["report"]},{"url":"https://bugzilla.suse.com/891790","tags":["report"]},{"url":"https://bugzilla.suse.com/892200","tags":["report"]},{"url":"https://bugzilla.suse.com/892490","tags":["report"]},{"url":"https://bugzilla.suse.com/892723","tags":["report"]},{"url":"https://bugzilla.suse.com/892782","tags":["report"]},{"url":"https://bugzilla.suse.com/893064","tags":["report"]},{"url":"https://bugzilla.suse.com/893496","tags":["report"]},{"url":"https://bugzilla.suse.com/893596","tags":["report"]},{"url":"https://bugzilla.suse.com/893758","tags":["report"]},{"url":"https://bugzilla.suse.com/894058","tags":["report"]},{"url":"https://bugzilla.suse.com/894200","tags":["report"]},{"url":"https://bugzilla.suse.com/894213","tags":["report"]},{"url":"https://bugzilla.suse.com/894895","tags":["report"]},{"url":"https://bugzilla.suse.com/895221","tags":["report"]},{"url":"https://bugzilla.suse.com/895387","tags":["report"]},{"url":"https://bugzilla.suse.com/895468","tags":["report"]},{"url":"https://bugzilla.suse.com/895608","tags":["report"]},{"url":"https://bugzilla.suse.com/895680","tags":["report"]},{"url":"https://bugzilla.suse.com/895841","tags":["report"]},{"url":"https://bugzilla.suse.com/895983","tags":["report"]},{"url":"https://bugzilla.suse.com/896382","tags":["report"]},{"url":"https://bugzilla.suse.com/896390","tags":["report"]},{"url":"https://bugzilla.suse.com/896391","tags":["report"]},{"url":"https://bugzilla.suse.com/896392","tags":["report"]},{"url":"https://bugzilla.suse.com/896415","tags":["report"]},{"url":"https://bugzilla.suse.com/896484","tags":["report"]},{"url":"https://bugzilla.suse.com/896689","tags":["report"]},{"url":"https://bugzilla.suse.com/897502","tags":["report"]},{"url":"https://bugzilla.suse.com/897694","tags":["report"]},{"url":"https://bugzilla.suse.com/897708","tags":["report"]},{"url":"https://bugzilla.suse.com/898295","tags":["report"]},{"url":"https://bugzilla.suse.com/898375","tags":["report"]},{"url":"https://bugzilla.suse.com/898554","tags":["report"]},{"url":"https://bugzilla.suse.com/899192","tags":["report"]},{"url":"https://bugzilla.suse.com/899574","tags":["report"]},{"url":"https://bugzilla.suse.com/899843","tags":["report"]},{"url":"https://bugzilla.suse.com/900279","tags":["report"]},{"url":"https://bugzilla.suse.com/900644","tags":["report"]},{"url":"https://bugzilla.suse.com/900881","tags":["report"]},{"url":"https://bugzilla.suse.com/901638","tags":["report"]},{"url":"https://bugzilla.suse.com/902232","tags":["report"]},{"url":"https://bugzilla.suse.com/902286","tags":["report"]},{"url":"https://bugzilla.suse.com/902346","tags":["report"]},{"url":"https://bugzilla.suse.com/902349","tags":["report"]},{"url":"https://bugzilla.suse.com/902351","tags":["report"]},{"url":"https://bugzilla.suse.com/902675","tags":["report"]},{"url":"https://bugzilla.suse.com/903096","tags":["report"]},{"url":"https://bugzilla.suse.com/903331","tags":["report"]},{"url":"https://bugzilla.suse.com/903640","tags":["report"]},{"url":"https://bugzilla.suse.com/903653","tags":["report"]},{"url":"https://bugzilla.suse.com/904013","tags":["report"]},{"url":"https://bugzilla.suse.com/904053","tags":["report"]},{"url":"https://bugzilla.suse.com/904242","tags":["report"]},{"url":"https://bugzilla.suse.com/904358","tags":["report"]},{"url":"https://bugzilla.suse.com/904659","tags":["report"]},{"url":"https://bugzilla.suse.com/904671","tags":["report"]},{"url":"https://bugzilla.suse.com/904700","tags":["report"]},{"url":"https://bugzilla.suse.com/904883","tags":["report"]},{"url":"https://bugzilla.suse.com/904901","tags":["report"]},{"url":"https://bugzilla.suse.com/905100","tags":["report"]},{"url":"https://bugzilla.suse.com/905304","tags":["report"]},{"url":"https://bugzilla.suse.com/905312","tags":["report"]},{"url":"https://bugzilla.suse.com/905522","tags":["report"]},{"url":"https://bugzilla.suse.com/905799","tags":["report"]},{"url":"https://bugzilla.suse.com/906027","tags":["report"]},{"url":"https://bugzilla.suse.com/906586","tags":["report"]},{"url":"https://bugzilla.suse.com/907196","tags":["report"]},{"url":"https://bugzilla.suse.com/907338","tags":["report"]},{"url":"https://bugzilla.suse.com/907551","tags":["report"]},{"url":"https://bugzilla.suse.com/907611","tags":["report"]},{"url":"https://bugzilla.suse.com/907818","tags":["report"]},{"url":"https://bugzilla.suse.com/908069","tags":["report"]},{"url":"https://bugzilla.suse.com/908163","tags":["report"]},{"url":"https://bugzilla.suse.com/908393","tags":["report"]},{"url":"https://bugzilla.suse.com/908550","tags":["report"]},{"url":"https://bugzilla.suse.com/908551","tags":["report"]},{"url":"https://bugzilla.suse.com/908572","tags":["report"]},{"url":"https://bugzilla.suse.com/908706","tags":["report"]},{"url":"https://bugzilla.suse.com/908825","tags":["report"]},{"url":"https://bugzilla.suse.com/909077","tags":["report"]},{"url":"https://bugzilla.suse.com/909078","tags":["report"]},{"url":"https://bugzilla.suse.com/909088","tags":["report"]},{"url":"https://bugzilla.suse.com/909092","tags":["report"]},{"url":"https://bugzilla.suse.com/909093","tags":["report"]},{"url":"https://bugzilla.suse.com/909095","tags":["report"]},{"url":"https://bugzilla.suse.com/909264","tags":["report"]},{"url":"https://bugzilla.suse.com/909309","tags":["report"]},{"url":"https://bugzilla.suse.com/909312","tags":["report"]},{"url":"https://bugzilla.suse.com/909477","tags":["report"]},{"url":"https://bugzilla.suse.com/909565","tags":["report"]},{"url":"https://bugzilla.suse.com/909684","tags":["report"]},{"url":"https://bugzilla.suse.com/909740","tags":["report"]},{"url":"https://bugzilla.suse.com/909846","tags":["report"]},{"url":"https://bugzilla.suse.com/910013","tags":["report"]},{"url":"https://bugzilla.suse.com/910150","tags":["report"]},{"url":"https://bugzilla.suse.com/910159","tags":["report"]},{"url":"https://bugzilla.suse.com/910251","tags":["report"]},{"url":"https://bugzilla.suse.com/910321","tags":["report"]},{"url":"https://bugzilla.suse.com/910322","tags":["report"]},{"url":"https://bugzilla.suse.com/910517","tags":["report"]},{"url":"https://bugzilla.suse.com/911181","tags":["report"]},{"url":"https://bugzilla.suse.com/911325","tags":["report"]},{"url":"https://bugzilla.suse.com/911326","tags":["report"]},{"url":"https://bugzilla.suse.com/912171","tags":["report"]},{"url":"https://bugzilla.suse.com/912202","tags":["report"]},{"url":"https://bugzilla.suse.com/912705","tags":["report"]},{"url":"https://bugzilla.suse.com/912741","tags":["report"]},{"url":"https://bugzilla.suse.com/913059","tags":["report"]},{"url":"https://bugzilla.suse.com/913080","tags":["report"]},{"url":"https://bugzilla.suse.com/913598","tags":["report"]},{"url":"https://bugzilla.suse.com/914355","tags":["report"]},{"url":"https://bugzilla.suse.com/914423","tags":["report"]},{"url":"https://bugzilla.suse.com/914726","tags":["report"]},{"url":"https://bugzilla.suse.com/914742","tags":["report"]},{"url":"https://bugzilla.suse.com/914818","tags":["report"]},{"url":"https://bugzilla.suse.com/914987","tags":["report"]},{"url":"https://bugzilla.suse.com/915045","tags":["report"]},{"url":"https://bugzilla.suse.com/915200","tags":["report"]},{"url":"https://bugzilla.suse.com/915209","tags":["report"]},{"url":"https://bugzilla.suse.com/915322","tags":["report"]},{"url":"https://bugzilla.suse.com/915335","tags":["report"]},{"url":"https://bugzilla.suse.com/915577","tags":["report"]},{"url":"https://bugzilla.suse.com/915791","tags":["report"]},{"url":"https://bugzilla.suse.com/915826","tags":["report"]},{"url":"https://bugzilla.suse.com/916515","tags":["report"]},{"url":"https://bugzilla.suse.com/916521","tags":["report"]},{"url":"https://bugzilla.suse.com/916848","tags":["report"]},{"url":"https://bugzilla.suse.com/916982","tags":["report"]},{"url":"https://bugzilla.suse.com/917093","tags":["report"]},{"url":"https://bugzilla.suse.com/917120","tags":["report"]},{"url":"https://bugzilla.suse.com/917648","tags":["report"]},{"url":"https://bugzilla.suse.com/917684","tags":["report"]},{"url":"https://bugzilla.suse.com/917830","tags":["report"]},{"url":"https://bugzilla.suse.com/917839","tags":["report"]},{"url":"https://bugzilla.suse.com/917884","tags":["report"]},{"url":"https://bugzilla.suse.com/918333","tags":["report"]},{"url":"https://bugzilla.suse.com/919007","tags":["report"]},{"url":"https://bugzilla.suse.com/919018","tags":["report"]},{"url":"https://bugzilla.suse.com/919357","tags":["report"]},{"url":"https://bugzilla.suse.com/919463","tags":["report"]},{"url":"https://bugzilla.suse.com/919589","tags":["report"]},{"url":"https://bugzilla.suse.com/919682","tags":["report"]},{"url":"https://bugzilla.suse.com/919808","tags":["report"]},{"url":"https://bugzilla.suse.com/920250","tags":["report"]},{"url":"https://bugzilla.suse.com/921769","tags":["report"]},{"url":"https://bugzilla.suse.com/922583","tags":["report"]},{"url":"https://bugzilla.suse.com/923344","tags":["report"]},{"url":"https://bugzilla.suse.com/924142","tags":["report"]},{"url":"https://bugzilla.suse.com/924271","tags":["report"]},{"url":"https://bugzilla.suse.com/924282","tags":["report"]},{"url":"https://bugzilla.suse.com/924333","tags":["report"]},{"url":"https://bugzilla.suse.com/924340","tags":["report"]},{"url":"https://bugzilla.suse.com/925012","tags":["report"]},{"url":"https://bugzilla.suse.com/925370","tags":["report"]},{"url":"https://bugzilla.suse.com/925443","tags":["report"]},{"url":"https://bugzilla.suse.com/925567","tags":["report"]},{"url":"https://bugzilla.suse.com/925729","tags":["report"]},{"url":"https://bugzilla.suse.com/926016","tags":["report"]},{"url":"https://bugzilla.suse.com/926240","tags":["report"]},{"url":"https://bugzilla.suse.com/926439","tags":["report"]},{"url":"https://bugzilla.suse.com/926767","tags":["report"]},{"url":"https://bugzilla.suse.com/927190","tags":["report"]},{"url":"https://bugzilla.suse.com/927257","tags":["report"]},{"url":"https://bugzilla.suse.com/927262","tags":["report"]},{"url":"https://bugzilla.suse.com/927338","tags":["report"]},{"url":"https://bugzilla.suse.com/928122","tags":["report"]},{"url":"https://bugzilla.suse.com/928130","tags":["report"]},{"url":"https://bugzilla.suse.com/928142","tags":["report"]},{"url":"https://bugzilla.suse.com/928333","tags":["report"]},{"url":"https://bugzilla.suse.com/928970","tags":["report"]},{"url":"https://bugzilla.suse.com/929145","tags":["report"]},{"url":"https://bugzilla.suse.com/929148","tags":["report"]},{"url":"https://bugzilla.suse.com/929283","tags":["report"]},{"url":"https://bugzilla.suse.com/929525","tags":["report"]},{"url":"https://bugzilla.suse.com/929647","tags":["report"]},{"url":"https://bugzilla.suse.com/930145","tags":["report"]},{"url":"https://bugzilla.suse.com/930171","tags":["report"]},{"url":"https://bugzilla.suse.com/930226","tags":["report"]},{"url":"https://bugzilla.suse.com/930284","tags":["report"]},{"url":"https://bugzilla.suse.com/930401","tags":["report"]},{"url":"https://bugzilla.suse.com/930669","tags":["report"]},{"url":"https://bugzilla.suse.com/930786","tags":["report"]},{"url":"https://bugzilla.suse.com/930788","tags":["report"]},{"url":"https://bugzilla.suse.com/931014","tags":["report"]},{"url":"https://bugzilla.suse.com/931015","tags":["report"]},{"url":"https://bugzilla.suse.com/931850","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2889","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3227","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3228","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4171","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4653","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9322","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3636","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150581-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150658-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/898675","tags":["report"]},{"url":"https://bugzilla.suse.com/903997","tags":["report"]},{"url":"https://bugzilla.suse.com/915660","tags":["report"]},{"url":"https://bugzilla.suse.com/918584","tags":["report"]},{"url":"https://bugzilla.suse.com/918615","tags":["report"]},{"url":"https://bugzilla.suse.com/918620","tags":["report"]},{"url":"https://bugzilla.suse.com/918644","tags":["report"]},{"url":"https://bugzilla.suse.com/919719","tags":["report"]},{"url":"https://bugzilla.suse.com/919939","tags":["report"]},{"url":"https://bugzilla.suse.com/920615","tags":["report"]},{"url":"https://bugzilla.suse.com/920805","tags":["report"]},{"url":"https://bugzilla.suse.com/920839","tags":["report"]},{"url":"https://bugzilla.suse.com/921313","tags":["report"]},{"url":"https://bugzilla.suse.com/921527","tags":["report"]},{"url":"https://bugzilla.suse.com/921990","tags":["report"]},{"url":"https://bugzilla.suse.com/922272","tags":["report"]},{"url":"https://bugzilla.suse.com/922275","tags":["report"]},{"url":"https://bugzilla.suse.com/922278","tags":["report"]},{"url":"https://bugzilla.suse.com/922284","tags":["report"]},{"url":"https://bugzilla.suse.com/924460","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150736-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/754690","tags":["report"]},{"url":"https://bugzilla.suse.com/792991","tags":["report"]},{"url":"https://bugzilla.suse.com/800907","tags":["report"]},{"url":"https://bugzilla.suse.com/803174","tags":["report"]},{"url":"https://bugzilla.suse.com/805945","tags":["report"]},{"url":"https://bugzilla.suse.com/808647","tags":["report"]},{"url":"https://bugzilla.suse.com/809220","tags":["report"]},{"url":"https://bugzilla.suse.com/809617","tags":["report"]},{"url":"https://bugzilla.suse.com/810098","tags":["report"]},{"url":"https://bugzilla.suse.com/810210","tags":["report"]},{"url":"https://bugzilla.suse.com/816065","tags":["report"]},{"url":"https://bugzilla.suse.com/816403","tags":["report"]},{"url":"https://bugzilla.suse.com/816892","tags":["report"]},{"url":"https://bugzilla.suse.com/816925","tags":["report"]},{"url":"https://bugzilla.suse.com/816971","tags":["report"]},{"url":"https://bugzilla.suse.com/817339","tags":["report"]},{"url":"https://bugzilla.suse.com/818053","tags":["report"]},{"url":"https://bugzilla.suse.com/818154","tags":["report"]},{"url":"https://bugzilla.suse.com/818497","tags":["report"]},{"url":"https://bugzilla.suse.com/819295","tags":["report"]},{"url":"https://bugzilla.suse.com/819519","tags":["report"]},{"url":"https://bugzilla.suse.com/819789","tags":["report"]},{"url":"https://bugzilla.suse.com/820183","tags":["report"]},{"url":"https://bugzilla.suse.com/820569","tags":["report"]},{"url":"https://bugzilla.suse.com/820738","tags":["report"]},{"url":"https://bugzilla.suse.com/820948","tags":["report"]},{"url":"https://bugzilla.suse.com/820982","tags":["report"]},{"url":"https://bugzilla.suse.com/821560","tags":["report"]},{"url":"https://bugzilla.suse.com/821802","tags":["report"]},{"url":"https://bugzilla.suse.com/822942","tags":["report"]},{"url":"https://bugzilla.suse.com/823191","tags":["report"]},{"url":"https://bugzilla.suse.com/855885","tags":["report"]},{"url":"https://bugzilla.suse.com/857919","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2850","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151174-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151376-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151478-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/798406","tags":["report"]},{"url":"https://bugzilla.suse.com/821931","tags":["report"]},{"url":"https://bugzilla.suse.com/879878","tags":["report"]},{"url":"https://bugzilla.suse.com/897995","tags":["report"]},{"url":"https://bugzilla.suse.com/898693","tags":["report"]},{"url":"https://bugzilla.suse.com/908870","tags":["report"]},{"url":"https://bugzilla.suse.com/912916","tags":["report"]},{"url":"https://bugzilla.suse.com/915517","tags":["report"]},{"url":"https://bugzilla.suse.com/916010","tags":["report"]},{"url":"https://bugzilla.suse.com/923245","tags":["report"]},{"url":"https://bugzilla.suse.com/928801","tags":["report"]},{"url":"https://bugzilla.suse.com/929360","tags":["report"]},{"url":"https://bugzilla.suse.com/930934","tags":["report"]},{"url":"https://bugzilla.suse.com/931474","tags":["report"]},{"url":"https://bugzilla.suse.com/933429","tags":["report"]},{"url":"https://bugzilla.suse.com/935705","tags":["report"]},{"url":"https://bugzilla.suse.com/936831","tags":["report"]},{"url":"https://bugzilla.suse.com/937032","tags":["report"]},{"url":"https://bugzilla.suse.com/937986","tags":["report"]},{"url":"https://bugzilla.suse.com/940338","tags":["report"]},{"url":"https://bugzilla.suse.com/940398","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5707","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151592-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/851068","tags":["report"]},{"url":"https://bugzilla.suse.com/873385","tags":["report"]},{"url":"https://bugzilla.suse.com/886785","tags":["report"]},{"url":"https://bugzilla.suse.com/894936","tags":["report"]},{"url":"https://bugzilla.suse.com/920110","tags":["report"]},{"url":"https://bugzilla.suse.com/920733","tags":["report"]},{"url":"https://bugzilla.suse.com/921430","tags":["report"]},{"url":"https://bugzilla.suse.com/924701","tags":["report"]},{"url":"https://bugzilla.suse.com/925705","tags":["report"]},{"url":"https://bugzilla.suse.com/925881","tags":["report"]},{"url":"https://bugzilla.suse.com/925903","tags":["report"]},{"url":"https://bugzilla.suse.com/926953","tags":["report"]},{"url":"https://bugzilla.suse.com/927355","tags":["report"]},{"url":"https://bugzilla.suse.com/927786","tags":["report"]},{"url":"https://bugzilla.suse.com/929142","tags":["report"]},{"url":"https://bugzilla.suse.com/929143","tags":["report"]},{"url":"https://bugzilla.suse.com/930092","tags":["report"]},{"url":"https://bugzilla.suse.com/930761","tags":["report"]},{"url":"https://bugzilla.suse.com/931538","tags":["report"]},{"url":"https://bugzilla.suse.com/932348","tags":["report"]},{"url":"https://bugzilla.suse.com/932458","tags":["report"]},{"url":"https://bugzilla.suse.com/933896","tags":["report"]},{"url":"https://bugzilla.suse.com/933904","tags":["report"]},{"url":"https://bugzilla.suse.com/933907","tags":["report"]},{"url":"https://bugzilla.suse.com/933936","tags":["report"]},{"url":"https://bugzilla.suse.com/934742","tags":["report"]},{"url":"https://bugzilla.suse.com/934944","tags":["report"]},{"url":"https://bugzilla.suse.com/935053","tags":["report"]},{"url":"https://bugzilla.suse.com/935572","tags":["report"]},{"url":"https://bugzilla.suse.com/935866","tags":["report"]},{"url":"https://bugzilla.suse.com/935906","tags":["report"]},{"url":"https://bugzilla.suse.com/936077","tags":["report"]},{"url":"https://bugzilla.suse.com/936423","tags":["report"]},{"url":"https://bugzilla.suse.com/936637","tags":["report"]},{"url":"https://bugzilla.suse.com/936875","tags":["report"]},{"url":"https://bugzilla.suse.com/936925","tags":["report"]},{"url":"https://bugzilla.suse.com/937402","tags":["report"]},{"url":"https://bugzilla.suse.com/937444","tags":["report"]},{"url":"https://bugzilla.suse.com/937503","tags":["report"]},{"url":"https://bugzilla.suse.com/937641","tags":["report"]},{"url":"https://bugzilla.suse.com/937855","tags":["report"]},{"url":"https://bugzilla.suse.com/939910","tags":["report"]},{"url":"https://bugzilla.suse.com/939994","tags":["report"]},{"url":"https://bugzilla.suse.com/942350","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4167","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151611-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151678-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/777565","tags":["report"]},{"url":"https://bugzilla.suse.com/891116","tags":["report"]},{"url":"https://bugzilla.suse.com/917968","tags":["report"]},{"url":"https://bugzilla.suse.com/920016","tags":["report"]},{"url":"https://bugzilla.suse.com/923002","tags":["report"]},{"url":"https://bugzilla.suse.com/923431","tags":["report"]},{"url":"https://bugzilla.suse.com/928988","tags":["report"]},{"url":"https://bugzilla.suse.com/929076","tags":["report"]},{"url":"https://bugzilla.suse.com/931620","tags":["report"]},{"url":"https://bugzilla.suse.com/932350","tags":["report"]},{"url":"https://bugzilla.suse.com/932882","tags":["report"]},{"url":"https://bugzilla.suse.com/933721","tags":["report"]},{"url":"https://bugzilla.suse.com/935055","tags":["report"]},{"url":"https://bugzilla.suse.com/936095","tags":["report"]},{"url":"https://bugzilla.suse.com/936118","tags":["report"]},{"url":"https://bugzilla.suse.com/936921","tags":["report"]},{"url":"https://bugzilla.suse.com/937256","tags":["report"]},{"url":"https://bugzilla.suse.com/938485","tags":["report"]},{"url":"https://bugzilla.suse.com/940925","tags":["report"]},{"url":"https://bugzilla.suse.com/940966","tags":["report"]},{"url":"https://bugzilla.suse.com/942204","tags":["report"]},{"url":"https://bugzilla.suse.com/942305","tags":["report"]},{"url":"https://bugzilla.suse.com/942367","tags":["report"]},{"url":"https://bugzilla.suse.com/942404","tags":["report"]},{"url":"https://bugzilla.suse.com/942605","tags":["report"]},{"url":"https://bugzilla.suse.com/942688","tags":["report"]},{"url":"https://bugzilla.suse.com/942938","tags":["report"]},{"url":"https://bugzilla.suse.com/943477","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6252","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-0777","description":"drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.","status":"published","published":"2015-04-05T21:00:00Z","modified":"2024-08-06T04:26:09.822Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0790","description":"drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.","status":"published","published":"2015-04-05T21:00:00Z","modified":"2024-08-06T04:26:09Z","updated_at":"2026-11-03T02:22:18.008513Z"}],"ghsa":[{"id":"GHSA-c4qc-mjg8-qg72","title":"drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for...","description":"drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.","status":"published","published":"2022-05-17T03:22:38Z","modified":"2023-01-27T05:08:04Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:43:14.514072Z"}],"nvd":[{"id":"CVE-2015-0777","description":"drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions, allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory via unspecified vectors.","status":"published","published":"2015-04-05T21:59:00.077Z","modified":"2026-06-17T00:20:53.38Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:04.095849Z"}],"osv":[{"id":"BELL-CVE-2015-0777","title":"CVE-2015-0777 does not affect BellSoft software","status":"withdrawn","published":"2015-04-05T21:59:00Z","modified":"2026-01-28T07:21:37.734196Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"SUSE-RU-2015:0621-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix \nvarious bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-24T00:35:24Z","modified":"2026-02-04T02:56:26.296013Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0581-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix \nvarious bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-24T00:35:24Z","modified":"2026-02-04T03:39:09.914782Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0658-1","title":"Security Update for Linux Kernel","description":"\nThe SUSE Linux Enterprise Server 12 kernel was updated to 3.12.39 to\nreceive various security and bugfixes.\n\nFollowing security bugs were fixed:\n- CVE-2015-0777: The XEN usb backend could leak information to the guest\n  system due to copying uninitialized memory.\n\n- CVE-2015-2150: Xen and the Linux kernel did not properly restrict access\n  to PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response.\n\nThe following non-security bugs were fixed:\n- Added Little Endian support to vtpm module (bsc#918620).\n- Add support for pnfs block layout. Patches not included by default yet\n- ALSA: hda - Fix regression of HD-audio controller fallback modes (bsc#921313).\n- btrfs: add missing blk_finish_plug in btrfs_sync_log() (bnc#922284).\n- btrfs: cleanup orphans while looking up default subvolume (bsc#914818).\n- btrfs: do not ignore errors from btrfs_lookup_xattr in do_setxattr (bnc#922272).\n- btrfs: fix BUG_ON in btrfs_orphan_add() when delete unused block group (bnc#922278).\n- btrfs: fix data loss in the fast fsync path (bnc#922275).\n- btrfs: fix fsync data loss after adding hard link to inode (bnc#922275).\n- cgroup: revert cgroup_mutex removal from idr_remove (bnc#918644).\n- cifs: fix use-after-free bug in find_writable_file (bnc#909477).\n- crypto: rng - RNGs must return 0 in success case (bsc#920805).\n- crypto: testmgr - fix RNG return code enforcement (bsc#920805).\n- exit: Always reap resource stats in __exit_signal() (Time scalability).\n- fork: report pid reservation failure properly (bnc#909684).\n- fsnotify: Fix handling of renames in audit (bnc#915200).\n- HID: hyperv: match wait_for_completion_timeout return type.\n- hv: address compiler warnings for hv_fcopy_daemon.c.\n- hv: address compiler warnings for hv_kvp_daemon.c.\n- hv: check vmbus_device_create() return value in vmbus_process_offer().\n- hv: do not add redundant / in hv_start_fcopy().\n- hv: hv_balloon: Do not post pressure status from interrupt context.\n- hv: hv_balloon: Fix a locking bug in the balloon driver.\n- hv: hv_balloon: Make adjustments in computing the floor.\n- hv: hv_fcopy: drop the obsolete message on transfer failure.\n- hv: kvp_daemon: make IPv6-only-injection work.\n- hv: remove unused bytes_written from kvp_update_file().\n- hv: rename sc_lock to the more generic lock.\n- hv: vmbus: Fix a bug in vmbus_establish_gpadl().\n- hv: vmbus: hv_process_timer_expiration() can be static.\n- hv: vmbus: Implement a clockevent device.\n- hv: vmbus: serialize Offer and Rescind offer.\n- hv: vmbus: Support a vmbus API for efficiently sending page arrays.\n- hv: vmbus: Use get_cpu() to get the current CPU.\n- hyperv: fix sparse warnings.\n- hyperv: Fix the error processing in netvsc_send().\n- hyperv: match wait_for_completion_timeout return type.\n- hyperv: netvsc.c: match wait_for_completion_timeout return type.\n- iommu/vt-d: Fix dmar_domain leak in iommu_attach_device (bsc#924460).\n- kabi, mm: prevent endless growth of anon_vma hierarchy (bnc#904242).\n- kABI: protect linux/namei.h include in procfs.\n- kABI: protect struct hif_scatter_req.\n- kabi/severities: Stop maintaining the kgraft kabi\n- kernel/sched/clock.c: add another clock for use with the soft lockup watchdog (bsc#919939).\n- kgr: Allow patches to require an exact kernel version (bnc#920615).\n- KVM: PPC: Book3S HV: ptes are big endian (bsc#920839).\n- mm: convert the rest to new page table lock api (the suse-only cases) (fate#315482).\n- mm: fix anon_vma-\u0026gt;degree underflow in anon_vma endless growing prevention (bnc#904242).\n- mm: fix corner case in anon_vma endless growing prevention (bnc#904242).\n- mm: prevent endless growth of anon_vma hierarchy (bnc#904242).\n- mm: prevent endless growth of anon_vma hierarchy  mm: prevent endless growth of anon_vma hierarchy (bnc#904242).\n- mm: vmscan: count only dirty pages as congested (VM Performance, bnc#910517).\n- module: Clean up ro/nx after early module load failures (bsc#921990).\n- module: set nx before marking module MODULE_STATE_COMING (bsc#921990).\n- net: add sysfs helpers for netdev_adjacent logic (bnc#915660).\n- net: correct error path in rtnl_newlink() (bnc#915660).\n- net: fix creation adjacent device symlinks (bnc#915660).\n- net: prevent of emerging cross-namespace symlinks (bnc#915660).\n- net: rename sysfs symlinks on device name change (bnc#915660).\n- nfs: cap request size to fit a kmalloced page array (bnc#898675).\n- nfs: commit layouts in fdatasync (bnc#898675).\n- NFSv4.1: Do not trust attributes if a pNFS LAYOUTCOMMIT is outstanding (bnc#898675).\n- NFSv4.1: Ensure that the layout recall callback matches layout stateids (bnc#898675).\n- NFSv4.1: Ensure that we free existing layout segments if we get a new layout (bnc#898675).\n- NFSv4.1: Fix a race in nfs4_write_inode (bnc#898675).\n- NFSv4.1: Fix wraparound issues in pnfs_seqid_is_newer() (bnc#898675).\n- NFSv4.1: Minor optimisation in get_layout_by_fh_locked() (bnc#898675).\n- NFSv4: Do not update the open stateid unless it is newer than the old one (bnc#898675).\n- pnfs: add a common GETDEVICELIST implementation (bnc#898675).\n- pnfs: add a nfs4_get_deviceid helper (bnc#898675).\n- pnfs: add flag to force read-modify-write in -\u0026gt;write_begin (bnc#898675).\n- pnfs: add return_range method (bnc#898675).\n- pnfs: allow splicing pre-encoded pages into the layoutcommit args (bnc#898675).\n- pnfs: avoid using stale stateids after layoutreturn (bnc#898675).\n- pnfs/blocklayout: allocate separate pages for the layoutcommit payload (bnc#898675).\n- pnfs/blocklayout: correctly decrement extent length (bnc#898675).\n- pnfs/blocklayout: do not set pages uptodate (bnc#898675).\n- pnfs/blocklayout: Fix a 64-bit division/remainder issue in bl_map_stripe (bnc#898675).\n- pnfs/blocklayout: implement the return_range method (bnc#898675).\n- pnfs/blocklayout: improve GETDEVICEINFO error reporting (bnc#898675).\n- pnfs/blocklayout: include vmalloc.h for __vmalloc (bnc#898675).\n- pnfs/blocklayout: in-kernel GETDEVICEINFO XDR parsing (bnc#898675).\n- pnfs/blocklayout: move all rpc_pipefs related code into a single file (bnc#898675).\n- pnfs/blocklayout: move extent processing to blocklayout.c (bnc#898675).\n- pnfs/blocklayout: plug block queues (bnc#898675).\n- pnfs/blocklayout: refactor extent processing (bnc#898675).\n- pnfs/blocklayout: reject pnfs blocksize larger than page size (bnc#898675).\n- pNFS/blocklayout: Remove a couple of unused variables (bnc#898675).\n- pnfs/blocklayout: remove read-modify-write handling in bl_write_pagelist (bnc#898675).\n- pnfs/blocklayout: remove some debugging (bnc#898675).\n- pnfs/blocklayout: return layouts on setattr (bnc#898675).\n- pnfs/blocklayout: rewrite extent tracking (bnc#898675).\n- pnfs/blocklayout: use the device id cache (bnc#898675).\n- pnfs: do not check sequence on new stateids in layoutget (bnc#898675).\n- pnfs: do not pass uninitialized lsegs to -\u0026gt;free_lseg (bnc#898675).\n- pnfs: enable CB_NOTIFY_DEVICEID support (bnc#898675).\n- pnfs: factor GETDEVICEINFO implementations (bnc#898675).\n- pnfs: force a layout commit when encountering busy segments during recall (bnc#898675).\n- pnfs: remove GETDEVICELIST implementation (bnc#898675).\n- pnfs: retry after a bad stateid error from layoutget (bnc#898675).\n- powerpc: add running_clock for powerpc to prevent spurious softlockup warnings (bsc#919939).\n- powerpc/pseries: Fix endian problems with LE migration (bsc#918584).\n- remove cgroup_mutex around deactivate_super because it might be dangerous.\n- rtmutex: Document pi chain walk (mutex scalability).\n- rtmutex: No need to keep task ref for lock owner check (mutex scalability).\n- rtmutex: Simplify rtmutex_slowtrylock() (mutex scalability).\n- rtnetlink: fix a memory leak when -\u0026gt;newlink fails (bnc#915660).\n- sched: Change thread_group_cputime() to use for_each_thread() (Time scalability).\n- sched: replace INIT_COMPLETION with reinit_completion.\n- sched, time: Atomically increment stime \u0026 utime (Time scalability).\n- scsi: storvsc: Always send on the selected outgoing channel.\n- scsi: storvsc: Do not assume that the scatterlist is not chained.\n- scsi: storvsc: Enable clustering.\n- scsi: storvsc: Fix a bug in copy_from_bounce_buffer().\n- scsi: storvsc: Increase the ring buffer size.\n- scsi: storvsc: Retrieve information about the capability of the target.\n- scsi: storvsc: Set the tablesize based on the information given by the host.\n- scsi: storvsc: Size the queue depth based on the ringbuffer size.\n- storvsc: fix a bug in storvsc limits.\n- storvsc: force discovery of LUNs that may have been removed.\n- storvsc: force SPC-3 compliance on win8 and win8 r2 hosts.\n- storvsc: in responce to a scan event, scan the host.\n- take read_seqbegin_or_lock() and friends to seqlock.h (Time scalability).\n- tcp: prevent fetching dst twice in early demux code (bnc#903997 bnc#919719).\n- time, signal: Protect resource use statistics with seqlock -kabi (Time scalability).\n- time, signal: Protect resource use statistics with seqlock (Time scalability).\n- udp: only allow UFO for packets from SOCK_DGRAM sockets (bnc#909309).\n- Update Xen patches to 3.12.39.\n- virtio: rng: add derating factor for use by hwrng core (bsc#918615).\n- x86, AVX-512: AVX-512 Feature Detection (bsc#921527).\n- x86, AVX-512: Enable AVX-512 States Context Switch (bsc#921527).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: xfs_alloc_fix_minleft can underflow near ENOSPC (bnc#913080).\n","status":"published","published":"2015-03-26T17:36:44Z","modified":"2026-02-04T03:16:12.3849Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0736-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 RealTime Extension kernel was \nupdated to fix various bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-25T15:06:22Z","modified":"2026-02-04T02:56:53.720404Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1174-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix \nvarious bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-24T00:35:24Z","modified":"2026-02-04T03:52:02.093682Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1376-1","title":"Security update for Linux kernel","description":"\nThe SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix \nvarious bugs and security issues.\n\nThe following security bugs have been fixed:\n\n    * \n\n      CVE-2014-1739: The media_device_enum_entities function in\n      drivers/media/media-device.c in the Linux kernel before 3.14.6 does\n      not initialize a certain data structure, which allows local users to\n      obtain sensitive information from kernel memory by leveraging\n      /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call\n      (bnc#882804).\n\n    * \n\n      CVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not\n      properly implement the interaction between range notification and\n      hole punching, which allows local users to cause a denial of service\n      (i_mutex hold) by using the mmap system call to access a hole, as\n      demonstrated by interfering with intended shmem activity by blocking\n      completion of (1) an MADV_REMOVE madvise call or (2) an\n      FALLOC_FL_PUNCH_HOLE fallocate call (bnc#883518).\n\n    * \n\n      CVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through\n      3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and\n      the sep CPU feature flag is set, allows local users to cause a denial\n      of service (OOPS and system crash) via an invalid syscall number, as\n      demonstrated by number 1000 (bnc#883724).\n\n    * \n\n      CVE-2014-4667: The sctp_association_free function in\n      net/sctp/associola.c in the Linux kernel before 3.15.2 does not\n      properly manage a certain backlog value, which allows remote\n      attackers to cause a denial of service (socket outage) via a crafted\n      SCTP packet (bnc#885422).\n\n    * \n\n      CVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the\n      Linux kernel through 3.15.6 allows local users to gain privileges by\n      leveraging data-structure differences between an l2tp socket and an\n      inet socket (bnc#887082).\n\n    * \n\n      CVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c\n      in the Linux kernel through 3.15.8, when SCTP authentication is\n      enabled, allows remote attackers to cause a denial of service (NULL\n      pointer dereference and OOPS) by starting to establish an association\n      between two endpoints immediately after an exchange of INIT and INIT\n      ACK chunks to establish an earlier association between these\n      endpoints in the opposite direction (bnc#889173).\n\n    * \n\n      CVE-2014-5471: Stack consumption vulnerability in the\n      parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the\n      Linux kernel through 3.16.1 allows local users to cause a denial of\n      service (uncontrolled recursion, and system crash or reboot) via a\n      crafted iso9660 image with a CL entry referring to a directory entry\n      that has a CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-5472: The parse_rock_ridge_inode_internal function in\n      fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users\n      to cause a denial of service (unkillable mount process) via a crafted\n      iso9660 image with a self-referential CL entry. (bnc#892490)\n\n    * \n\n      CVE-2014-2706: Race condition in the mac80211 subsystem in the Linux\n      kernel before 3.13.7 allows remote attackers to cause a denial of\n      service (system crash) via network traffic that improperly interacts\n      with the WLAN_STA_PS_STA state (aka power-save mode), related to\n      sta_info.c and tx.c. (bnc#871797)\n\n    * \n\n      CVE-2014-4027: The rd_build_device_space function in\n      drivers/target/target_core_rd.c in the Linux kernel before 3.14 does\n      not properly initialize a certain data structure, which allows local\n      users to obtain sensitive information from ramdisk_mcp memory by\n      leveraging access to a SCSI initiator. (bnc#882639)\n\n    * \n\n      CVE-2014-3153 The futex_requeue function in kernel/futex.c in the\n      Linux kernel through 3.14.5 does not ensure that calls have two\n      different futex addresses, which allows local users to gain\n      privileges via a crafted FUTEX_REQUEUE command that facilitates\n      unsafe waiter modification. (bnc#880892)\n\n    * \n\n      CVE-2014-6410: Avoid infinite loop when processing indirect ICBs\n      (bnc#896689)\n\nThe following non-security bugs have been fixed:\n\n    * ACPI / PAD: call schedule() when need_resched() is true (bnc#866911).\n    * ACPI: Fix bug when ACPI reset register is implemented in system\n      memory (bnc#882900).\n    * ACPI: Limit access to custom_method (bnc#884333).\n    * ALSA: hda - Enabling Realtek ALC 671 codec (bnc#891746).\n    * Add option to automatically enforce module signatures when in Secure\n      Boot mode (bnc#884333).\n    * Add secure_modules() call (bnc#884333).\n    * Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344).\n    * Backported new patches of Lock down functions for UEFI secure boot\n      Also updated series.conf and removed old patches.\n    * Btrfs: Return EXDEV for cross file system snapshot.\n    * Btrfs: abort the transaction when we does not find our extent ref.\n    * Btrfs: avoid warning bomb of btrfs_invalidate_inodes.\n    * Btrfs: cancel scrub on transaction abortion.\n    * Btrfs: correctly set profile flags on seqlock retry.\n    * Btrfs: does not check nodes for extent items.\n    * Btrfs: fix a possible deadlock between scrub and transaction\n      committing.\n    * Btrfs: fix corruption after write/fsync failure + fsync + log\n      recovery (bnc#894200).\n    * Btrfs: fix csum tree corruption, duplicate and outdated checksums\n      (bnc#891619).\n    * Btrfs: fix double free in find_lock_delalloc_range.\n    * Btrfs: fix possible memory leak in btrfs_create_tree().\n    * Btrfs: fix use of uninit 'ret' in end_extent_writepage().\n    * Btrfs: free delayed node outside of root-\u003einode_lock (bnc#866864).\n    * Btrfs: make DEV_INFO ioctl available to anyone.\n    * Btrfs: make FS_INFO ioctl available to anyone.\n    * Btrfs: make device scan less noisy.\n    * Btrfs: make sure there are not any read requests before stopping\n      workers.\n    * Btrfs: more efficient io tree navigation on wait_extent_bit.\n    * Btrfs: output warning instead of error when loading free space cache\n      failed.\n    * Btrfs: retrieve more info from FS_INFO ioctl.\n    * Btrfs: return EPERM when deleting a default subvolume (bnc#869934).\n    * Btrfs: unset DCACHE_DISCONNECTED when mounting default subvol\n      (bnc#866615).\n    * Btrfs: use right type to get real comparison.\n    * Btrfs: wake up @scrub_pause_wait as much as we can.\n    * Btrfs: wake up transaction thread upon remount.\n    * CacheFiles: Add missing retrieval completions (bnc#880344).\n    * CacheFiles: Does not try to dump the index key if the cookie has been\n      cleared (bnc#880344).\n    * CacheFiles: Downgrade the requirements passed to the allocator\n      (bnc#880344).\n    * CacheFiles: Fix the marking of cached pages (bnc#880344).\n    * CacheFiles: Implement invalidation (bnc#880344).\n    * CacheFiles: Make some debugging statements conditional (bnc#880344).\n    * Drivers: hv: util: Fix a bug in the KVP code (bnc#886840).\n    * Drivers: hv: vmbus: Fix a bug in the channel callback dispatch code\n      (bnc#886840).\n    * FS-Cache: Add transition to handle invalidate immediately after\n      lookup (bnc#880344).\n    * FS-Cache: Check that there are no read ops when cookie relinquished\n      (bnc#880344).\n    * FS-Cache: Clear remaining page count on retrieval cancellation\n      (bnc#880344).\n    * FS-Cache: Convert the object event ID #defines into an enum\n      (bnc#880344).\n    * FS-Cache: Does not sleep in page release if __GFP_FS is not set\n      (bnc#880344).\n    * FS-Cache: Does not use spin_is_locked() in assertions (bnc#880344).\n    * FS-Cache: Exclusive op submission can BUG if there is been an I/O\n      error (bnc#880344).\n    * FS-Cache: Fix __wait_on_atomic_t() to call the action func if the\n      counter != 0 (bnc#880344).\n    * FS-Cache: Fix object state machine to have separate work and wait\n      states (bnc#880344).\n    * FS-Cache: Fix operation state management and accounting (bnc#880344).\n    * FS-Cache: Fix signal handling during waits (bnc#880344).\n    * FS-Cache: Initialise the object event mask with the calculated mask\n      (bnc#880344).\n    * FS-Cache: Limit the number of I/O error reports for a cache\n      (bnc#880344).\n    * FS-Cache: Make cookie relinquishment wait for outstanding reads\n      (bnc#880344).\n    * FS-Cache: Mark cancellation of in-progress operation (bnc#880344).\n    * FS-Cache: One of the write operation paths doeses not set the object\n      state (bnc#880344).\n    * FS-Cache: Provide proper invalidation (bnc#880344).\n    * FS-Cache: Simplify cookie retention for fscache_objects, fixing oops\n      (bnc#880344).\n    * FS-Cache: The retrieval remaining-pages counter needs to be atomic_t\n      (bnc#880344).\n    * FS-Cache: Uninline fscache_object_init() (bnc#880344).\n    * FS-Cache: Wrap checks on object state (bnc#880344).\n    * HID: usbhid: add always-poll quirk (bnc#888607).\n    * HID: usbhid: enable always-poll quirk for Elan Touchscreen\n      (bnc#888607).\n    * IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297).\n    * Ignore 'flags' change to event_constraint (bnc#876114).\n    * Ignore data_src/weight changes to perf_sample_data (bnc#876114).\n    * NFS: Allow more operations in an NFSv4.1 request (bnc#890513).\n    * NFS: Clean up helper function nfs4_select_rw_stateid() (bnc#888968).\n    * NFS: Does not copy read delegation stateids in setattr (bnc#888968).\n    * NFS: Does not use a delegation to open a file when returning that\n      delegation (bnc#888968, bnc#892200, bnc#893596, bnc#893496)\n    * NFS: Fixes for NFS RCU-walk support in line with code going upstream\n    * NFS: Use FS-Cache invalidation (bnc#880344).\n    * NFS: allow lockless access to access_cache (bnc#866130).\n    * NFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts\n      (bnc#888591).\n    * NFS: nfs4_do_open should add negative results to the dcache\n      (bnc#866130).\n    * NFS: nfs_migrate_page() does not wait for FS-Cache to finish with a\n      page (bnc#880344).\n    * NFS: nfs_open_revalidate: only evaluate parent if it will be used\n      (bnc#866130).\n    * NFS: prepare for RCU-walk support but pushing tests later in code\n      (bnc#866130).\n    * NFS: support RCU_WALK in nfs_permission() (bnc#866130).\n    * NFS: teach nfs_lookup_verify_inode to handle LOOKUP_RCU (bnc#866130).\n    * NFS: teach nfs_neg_need_reval to understand LOOKUP_RCU (bnc#866130).\n    * NFSD: Does not hand out delegations for 30 seconds after recalling\n      them (bnc#880370).\n    * NFSv4 set open access operation call flag in nfs4_init_opendata_res\n      (bnc#888968, bnc#892200, bnc#893596, bnc#893496).\n    * NFSv4: Add a helper for encoding opaque data (bnc#888968).\n    * NFSv4: Add a helper for encoding stateids (bnc#888968).\n    * NFSv4: Add helpers for basic copying of stateids (bnc#888968).\n    * NFSv4: Clean up nfs4_select_rw_stateid() (bnc#888968).\n    * NFSv4: Fix the return value of nfs4_select_rw_stateid (bnc#888968).\n    * NFSv4: Rename nfs4_copy_stateid() (bnc#888968).\n    * NFSv4: Resend the READ/WRITE RPC call if a stateid change causes an\n      error (bnc#888968).\n    * NFSv4: Simplify the struct nfs4_stateid (bnc#888968).\n    * NFSv4: The stateid must remain the same for replayed RPC calls\n      (bnc#888968).\n    * NFSv4: nfs4_stateid_is_current should return 'true' for an invalid\n      stateid (bnc#888968).\n    * One more fix for kABI breakage.\n    * PCI: Lock down BAR access when module security is enabled\n      (bnc#884333).\n    * PCI: enable MPS 'performance' setting to properly handle bridge MPS\n      (bnc#883376).\n    * PM / Hibernate: Add memory_rtree_find_bit function (bnc#860441).\n    * PM / Hibernate: Create a Radix-Tree to store memory bitmap\n      (bnc#860441).\n    * PM / Hibernate: Implement position keeping in radix tree\n      (bnc#860441).\n    * PM / Hibernate: Iterate over set bits instead of PFNs in\n      swsusp_free() (bnc#860441).\n    * PM / Hibernate: Remove the old memory-bitmap implementation\n      (bnc#860441).\n    * PM / Hibernate: Touch Soft Lockup Watchdog in rtree_next_node\n      (bnc#860441).\n    * Restrict /dev/mem and /dev/kmem when module loading is restricted\n      (bnc#884333).\n    * Reuse existing 'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT\n      (bnc#876114).\n    * USB: handle LPM errors during device suspend correctly (bnc#849123).\n    * Update kabi files to reflect fscache change (bnc#880344)\n    * Update x86_64 config files: re-enable SENSORS_W83627EHF (bnc#891281)\n    * VFS: Make more complete truncate operation available to CacheFiles\n      (bnc#880344).\n    * [FEAT NET1222] ib_uverbs: Allow explicit mmio trigger (FATE#83366,\n      ltc#83367).\n    * acpi: Ignore acpi_rsdp kernel parameter when module loading is\n      restricted (bnc#884333).\n    * af_iucv: correct cleanup if listen backlog is full (bnc#885262,\n      LTC#111728).\n    * asus-wmi: Restrict debugfs interface when module loading is\n      restricted (bnc#884333).\n    * autofs4: allow RCU-walk to walk through autofs4 (bnc#866130).\n    * autofs4: avoid taking fs_lock during rcu-walk (bnc#866130).\n    * autofs4: does not take spinlock when not needed in\n      autofs4_lookup_expiring (bnc#866130).\n    * autofs4: factor should_expire() out of autofs4_expire_indirect\n      (bnc#866130).\n    * autofs4: make 'autofs4_can_expire' idempotent (bnc#866130).\n    * autofs4: remove a redundant assignment (bnc#866130).\n    * autofs: fix lockref lookup (bnc#888591).\n    * be2net: add dma_mapping_error() check for dma_map_page()\n      (bnc#881759).\n    * block: add cond_resched() to potentially long running ioctl discard\n      loop (bnc#884725).\n    * block: fix race between request completion and timeout handling\n      (bnc#881051).\n    * cdc-ether: clean packet filter upon probe (bnc#876017).\n    * cpuset: Fix memory allocator deadlock (bnc#876590).\n    * crypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs\n      have them, but some are FIPS certified, with some kernel support.\n    * crypto: fips - only panic on bad/missing crypto mod signatures\n      (bnc#887503).\n    * crypto: testmgr - allow aesni-intel and ghash_clmulni-intel in fips\n      mode (bnc#889451).\n    * dasd: validate request size before building CCW/TCW (bnc#891087,\n      LTC#114068).\n    * dm mpath: fix race condition between multipath_dtr and pg_init_done\n      (bnc#826486).\n    * dm-mpath: fix panic on deleting sg device (bnc#870161).\n    * drm/ast: AST2000 cannot be detected correctly (bnc#895983).\n    * drm/ast: Actually load DP501 firmware when required (bnc#895608\n      bnc#871134).\n    * drm/ast: Add missing entry to dclk_table[].\n    * drm/ast: Add reduced non reduced mode parsing for wide screen mode\n      (bnc#892723).\n    * drm/ast: initial DP501 support (v0.2) (bnc#871134).\n    * drm/ast: open key before detect chips (bnc#895983).\n    * drm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304).\n    * drm/i915: Only apply DPMS to the encoder if enabled (bnc#893064).\n    * drm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init\n      (bnc#869055).\n    * drm/i915: create functions for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/i915: use FPGA_DBG for the 'unclaimed register' checks\n      (bnc#869055).\n    * drm/mgag200: Initialize data needed to map fbdev memory (bnc\n      #806990).\n    * e1000e: enable support for new device IDs (bnc#885509).\n    * fs/fscache: remove spin_lock() from the condition in while()\n      (bnc#880344).\n    * hibernate: Disable in a signed modules environment (bnc#884333).\n    * hugetlb: does not use ERR_PTR with VM_FAULT* values\n    * ibmvscsi: Abort init sequence during error recovery (bnc#885382).\n    * ibmvscsi: Add memory barriers for send / receive (bnc#885382).\n    * inet: add a redirect generation id in inetpeer (bnc#860593).\n    * inetpeer: initialize -\u003eredirect_genid in inet_getpeer() (bnc#860593).\n    * ipv6: tcp: fix tcp_v6_conn_request() (bnc#887645).\n    * kabi: hide bnc#860593 changes of struct inetpeer_addr_base\n      (bnc#860593).\n    * kernel: 3215 tty hang (bnc#891087, LTC#114562).\n    * kernel: fix data corruption when reading /proc/sysinfo (bnc#891087,\n      LTC#114480).\n    * kernel: fix kernel oops with load of fpc register (bnc#889061,\n      LTC#113596).\n    * kernel: sclp console tty reference counting (bnc#891087, LTC#115466).\n    * kexec: Disable at runtime if the kernel enforces module loading\n      restrictions (bnc#884333).\n    * md/raid6: avoid data corruption during recovery of double-degraded\n      RAID6.\n    * memcg, vmscan: Fix forced scan of anonymous pages (memory reclaim\n      fix).\n    * memcg: do not expose uninitialized mem_cgroup_per_node to world\n      (bnc#883096).\n    * mm, hugetlb: add VM_NORESERVE check in vma_has_reserves()\n    * mm, hugetlb: change variable name reservations to resv\n    * mm, hugetlb: decrement reserve count if VM_NORESERVE alloc page cache\n    * mm, hugetlb: defer freeing pages when gathering surplus pages\n    * mm, hugetlb: do not use a page in page cache for cow optimization\n    * mm, hugetlb: fix and clean-up node iteration code to alloc or free\n    * mm, hugetlb: fix race in region tracking\n    * mm, hugetlb: fix subpool accounting handling\n    * mm, hugetlb: improve page-fault scalability\n    * mm, hugetlb: improve, cleanup resv_map parameters\n    * mm, hugetlb: move up the code which check availability of free huge\n      page\n    * mm, hugetlb: protect reserved pages when soft offlining a hugepage\n    * mm, hugetlb: remove decrement_hugepage_resv_vma()\n    * mm, hugetlb: remove redundant list_empty check in\n      gather_surplus_pages()\n    * mm, hugetlb: remove resv_map_put\n    * mm, hugetlb: remove useless check about mapping type\n    * mm, hugetlb: return a reserved page to a reserved pool if failed\n    * mm, hugetlb: trivial commenting fix\n    * mm, hugetlb: unify region structure handling\n    * mm, hugetlb: unify region structure handling kabi\n    * mm, hugetlb: use long vars instead of int in region_count() (Hugetlb\n      Fault Scalability).\n    * mm, hugetlb: use vma_resv_map() map types\n    * mm, oom: fix badness score underflow (bnc#884582, bnc#884767).\n    * mm, oom: normalize oom scores to oom_score_adj scale only for\n      userspace (bnc#884582, bnc#884767).\n    * mm, thp: do not allow thp faults to avoid cpuset restrictions\n      (bnc#888849).\n    * net/mlx4_core: Load higher level modules according to ports type\n      (bnc#887680).\n    * net/mlx4_core: Load the IB driver when the device supports IBoE\n      (bnc#887680).\n    * net/mlx4_en: Fix a race between napi poll function and RX ring\n      cleanup (bnc#863586).\n    * net/mlx4_en: Fix selftest failing on non 10G link speed (bnc#888058).\n    * net: fix checksumming features handling in output path (bnc#891259).\n    * pagecache_limit: batch large nr_to_scan targets (bnc#895221).\n    * pagecachelimit: reduce lru_lock congestion for heavy parallel reclaim\n      fix (bnc#895680).\n    * perf/core: Add weighted samples (bnc#876114).\n    * perf/x86: Add flags to event constraints (bnc#876114).\n    * perf/x86: Add memory profiling via PEBS Load Latency (bnc#876114).\n    * perf: Add generic memory sampling interface (bnc#876114).\n    * qla2xxx: Avoid escalating the SCSI error handler if the command is\n      not found in firmware (bnc#859840).\n    * qla2xxx: Clear loop_id for ports that are marked lost during fabric\n      scanning (bnc#859840).\n    * qla2xxx: Does not check for firmware hung during the reset context\n      for ISP82XX (bnc#859840).\n    * qla2xxx: Issue abort command for outstanding commands during cleanup\n      when only firmware is alive (bnc#859840).\n    * qla2xxx: Reduce the time we wait for a command to complete during\n      SCSI error handling (bnc#859840).\n    * qla2xxx: Set host can_queue value based on available resources\n      (bnc#859840).\n    * restore smp_mb() in unlock_new_inode() (bnc#890526).\n    * s390/pci: introduce lazy IOTLB flushing for DMA unmap (bnc#889061,\n      LTC#113725).\n    * sched: fix the theoretical signal_wake_up() vs schedule() race\n      (bnc#876055).\n    * sclp_vt220: Enable integrated ASCII console per default (bnc#885262,\n      LTC#112035).\n    * scsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614).\n    * scsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608).\n    * scsiback: correct grant page unmapping.\n    * scsiback: fix retry handling in __report_luns().\n    * scsiback: free resources after error.\n    * sunrpc/auth: allow lockless (rcu) lookup of credential cache\n      (bnc#866130).\n    * supported.conf: remove external from drivers/net/veth (bnc#889727)\n    * supported.conf: support net/sched/act_police.ko (bnc#890426)\n    * tcp: adapt selected parts of RFC 5682 and PRR logic (bnc#879921).\n    * tg3: Change nvram command timeout value to 50ms (bnc#855657).\n    * tg3: Override clock, link aware and link idle mode during NVRAM dump\n      (bnc#855657).\n    * tg3: Set the MAC clock to the fastest speed during boot code load\n      (bnc#855657).\n    * usb: Does not enable LPM if the exit latency is zero (bnc#832309).\n    * usbcore: Does not log on consecutive debounce failures of the same\n      port (bnc#888105).\n    * usbhid: fix PIXART optical mouse (bnc#888607).\n    * uswsusp: Disable when module loading is restricted (bnc#884333).\n    * vscsi: support larger transfer sizes (bnc#774818).\n    * writeback: Do not sync data dirtied after sync start (bnc#833820).\n    * x86 thermal: Delete power-limit-notification console messages\n      (bnc#882317).\n    * x86 thermal: Disable power limit notification interrupt by default\n      (bnc#882317).\n    * x86 thermal: Re-enable power limit notification interrupt by default\n      (bnc#882317).\n    * x86, cpu hotplug: Fix stack frame warning in\n      check_irq_vectors_for_cpu_disable() (bnc#887418).\n    * x86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847).\n    * x86/UV: Add kdump to UV NMI handler (bnc#888847).\n    * x86/UV: Add summary of cpu activity to UV NMI handler (bnc#888847).\n    * x86/UV: Move NMI support (bnc#888847).\n    * x86/UV: Update UV support for external NMI signals (bnc#888847).\n    * x86/uv/nmi: Fix Sparse warnings (bnc#888847).\n    * x86: Add check for number of available vectors before CPU down\n      (bnc#887418).\n    * x86: Lock down IO port access when module security is enabled\n      (bnc#884333).\n    * x86: Restrict MSR access when module loading is restricted\n      (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\nThe SUSE Linux Enterprise 11 Service Pack 3 RealTime Extension kernel was \nupdated to fix various bugs and security issues.\n\nFollowing security bugs were fixed: CVE-2013-1979: The scm_set_cred \nfunction in include/net/scm.h in the Linux kernel before 3.8.11 uses \nincorrect uid and gid values during credentials passing, which allows local \nusers to gain privileges via a crafted application (bnc#816708).\n\nCVE-2014-1739: The media_device_enum_entities function in \ndrivers/media/media-device.c in the Linux kernel before 3.14.6 does not \ninitialize a certain data structure, which allows local users to obtain \nsensitive information from kernel memory by leveraging /dev/media0 read \naccess for a MEDIA_IOC_ENUM_ENTITIES ioctl call (bnc#882804).\n\nCVE-2014-4171: mm/shmem.c in the Linux kernel through 3.15.1 does not \nproperly implement the interaction between range notification and hole \npunching, which allows local users to cause a denial of service (i_mutex \nhold) by using the mmap system call to access a hole, as demonstrated by \ninterfering with intended shmem activity by blocking completion of (1) an \nMADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call \n(bnc#883518).\n\nCVE-2014-4508: arch/x86/kernel/entry_32.S in the Linux kernel through \n3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the \nsep CPU feature flag is set, allows local users to cause a denial of \nservice (OOPS and system crash) via an invalid syscall number, as \ndemonstrated by number 1000 (bnc#883724).\n\nCVE-2014-4667: The sctp_association_free function in net/sctp/associola.c \nin the Linux kernel before 3.15.2 does not properly manage a certain \nbacklog value, which allows remote attackers to cause a denial of service \n(socket outage) via a crafted SCTP packet (bnc#885422).\n\nCVE-2014-4943: The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux \nkernel through 3.15.6 allows local users to gain privileges by leveraging \ndata-structure differences between an l2tp socket and an inet socket \n(bnc#887082).\n\nCVE-2014-5077: The sctp_assoc_update function in net/sctp/associola.c in \nthe Linux kernel through 3.15.8, when SCTP authentication is enabled, \nallows remote attackers to cause a denial of service (NULL pointer \ndereference and OOPS) by starting to establish an association between two \nendpoints immediately after an exchange of INIT and INIT ACK chunks to \nestablish an earlier association between these endpoints in the opposite \ndirection (bnc#889173).\n\nCVE-2014-5471: Stack consumption vulnerability in the \nparse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux \nkernel through 3.16.1 allows local users to cause a denial of service \n(uncontrolled recursion, and system crash or reboot) via a crafted iso9660 \nimage with a CL entry referring to a directory entry that has a CL entry. \n(bnc#892490)\n\nCVE-2014-5472: The parse_rock_ridge_inode_internal function in \nfs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to \ncause a denial of service (unkillable mount process) via a crafted iso9660 \nimage with a self-referential CL entry. (bnc#892490)\n\nCVE-2014-2706: Race condition in the mac80211 subsystem in the Linux kernel \nbefore 3.13.7 allows remote attackers to cause a denial of service (system \ncrash) via network traffic that improperly interacts with the \nWLAN_STA_PS_STA state (aka power-save mode), related to sta_info.c and \ntx.c. (bnc#871797)\n\nCVE-2014-4027: The rd_build_device_space function in \ndrivers/target/target_core_rd.c in the Linux kernel before 3.14 does not \nproperly initialize a certain data structure, which allows local users to \nobtain sensitive information from ramdisk_mcp memory by leveraging access \nto a SCSI initiator. (bnc#882639)\n\nCVE-2014-3153 The futex_requeue function in kernel/futex.c in the Linux \nkernel through 3.14.5 does not ensure that calls have two different futex \naddresses, which allows local users to gain privileges via a crafted \nFUTEX_REQUEUE command that facilitates unsafe waiter modification. \n(bnc#880892)\n\nCVE-2014-6410: Avoid infinite loop when processing indirect ICBs \n(bnc#896689)\n\nThe following non-security bugs were fixed: - ACPI / PAD: call schedule() \nwhen need_resched() is true (bnc#866911). - ACPI: Fix bug when ACPI reset \nregister is implemented in system memory (bnc#882900). - ACPI: Limit access \nto custom_method (bnc#884333). - ALSA: hda - Enabling Realtek ALC 671 codec \n(bnc#891746). - Add option to automatically enforce module signatures when \nin Secure Boot mode (bnc#884333). - Add secure_modules() call (bnc#884333). \n- Add wait_on_atomic_t() and wake_up_atomic_t() (bnc#880344). - Backported \nnew patches of Lock down functions for UEFI secure boot Also updated \nseries.conf and removed old patches. - Btrfs: Return EXDEV for cross file \nsystem snapshot. - Btrfs: abort the transaction when we does not find our \nextent ref. - Btrfs: avoid warning bomb of btrfs_invalidate_inodes. - \nBtrfs: cancel scrub on transaction abortion. - Btrfs: correctly set profile \nflags on seqlock retry. - Btrfs: does not check nodes for extent items. - \nBtrfs: fix a possible deadlock between scrub and transaction committing. - \nBtrfs: fix corruption after write/fsync failure + fsync + log recovery \n(bnc#894200). - Btrfs: fix csum tree corruption, duplicate and outdated \nchecksums (bnc#891619). - Btrfs: fix double free in \nfind_lock_delalloc_range. - Btrfs: fix possible memory leak in \nbtrfs_create_tree(). - Btrfs: fix use of uninit 'ret' in \nend_extent_writepage(). - Btrfs: free delayed node outside of \nroot-\u003einode_lock (bnc#866864). - Btrfs: make DEV_INFO ioctl available to \nanyone. - Btrfs: make FS_INFO ioctl available to anyone. - Btrfs: make \ndevice scan less noisy. - Btrfs: make sure there are not any read requests \nbefore stopping workers. - Btrfs: more efficient io tree navigation on \nwait_extent_bit. - Btrfs: output warning instead of error when loading free \nspace cache failed. - Btrfs: retrieve more info from FS_INFO ioctl. - \nBtrfs: return EPERM when deleting a default subvolume (bnc#869934). - \nBtrfs: unset DCACHE_DISCONNECTED when mounting default subvol (bnc#866615). \n- Btrfs: use right type to get real comparison. - Btrfs: wake up \n@scrub_pause_wait as much as we can. - Btrfs: wake up transaction thread \nupon remount. - CacheFiles: Add missing retrieval completions (bnc#880344). \n- CacheFiles: Does not try to dump the index key if the cookie has been \ncleared (bnc#880344). - CacheFiles: Downgrade the requirements passed to \nthe allocator (bnc#880344). - CacheFiles: Fix the marking of cached pages \n(bnc#880344). - CacheFiles: Implement invalidation (bnc#880344). - \nCacheFiles: Make some debugging statements conditional (bnc#880344). - \nDrivers: hv: util: Fix a bug in the KVP code (bnc#886840). - Drivers: hv: \nvmbus: Fix a bug in the channel callback dispatch code (bnc#886840). - \nFS-Cache: Add transition to handle invalidate immediately after lookup \n(bnc#880344). - FS-Cache: Check that there are no read ops when cookie \nrelinquished (bnc#880344). - FS-Cache: Clear remaining page count on \nretrieval cancellation (bnc#880344). - FS-Cache: Convert the object event \nID #defines into an enum (bnc#880344). - FS-Cache: Does not sleep in page \nrelease if __GFP_FS is not set (bnc#880344). - FS-Cache: Does not use \nspin_is_locked() in assertions (bnc#880344). - FS-Cache: Exclusive op \nsubmission can BUG if there is been an I/O error (bnc#880344). - FS-Cache: \nFix __wait_on_atomic_t() to call the action func if the counter != 0 \n(bnc#880344). - FS-Cache: Fix object state machine to have separate work \nand wait states (bnc#880344). - FS-Cache: Fix operation state management \nand accounting (bnc#880344). - FS-Cache: Fix signal handling during waits \n(bnc#880344). - FS-Cache: Initialise the object event mask with the \ncalculated mask (bnc#880344). - FS-Cache: Limit the number of I/O error \nreports for a cache (bnc#880344). - FS-Cache: Make cookie relinquishment \nwait for outstanding reads (bnc#880344). - FS-Cache: Mark cancellation of \nin-progress operation (bnc#880344). - FS-Cache: One of the write operation \npaths doeses not set the object state (bnc#880344). - FS-Cache: Provide \nproper invalidation (bnc#880344). - FS-Cache: Simplify cookie retention for \nfscache_objects, fixing oops (bnc#880344). - FS-Cache: The retrieval \nremaining-pages counter needs to be atomic_t (bnc#880344). - FS-Cache: \nUninline fscache_object_init() (bnc#880344). - FS-Cache: Wrap checks on \nobject state (bnc#880344). - HID: usbhid: add always-poll quirk \n(bnc#888607). - HID: usbhid: enable always-poll quirk for Elan Touchscreen \n(bnc#888607). - IB/iser: Add TIMEWAIT_EXIT event handling (bnc#890297). - \nIgnore 'flags' change to event_constraint (bnc#876114). - Ignore \ndata_src/weight changes to perf_sample_data (bnc#876114). - NFS: Allow more \noperations in an NFSv4.1 request (bnc#890513). - NFS: Clean up helper \nfunction nfs4_select_rw_stateid() (bnc#888968). - NFS: Does not copy read \ndelegation stateids in setattr (bnc#888968). - NFS: Does not use a \ndelegation to open a file when returning that delegation (bnc#888968, \nbnc#892200, bnc#893596, bnc#893496) - NFS: Fixes for NFS RCU-walk support \nin line with code going upstream - NFS: Use FS-Cache invalidation \n(bnc#880344). - NFS: allow lockless access to access_cache (bnc#866130). - \nNFS: avoid mountpoint being displayed as ' (deleted)' in /proc/mounts \n(bnc#888591). - NFS: nfs4_do_open should add negative results to the dcache \n(bnc#866130). - NFS: nfs_migrate_page() does not wait for FS-Cache to \nfinish with a page (bnc#880344). - NFS: nfs_open_revalidate: only evaluate \nparent if it will be used (bnc#866130). - NFS: prepare for RCU-walk support \nbut pushing tests later in code (bnc#866130). - NFS: support RCU_WALK in \nnfs_permission() (bnc#866130). - NFS: teach nfs_lookup_verify_inode to \nhandle LOOKUP_RCU (bnc#866130). - NFS: teach nfs_neg_need_reval to \nunderstand LOOKUP_RCU (bnc#866130). - NFSD: Does not hand out delegations \nfor 30 seconds after recalling them (bnc#880370). - NFSv4 set open access \noperation call flag in nfs4_init_opendata_res (bnc#888968, bnc#892200, \nbnc#893596, bnc#893496). - NFSv4: Add a helper for encoding opaque data \n(bnc#888968). - NFSv4: Add a helper for encoding stateids (bnc#888968). - \nNFSv4: Add helpers for basic copying of stateids (bnc#888968). - NFSv4: \nClean up nfs4_select_rw_stateid() (bnc#888968). - NFSv4: Fix the return \nvalue of nfs4_select_rw_stateid (bnc#888968). - NFSv4: Rename \nnfs4_copy_stateid() (bnc#888968). - NFSv4: Resend the READ/WRITE RPC call \nif a stateid change causes an error (bnc#888968). - NFSv4: Simplify the \nstruct nfs4_stateid (bnc#888968). - NFSv4: The stateid must remain the same \nfor replayed RPC calls (bnc#888968). - NFSv4: nfs4_stateid_is_current \nshould return 'true' for an invalid stateid (bnc#888968). - One more fix \nfor kABI breakage. - PCI: Lock down BAR access when module security is \nenabled (bnc#884333). - PCI: enable MPS 'performance' setting to properly \nhandle bridge MPS (bnc#883376). - PM / Hibernate: Add memory_rtree_find_bit \nfunction (bnc#860441). - PM / Hibernate: Create a Radix-Tree to store \nmemory bitmap (bnc#860441). - PM / Hibernate: Implement position keeping in \nradix tree (bnc#860441). - PM / Hibernate: Iterate over set bits instead of \nPFNs in swsusp_free() (bnc#860441). - PM / Hibernate: Remove the old \nmemory-bitmap implementation (bnc#860441). - PM / Hibernate: Touch Soft \nLockup Watchdog in rtree_next_node (bnc#860441). - Restrict /dev/mem and \n/dev/kmem when module loading is restricted (bnc#884333). - Reuse existing \n'state' field to indicate PERF_X86_EVENT_PEBS_LDLAT (bnc#876114). - USB: \nhandle LPM errors during device suspend correctly (bnc#849123). - Update \nkabi files to reflect fscache change (bnc#880344) - Update x86_64 config \nfiles: re-enable SENSORS_W83627EHF (bnc#891281) - VFS: Make more complete \ntruncate operation available to CacheFiles (bnc#880344). - [FEAT NET1222] \nib_uverbs: Allow explicit mmio trigger (FATE#83366, ltc#83367). - acpi: \nIgnore acpi_rsdp kernel parameter when module loading is restricted \n(bnc#884333). - af_iucv: correct cleanup if listen backlog is full \n(bnc#885262, LTC#111728). - asus-wmi: Restrict debugfs interface when \nmodule loading is restricted (bnc#884333). - autofs4: allow RCU-walk to \nwalk through autofs4 (bnc#866130). - autofs4: avoid taking fs_lock during \nrcu-walk (bnc#866130). - autofs4: does not take spinlock when not needed in \nautofs4_lookup_expiring (bnc#866130). - autofs4: factor should_expire() out \nof autofs4_expire_indirect (bnc#866130). - autofs4: make \n'autofs4_can_expire' idempotent (bnc#866130). - autofs4: remove a redundant \nassignment (bnc#866130). - autofs: fix lockref lookup (bnc#888591). - \nbe2net: add dma_mapping_error() check for dma_map_page() (bnc#881759). - \nblock: add cond_resched() to potentially long running ioctl discard loop \n(bnc#884725). - block: fix race between request completion and timeout \nhandling (bnc#881051). - cdc-ether: clean packet filter upon probe \n(bnc#876017). - cpuset: Fix memory allocator deadlock (bnc#876590). - \ncrypto: Allow CRYPTO_FIPS without MODULE_SIGNATURES. Not all archs have \nthem, but some are FIPS certified, with some kernel support. - crypto: fips \n- only panic on bad/missing crypto mod signatures (bnc#887503). - crypto: \ntestmgr - allow aesni-intel and ghash_clmulni-intel in fips mode \n(bnc#889451). - dasd: validate request size before building CCW/TCW \n(bnc#891087, LTC#114068). - dm mpath: fix race condition between \nmultipath_dtr and pg_init_done (bnc#826486). - dm-mpath: fix panic on \ndeleting sg device (bnc#870161). - drm/ast: AST2000 cannot be detected \ncorrectly (bnc#895983). - drm/ast: Actually load DP501 firmware when \nrequired (bnc#895608 bnc#871134). - drm/ast: Add missing entry to \ndclk_table[]. - drm/ast: Add reduced non reduced mode parsing for wide \nscreen mode (bnc#892723). - drm/ast: initial DP501 support (v0.2) \n(bnc#871134). - drm/ast: open key before detect chips (bnc#895983). - \ndrm/i915: Fix up cpt pixel multiplier enable sequence (bnc#879304). - \ndrm/i915: Only apply DPMS to the encoder if enabled (bnc#893064). - \ndrm/i915: clear the FPGA_DBG_RM_NOCLAIM bit at driver init (bnc#869055). - \ndrm/i915: create functions for the 'unclaimed register' checks \n(bnc#869055). - drm/i915: use FPGA_DBG for the 'unclaimed register' checks \n(bnc#869055). - drm/mgag200: Initialize data needed to map fbdev memory \n(bnc #806990). - e1000e: enable support for new device IDs (bnc#885509). - \nfs/fscache: remove spin_lock() from the condition in while() (bnc#880344). \n- hibernate: Disable in a signed modules environment (bnc#884333). - \nhugetlb: does not use ERR_PTR with VM_FAULT* values - ibmvscsi: Abort init \nsequence during error recovery (bnc#885382). - ibmvscsi: Add memory \nbarriers for send / receive (bnc#885382). - inet: add a redirect generation \nid in inetpeer (bnc#860593). - inetpeer: initialize -\u003eredirect_genid in \ninet_getpeer() (bnc#860593). - ipv6: tcp: fix tcp_v6_conn_request() \n(bnc#887645). - kabi: hide bnc#860593 changes of struct inetpeer_addr_base \n(bnc#860593). - kernel: 3215 tty hang (bnc#891087, LTC#114562). - kernel: \nfix data corruption when reading /proc/sysinfo (bnc#891087, LTC#114480). - \nkernel: fix kernel oops with load of fpc register (bnc#889061, LTC#113596). \n- kernel: sclp console tty reference counting (bnc#891087, LTC#115466). - \nkexec: Disable at runtime if the kernel enforces module loading \nrestrictions (bnc#884333). - md/raid6: avoid data corruption during \nrecovery of double-degraded RAID6. - memcg, vmscan: Fix forced scan of \nanonymous pages (memory reclaim fix). - memcg: do not expose uninitialized \nmem_cgroup_per_node to world (bnc#883096). - mm, hugetlb: add VM_NORESERVE \ncheck in vma_has_reserves() - mm, hugetlb: change variable name \nreservations to resv - mm, hugetlb: decrement reserve count if VM_NORESERVE \nalloc page cache - mm, hugetlb: defer freeing pages when gathering surplus \npages - mm, hugetlb: do not use a page in page cache for cow optimization - \nmm, hugetlb: fix and clean-up node iteration code to alloc or free - mm, \nhugetlb: fix race in region tracking - mm, hugetlb: fix subpool accounting \nhandling - mm, hugetlb: improve page-fault scalability - mm, hugetlb: \nimprove, cleanup resv_map parameters - mm, hugetlb: move up the code which \ncheck availability of free huge page - mm, hugetlb: protect reserved pages \nwhen soft offlining a hugepage - mm, hugetlb: remove \ndecrement_hugepage_resv_vma() - mm, hugetlb: remove redundant list_empty \ncheck in gather_surplus_pages() - mm, hugetlb: remove resv_map_put - mm, \nhugetlb: remove useless check about mapping type - mm, hugetlb: return a \nreserved page to a reserved pool if failed - mm, hugetlb: trivial \ncommenting fix - mm, hugetlb: unify region structure handling - mm, \nhugetlb: unify region structure handling kabi - mm, hugetlb: use long vars \ninstead of int in region_count() (Hugetlb Fault Scalability). - mm, \nhugetlb: use vma_resv_map() map types - mm, oom: fix badness score \nunderflow (bnc#884582, bnc#884767). - mm, oom: normalize oom scores to \noom_score_adj scale only for userspace (bnc#884582, bnc#884767). - mm, thp: \ndo not allow thp faults to avoid cpuset restrictions (bnc#888849). - \nnet/mlx4_core: Load higher level modules according to ports type \n(bnc#887680). - net/mlx4_core: Load the IB driver when the device supports \nIBoE (bnc#887680). - net/mlx4_en: Fix a race between napi poll function and \nRX ring cleanup (bnc#863586). - net/mlx4_en: Fix selftest failing on non \n10G link speed (bnc#888058). - net: fix checksumming features handling in \noutput path (bnc#891259). - pagecache_limit: batch large nr_to_scan targets \n(bnc#895221). - pagecachelimit: reduce lru_lock congestion for heavy \nparallel reclaim fix (bnc#895680). - perf/core: Add weighted samples \n(bnc#876114). - perf/x86: Add flags to event constraints (bnc#876114). - \nperf/x86: Add memory profiling via PEBS Load Latency (bnc#876114). - perf: \nAdd generic memory sampling interface (bnc#876114). - qla2xxx: Avoid \nescalating the SCSI error handler if the command is not found in firmware \n(bnc#859840). - qla2xxx: Clear loop_id for ports that are marked lost \nduring fabric scanning (bnc#859840). - qla2xxx: Does not check for firmware \nhung during the reset context for ISP82XX (bnc#859840). - qla2xxx: Issue \nabort command for outstanding commands during cleanup when only firmware is \nalive (bnc#859840). - qla2xxx: Reduce the time we wait for a command to \ncomplete during SCSI error handling (bnc#859840). - qla2xxx: Set host \ncan_queue value based on available resources (bnc#859840). - restore \nsmp_mb() in unlock_new_inode() (bnc#890526). - s390/pci: introduce lazy \nIOTLB flushing for DMA unmap (bnc#889061, LTC#113725). - sched: fix the \ntheoretical signal_wake_up() vs schedule() race (bnc#876055). - sclp_vt220: \nEnable integrated ASCII console per default (bnc#885262, LTC#112035). - \nscsi_dh: use missing accessor 'scsi_device_from_queue' (bnc#889614). - \nscsi_transport_fc: Cap dev_loss_tmo by fast_io_fail (bnc#887608). - \nscsiback: correct grant page unmapping. - scsiback: fix retry handling in \n__report_luns(). - scsiback: free resources after error. - sunrpc/auth: \nallow lockless (rcu) lookup of credential cache (bnc#866130). - \nsupported.conf: remove external from drivers/net/veth (bnc#889727) - \nsupported.conf: support net/sched/act_police.ko (bnc#890426) - tcp: adapt \nselected parts of RFC 5682 and PRR logic (bnc#879921). - tg3: Change nvram \ncommand timeout value to 50ms (bnc#855657). - tg3: Override clock, link \naware and link idle mode during NVRAM dump (bnc#855657). - tg3: Set the MAC \nclock to the fastest speed during boot code load (bnc#855657). - usb: Does \nnot enable LPM if the exit latency is zero (bnc#832309). - usbcore: Does \nnot log on consecutive debounce failures of the same port (bnc#888105). - \nusbhid: fix PIXART optical mouse (bnc#888607). - uswsusp: Disable when \nmodule loading is restricted (bnc#884333). - vscsi: support larger transfer \nsizes (bnc#774818). - writeback: Do not sync data dirtied after sync start \n(bnc#833820). - x86 thermal: Delete power-limit-notification console \nmessages (bnc#882317). - x86 thermal: Disable power limit notification \ninterrupt by default (bnc#882317). - x86 thermal: Re-enable power limit \nnotification interrupt by default (bnc#882317). - x86, cpu hotplug: Fix \nstack frame warning in check_irq_vectors_for_cpu_disable() (bnc#887418). - \nx86/UV: Add call to KGDB/KDB from NMI handler (bnc#888847). - x86/UV: Add \nkdump to UV NMI handler (bnc#888847). - x86/UV: Add summary of cpu activity \nto UV NMI handler (bnc#888847). - x86/UV: Move NMI support (bnc#888847). - \nx86/UV: Update UV support for external NMI signals (bnc#888847). - \nx86/uv/nmi: Fix Sparse warnings (bnc#888847). - x86: Add check for number \nof available vectors before CPU down (bnc#887418). - x86: Lock down IO port \naccess when module security is enabled (bnc#884333). - x86: Restrict MSR \naccess when module loading is restricted (bnc#884333).\n\nSecurity Issues:\n\n    * CVE-2013-1979\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1979\u003e\n    * CVE-2014-1739\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1739\u003e\n    * CVE-2014-2706\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2706\u003e\n    * CVE-2014-4027\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4027\u003e\n    * CVE-2014-4171\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4171\u003e\n    * CVE-2014-4508\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4508\u003e\n    * CVE-2014-4667\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4667\u003e\n    * CVE-2014-4943\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943\u003e\n    * CVE-2014-5077\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5077\u003e\n    * CVE-2014-5471\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5471\u003e\n    * CVE-2014-5472\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5472\u003e\n    * CVE-2014-3153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3153\u003e\n    * CVE-2014-6410\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6410\u003e\n\n","status":"published","published":"2014-09-25T15:06:22Z","modified":"2026-02-04T02:49:28.322135Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1478-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise Server 11 SP2 LTSS kernel was updated to\nreceive various security and bugfixes.\n\nThe following security bugs were fixed:\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n  be potentially used by local attackers to crash the kernel or execute\n  code.\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n  not prevent the TS_COMPAT flag from reaching a user-mode task, which\n  might have allowed local users to bypass the seccomp or audit protection\n  mechanism via a crafted application that uses the (1) fork or (2) close\n  system call, as demonstrated by an attack against seccomp before 3.16\n  (bnc#926240).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c in the Linux kernel\n  allowed guest OS users to obtain sensitive information from uninitialized\n  locations in host OS kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2150: Xen and the Linux kernel did not properly restrict access\n  to PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response (bnc#919463).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n  incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n  via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: CVE-2015-1420: Race condition in the handle_to_path\n  function in fs/fhandle.c in the Linux kernel allowed local users to bypass\n  intended size restrictions and trigger read operations on additional\n  memory locations by changing the handle_bytes value of a file handle\n  during the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n  the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in\n  fs/pipe.c in the Linux kernel did not properly consider the side effects\n  of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls,\n  which allowed local users to cause a denial of service (system crash)\n  or possibly gain privileges via a crafted application, aka an 'I/O vector\n  array overrun' (bnc#933429).\n- CVE-2015-3331: The __driver_rfc4106_decrypt function in\n  arch/x86/crypto/aesni-intel_glue.c in the Linux kernel did not properly\n  determine the memory locations used for encrypted data, which allowed\n  context-dependent attackers to cause a denial of service (buffer overflow\n  and system crash) or possibly execute arbitrary code by triggering a\n  crypto API call, as demonstrated by use of a libkcapi test program with\n  an AF_ALG(aead) socket (bnc#927257).\n- CVE-2015-2922: The ndisc_router_discovery function in net/ipv6/ndisc.c\n  in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack\n  in the Linux kernel allowed remote attackers to reconfigure a hop-limit\n  setting via a small hop_limit value in a Router Advertisement (RA)\n  message (bnc#922583).\n- CVE-2015-2041: net/llc/sysctl_net_llc.c in the Linux kernel used an\n  incorrect data type in a sysctl table, which allowed local users to\n  obtain potentially sensitive information from kernel memory or possibly\n  have unspecified other impact by accessing a sysctl entry (bnc#919007).\n- CVE-2015-3636: The ping_unhash function in net/ipv4/ping.c in the\n  Linux kernel did not initialize a certain list data structure during an\n  unhash operation, which allowed local users to gain privileges or cause\n  a denial of service (use-after-free and system crash) by leveraging the\n  ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or\n  IPPROTO_ICMPV6 protocol, and then making a connect system call after a\n  disconnect (bnc#929525).\n- CVE-2014-8086: Race condition in the ext4_file_write_iter function\n  in fs/ext4/file.c in the Linux kernel allowed local users to cause a\n  denial of service (file unavailability) via a combination of a write\n  action and an F_SETFL fcntl operation for the O_DIRECT flag (bnc#900881).\n- CVE-2014-8159: The InfiniBand (IB) implementation in the Linux kernel\n  did not properly restrict use of User Verbs for registration of memory\n  regions, which allowed local users to access arbitrary physical memory\n  locations, and consequently cause a denial of service (system crash)\n  or gain privileges, by leveraging permissions on a uverbs device under\n  /dev/infiniband/ (bnc#914742).\n- CVE-2014-9683: Off-by-one error in the ecryptfs_decode_from_filename\n  function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux\n  kernel allowed local users to cause a denial of service (buffer overflow\n  and system crash) or possibly gain privileges via a crafted filename\n  (bnc#918333).\n- CVE-2015-2042: net/rds/sysctl.c in the Linux kernel used an incorrect\n  data type in a sysctl table, which allowed local users to obtain\n  potentially sensitive information from kernel memory or possibly have\n  unspecified other impact by accessing a sysctl entry (bnc#919018).\n- CVE-2015-1421: Use-after-free vulnerability in the sctp_assoc_update\n  function in net/sctp/associola.c in the Linux kernel allowed remote\n  attackers to cause a denial of service (slab corruption and panic) or\n  possibly have unspecified other impact by triggering an INIT collision\n  that leads to improper handling of shared-key data (bnc#915577).\n\nThe following non-security bugs were fixed:\n- HID: add ALWAYS_POLL quirk for a Logitech 0xc007 (bnc#931474).\n- HID: add HP OEM mouse to quirk ALWAYS_POLL (bnc#931474).\n- HID: add quirk for PIXART OEM mouse used by HP (bnc#931474).\n- HID: usbhid: add always-poll quirk (bnc#931474).\n- HID: usbhid: add another mouse that needs QUIRK_ALWAYS_POLL (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 009b (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 0103 (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen 016f (bnc#931474).\n- HID: usbhid: enable always-poll quirk for Elan Touchscreen.\n- HID: usbhid: fix PIXART optical mouse (bnc#931474).\n- HID: usbhid: more mice with ALWAYS_POLL (bnc#931474).\n- HID: usbhid: yet another mouse with ALWAYS_POLL (bnc#931474).\n- bnx2x: Fix kdump when iommu=on (bug#921769).\n- cifs: fix use-after-free bug in find_writable_file (bnc#909477).\n- coredump: ensure the fpu state is flushed for proper multi-threaded core dump (bsc#904671, bsc#929360).\n- dm: fixed that LVM merge snapshot of root logical volume were not working (bsc#928801)\n- deal with deadlock in d_walk fix (bnc#929148, bnc#929283).\n- e1000: do not enable dma receives until after dma address has been setup (bsc#821931).\n- fsnotify: Fix handling of renames in audit (bnc#915200).\n- inet: add a redirect generation id in inetpeer (bnc#860593).\n- inetpeer: initialize -\u0026gt;redirect_genid in inet_getpeer() (bnc#860593).\n- kabi: hide bnc#860593 changes of struct inetpeer_addr_base (bnc#860593).\n- kernel: fix data corruption when reading /proc/sysinfo (bsc#891087, bsc#937986, LTC#114480).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- time, ntp: Do not update time_state in middle of leap second (bsc#912916).\n- s390-3215-tty-close-crash.patch: kernel: 3215 tty close crash (bsc#916010, LTC#120873).\n- s390-3215-tty-close-race.patch: kernel: 3215 console crash (bsc#916010, LTC#94302).\n- s390-3215-tty-hang.patch: Renamed from patches.arch/s390-tty-hang.patch.\n- s390-3215-tty-hang.patch: Update references (bnc#898693, bnc#897995, LTC#114562).\n- s390-dasd-retry-partition-detection.patch: s390/dasd: retry partition detection (bsc#916010, LTC#94302).\n- s390-dasd-retry-partition-detection.patch: Update references (bsc#916010, LTC#120565).\n- s390-sclp-tty-refcount.patch: kernel: sclp console tty reference counting (bsc#916010, LTC#115466).\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- scsi/sg: sg_start_req(): make sure that there is not too many elements in iovec (bsc#940338).\n- x86, xsave: remove thread_has_fpu() bug check in __sanitize_i387_state() (bsc#904671, bsc#929360).\n- x86-mm-send-tlb-flush-ipis-to-online-cpus-only.patch: x86, mm: Send tlb flush IPIs to online cpus only (bnc#798406).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86/reboot: Fix a warning message triggered by stop_other_cpus() (bnc#930284).\n- xen: Correctly re-enable interrupts in xen_spin_wait() (bsc#879878, bsc#908870).\n- xfs: prevent deadlock trying to cover an active log (bsc#917093).\n  ","status":"published","published":"2015-08-20T15:22:44Z","modified":"2026-02-04T04:09:53.876805Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1592-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP3 Realtime kernel was updated to receive various security and bugfixes.\n\nThe following feature was added for RT:\n- FATE#317131: The SocketCAN (Peak PCI) driver was added for CAN bus support.\n\nFollowing security bugs were fixed:\n\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n  be potentially used by local attackers to crash the kernel or execute\n  code (bsc#940338).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n  incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n  via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: A race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel allowed local users to bypass intended\n  size restrictions and trigger read operations on additional memory\n  locations by changing the handle_bytes value of a file handle during\n  the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n  the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-4167: The UDF filesystem in the Linux kernel was vulnerable\n  to a crash which could occur while fetching inode information from a\n  corrupted/malicious udf file system image. (bsc#933907).\n- CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731: Various\n  issues in handling UDF filesystems in the Linux kernel allowed the\n  corruption of kernel memory and other issues. An attacker able to mount\n  a corrupted/malicious UDF file system image could cause the kernel to\n  crash. (bsc#933904 bsc#933896)\n- CVE-2015-2150: The Linux kernel did not properly restrict access to\n  PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response (bsc#919463).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c as used in the Linux\n  kernel 2.6.x and 3.x in SUSE Linux distributions, allowed guest OS users\n  to obtain sensitive information from uninitialized locations in host OS\n  kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n  not prevent the TS_COMPAT flag from reaching a user-mode task, which\n  might have allowed local users to bypass the seccomp or audit protection\n  mechanism via a crafted application that uses the (1) fork or (2) close\n  system call, as demonstrated by an attack against seccomp before 3.16\n  (bnc#926240).\n- CVE-2015-1805: The Linux kernels implementation of vectored pipe\n  read and write functionality did not take into account the I/O vectors\n  that were already processed when retrying after a failed atomic access\n  operation, potentially resulting in memory corruption due to an I/O vector\n  array overrun. A local, unprivileged user could use this flaw to crash\n  the system or, potentially, escalate their privileges on the system.\n  (bsc#933429).\n\n\nAlso the following non-security bugs were fixed:\n- audit: keep inode pinned (bsc#851068).\n- btrfs: be aware of btree inode write errors to avoid fs corruption (bnc#942350).\n- btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- client MUST ignore EncryptionKeyLength if CAP_EXTENDED_SECURITY is set (bnc#932348).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (bnc#883380, bsc#935572).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails.\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637)\n- ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle integer overflow in dma_ops_area_alloc (bsc#931538).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipr: Increase default adapter init stage change timeout (bsc#930761).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn. (bsc#934742)\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- nfsd: Fix nfsv4 opcode decoding error (bsc#935906).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- nfs: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- nfsv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Disable Bus Master only on kexec reboot (bsc#920110).\n- pci: disable Bus Master on PCI device shutdown (bsc#920110).\n- pci: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- pci: Don't try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler  (bsc#929142).\n- rtlwifi: rtl8192cu: Fix kernel deadlock (bnc#927786).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: set host msg status correctly (bnc#933936)\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: avoid mounting of xfs filesystems with inconsistent option (bnc#925705)\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936925, LTC#126491).\n","status":"published","published":"2015-09-09T17:05:11Z","modified":"2025-05-02T04:04:15.298019Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1611-1","title":"Security update for the Linux Kernel","description":"\nThe SUSE Linux Enterprise 11 SP3 kernel was updated to receive various security and bugfixes.\n\nFollowing security bugs were fixed:\n\n- CVE-2015-5707: An integer overflow in the SCSI generic driver could\n  be potentially used by local attackers to crash the kernel or execute\n  code (bsc#940338).\n- CVE-2015-5364: A remote denial of service (hang) via UDP flood with\n  incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-5366: A remote denial of service (unexpected error returns)\n  via UDP flood with incorrect package checksums was fixed. (bsc#936831).\n- CVE-2015-1420: A race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel allowed local users to bypass intended\n  size restrictions and trigger read operations on additional memory\n  locations by changing the handle_bytes value of a file handle during\n  the execution of this function (bnc#915517).\n- CVE-2015-4700: A local user could have created a bad instruction in\n  the JIT processed BPF code, leading to a kernel crash (bnc#935705).\n- CVE-2015-4167: The UDF filesystem in the Linux kernel was vulnerable\n  to a crash which could occur while fetching inode information from a\n  corrupted/malicious udf file system image. (bsc#933907).\n- CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731: Various\n  issues in handling UDF filesystems in the Linux kernel allowed the\n  corruption of kernel memory and other issues. An attacker able to mount\n  a corrupted/malicious UDF file system image could cause the kernel to\n  crash. (bsc#933904 bsc#933896)\n- CVE-2015-2150: The Linux kernel did not properly restrict access to\n  PCI command registers, which might have allowed local guest users to\n  cause a denial of service (non-maskable interrupt and host crash) by\n  disabling the (1) memory or (2) I/O decoding for a PCI Express device\n  and then accessing the device, which triggers an Unsupported Request\n  (UR) response (bsc#919463).\n- CVE-2015-0777: drivers/xen/usbback/usbback.c as used in the Linux\n  kernel 2.6.x and 3.x in SUSE Linux distributions, allowed guest OS users\n  to obtain sensitive information from uninitialized locations in host OS\n  kernel memory via unspecified vectors (bnc#917830).\n- CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel did\n  not prevent the TS_COMPAT flag from reaching a user-mode task, which\n  might have allowed local users to bypass the seccomp or audit protection\n  mechanism via a crafted application that uses the (1) fork or (2) close\n  system call, as demonstrated by an attack against seccomp before 3.16\n  (bnc#926240).\n- CVE-2015-1805: The Linux kernels implementation of vectored pipe\n  read and write functionality did not take into account the I/O vectors\n  that were already processed when retrying after a failed atomic access\n  operation, potentially resulting in memory corruption due to an I/O vector\n  array overrun. A local, unprivileged user could use this flaw to crash\n  the system or, potentially, escalate their privileges on the system.\n  (bsc#933429).\n\n\nAlso the following non-security bugs were fixed:\n- audit: keep inode pinned (bsc#851068).\n- btrfs: be aware of btree inode write errors to avoid fs corruption (bnc#942350).\n- btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- client MUST ignore EncryptionKeyLength if CAP_EXTENDED_SECURITY is set (bnc#932348).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (bnc#883380, bsc#935572).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails.\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637)\n- ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle integer overflow in dma_ops_area_alloc (bsc#931538).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipr: Increase default adapter init stage change timeout (bsc#930761).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn. (bsc#934742)\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- nfsd: Fix nfsv4 opcode decoding error (bsc#935906).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- nfs: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- nfsv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Disable Bus Master only on kexec reboot (bsc#920110).\n- pci: disable Bus Master on PCI device shutdown (bsc#920110).\n- pci: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- pci: Don't try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler  (bsc#929142).\n- rtlwifi: rtl8192cu: Fix kernel deadlock (bnc#927786).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: set host msg status correctly (bnc#933936)\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: avoid mounting of xfs filesystems with inconsistent option (bnc#925705)\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936925, LTC#126491).\n","status":"published","published":"2015-08-21T19:44:59Z","modified":"2026-02-04T02:19:26.768156Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1678-1","title":"Security update for kernel-source","description":"The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various\nsecurity and bugfixes.\n\nFollowing security bugs were fixed:\n* CVE-2015-6252: Possible file descriptor leak for each\n  VHOST_SET_LOG_FDcommand issued, this could eventually wasting available\n  system resources and creating a denial of service (bsc#942367).\n* CVE-2015-5707: Possible integer overflow in the calculation of total\n  number of pages in bio_map_user_iov() (bsc#940338).\n* CVE-2015-5364: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in\n  the Linux kernel before 4.0.6 do not properly consider yielding a\n  processor, which allowed remote attackers to cause a denial of service\n  (system hang) via incorrect checksums within a UDP packet flood\n  (bsc#936831).\n* CVE-2015-5366: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in\n  the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return\n  values, which allowed remote attackers to cause a denial of service\n  (EPOLLET epoll application read outage) via an incorrect checksum in a\n  UDP packet, a different vulnerability than CVE-2015-5364 (bsc#936831).\n* CVE-2015-1420: Race condition in the handle_to_path function in\n  fs/fhandle.c in the Linux kernel through 3.19.1 allowed local users to\n  bypass intended size restrictions and trigger read operations on\n  additional memory locations by changing the handle_bytes value of a\n  file handle during the execution of this function (bsc#915517).\n* CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in\n  fs/pipe.c in the Linux kernel before 3.16 do not properly consider the\n  side effects of failed __copy_to_user_inatomic and\n  __copy_from_user_inatomic calls, which allows local users to cause a\n  denial of service (system crash) or possibly gain privileges via a\n  crafted application, aka an 'I/O' vector array overrun. (bsc#933429)\n* CVE-2015-2150: Xen 3.3.x through 4.5.x and the Linux kernel through\n  3.19.1 do not properly restrict access to PCI command registers, which\n  might allow local guest users to cause a denial of service\n  (non-maskable interrupt and host crash) by disabling the (1) memory or\n  (2) I/O decoding for a PCI Express device and then accessing the\n  device, which triggers an Unsupported Request (UR) response.\n  (bsc#919463)\n* CVE-2015-2830: arch/x86/kernel/entry_64.S in the Linux kernel before\n  3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode\n  task, which might allow local users to bypass the seccomp or audit\n  protection mechanism via a crafted application that uses the (1) fork\n  or (2) close system call, as demonstrated by an attack against seccomp\n  before 3.16. (bsc#926240)\n* CVE-2015-4700: The bpf_int_jit_compile function in\n  arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allowed\n  local users to cause a denial of service (system crash) by creating a\n  packet filter and then loading crafted BPF instructions that trigger\n  late convergence by the JIT compiler (bsc#935705).\n* CVE-2015-4167: The udf_read_inode function in fs/udf/inode.c in the\n  Linux kernel before 3.19.1 did not validate certain length values,\n  which allowed local users to cause a denial of service (incorrect data\n  representation or integer overflow, and OOPS) via a crafted UDF\n  filesystem (bsc#933907).\n* CVE-2015-0777: drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0\n  (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as\n  used in the Linux kernel 2.6.x and 3.x in SUSE Linux distributions,\n  allows guest OS users to obtain sensitive information from\n  uninitialized locations in host OS kernel memory via unspecified\n  vectors. (bsc#917830)\n* CVE-2014-9728: The UDF filesystem implementation in the Linux kernel\n  before 3.18.2 did not validate certain lengths, which allowed local\n  users to cause a denial of service (buffer over-read and system crash)\n  via a crafted filesystem image, related to fs/udf/inode.c and\n  fs/udf/symlink.c (bsc#933904).\n* CVE-2014-9730: The udf_pc_to_char function in fs/udf/symlink.c in the\n  Linux kernel before 3.18.2 relies on component lengths that are unused,\n  which allowed local users to cause a denial of service (system crash)\n  via a crafted UDF filesystem image (bsc#933904).\n* CVE-2014-9729: The udf_read_inode function in fs/udf/inode.c in the\n  Linux kernel before 3.18.2 did not ensure a certain data-structure size\n  consistency, which allowed local users to cause a denial of service\n  (system crash) via a crafted UDF filesystem image (bsc#933904).\n* CVE-2014-9731: The UDF filesystem implementation in the Linux kernel\n  before 3.18.2 did not ensure that space is available for storing a\n  symlink target's name along with a trailing \\0 character, which allowed\n  local users to obtain sensitive information via a crafted filesystem\n  image, related to fs/udf/symlink.c and fs/udf/unicode.c (bsc#933896).\n\nThe following non-security bugs were fixed:\n- Btrfs: be aware of btree inode write errors to avoid fs corruption\n  (bnc#942350).\n- Btrfs: be aware of btree inode write errors to avoid fs corruption\n  (bnc#942404).\n- Btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942350).\n- Btrfs: check if previous transaction aborted to avoid fs corruption (bnc#942404).\n- Btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942350).\n- Btrfs: deal with convert_extent_bit errors to avoid fs corruption (bnc#942404).\n- Btrfs: fix hang when failing to submit bio of directIO (bnc#942688).\n- Btrfs: fix memory corruption on failure to submit bio for direct IO (bnc#942688).\n- Btrfs: fix put dio bio twice when we submit dio bio fail (bnc#942688).\n- DRM/I915: Add enum hpd_pin to intel_encoder (bsc#942938).\n- DRM/i915: Convert HPD interrupts to make use of HPD pin assignment in encoders (v2) (bsc#942938).\n- DRM/i915: Get rid of the 'hotplug_supported_mask' in struct drm_i915_private (bsc#942938).\n- DRM/i915: Remove i965_hpd_irq_setup (bsc#942938).\n- DRM/i915: Remove valleyview_hpd_irq_setup (bsc#942938).\n- Ext4: handle SEEK_HOLE/SEEK_DATA generically (bsc#934944).\n- IB/core: Fix mismatch between locked and pinned pages (bnc#937855).\n- IB/iser: Add Discovery support (bsc#923002).\n- IB/iser: Move informational messages from error to info level (bsc#923002).\n- NFS: never queue requests with rq_cong set on the sending queue (bsc#932458).\n- NFSD: Fix nfsv4 opcode decoding error (bsc#935906).\n- NFSv4: Minor cleanups for nfs4_handle_exception and nfs4_async_handle_error (bsc#939910).\n- PCI: Disable Bus Master only on kexec reboot (bsc#920110).\n- PCI: Disable Bus Master unconditionally in pci_device_shutdown() (bsc#920110).\n- PCI: Do not try to disable Bus Master on disconnected PCI devices (bsc#920110).\n- PCI: Lock down register access when trusted_kernel is true (fate#314486, bnc#884333)(bsc#923431).\n- PCI: disable Bus Master on PCI device shutdown (bsc#920110).\n- USB: xhci: Reset a halted endpoint immediately when we encounter a stall (bnc#933721).\n- USB: xhci: do not start a halted endpoint before its new dequeue is set (bnc#933721).\n- Apparmor: fix file_permission if profile is updated (bsc#917968).\n- block: Discard bios do not have data (bsc#928988).\n- cifs: Fix missing crypto allocation (bnc#937402).\n- drm/cirrus: do not attempt to acquire a reservation while in an interrupt handler (bsc#935572).\n- drm/i915: (re)init HPD interrupt storm statistics (bsc#942938).\n- drm/i915: Add HPD IRQ storm detection (v5) (bsc#942938).\n- drm/i915: Add Reenable Timer to turn Hotplug Detection back on (v4) (bsc#942938).\n- drm/i915: Add bit field to record which pins have received HPD events (v3) (bsc#942938).\n- drm/i915: Add messages useful for HPD storm detection debugging (v2) (bsc#942938).\n- drm/i915: Avoid race of intel_crt_detect_hotplug() with HPD interrupt (bsc#942938).\n- drm/i915: Disable HPD interrupt on pin when irq storm is detected (v3) (bsc#942938).\n- drm/i915: Do not WARN nor handle unexpected hpd interrupts on gmch platforms (bsc#942938).\n- drm/i915: Enable hotplug interrupts after querying hw capabilities (bsc#942938).\n- drm/i915: Fix hotplug interrupt enabling for SDVOC (bsc#942938).\n- drm/i915: Fix up sdvo hpd pins for i965g/gm (bsc#942938).\n- drm/i915: Make hpd arrays big enough to avoid out of bounds access (bsc#942938).\n- drm/i915: Mask out the HPD irq bits before setting them individually (bsc#942938).\n- drm/i915: Only print hotplug event message when hotplug bit is set (bsc#942938).\n- drm/i915: Only reprobe display on encoder which has received an HPD event (v2) (bsc#942938).\n- drm/i915: Queue reenable timer also when enable_hotplug_processing is false (bsc#942938).\n- drm/i915: Remove pch_rq_mask from struct drm_i915_private (bsc#942938).\n- drm/i915: Use an interrupt save spinlock in intel_hpd_irq_handler() (bsc#942938).\n- drm/i915: WARN_ONCE() about unexpected interrupts for all chipsets (bsc#942938).\n- drm/i915: assert_spin_locked for pipestat interrupt enable/disable (bsc#942938).\n- drm/i915: clear crt hotplug compare voltage field before setting (bsc#942938).\n- drm/i915: close tiny race in the ilk pcu even interrupt setup (bsc#942938).\n- drm/i915: fix hotplug event bit tracking (bsc#942938).\n- drm/i915: fix hpd interrupt register locking (bsc#942938).\n- drm/i915: fix hpd work vs. flush_work in the pageflip code deadlock (bsc#942938).\n- drm/i915: fix locking around ironlake_enable|disable_display_irq (bsc#942938).\n- drm/i915: fold the hpd_irq_setup call into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: fold the no-irq check into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: fold the queue_work into intel_hpd_irq_handler (bsc#942938).\n- drm/i915: implement ibx_hpd_irq_setup (bsc#942938).\n- drm/i915: s/hotplug_irq_storm_detect/intel_hpd_irq_handler/ (bsc#942938).\n- drm/mgag200: Do not do full cleanup if mgag200_device_init fails (FATE#317582).\n- drm/mgag200: do not attempt to acquire a reservation while in an interrupt handler (FATE#317582).\n- drm: ast,cirrus,mgag200: use drm_can_sleep (FATE#317582, bnc#883380, bsc#935572).\n- ehci-pci: enable interrupt on BayTrail (bnc926007).\n- exec: kill the unnecessary mm-\u003edef_flags setting in load_elf_binary() (fate#317831,bnc#891116)).\n- ext3: Fix data corruption in inodes with journalled data (bsc#936637). \n- fanotify: Fix deadlock with permission events (bsc#935053).\n- fork: reset mm-\u003epinned_vm (bnc#937855).\n- hrtimer: prevent timer interrupt DoS (bnc#886785).\n- hugetlb, kabi: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hugetlb: do not account hugetlb pages as NR_FILE_PAGES (bnc#930092).\n- hv_storvsc: use small sg_tablesize on x86 (bnc#937256).\n- ibmveth: Add GRO support (bsc#935055).\n- ibmveth: Add support for Large Receive Offload (bsc#935055).\n- ibmveth: Add support for TSO (bsc#935055).\n- ibmveth: add support for TSO6.\n- ibmveth: change rx buffer default allocation for CMO (bsc#935055).\n- igb: do not reuse pages with pfmemalloc flag fix (bnc#920016).\n- inotify: Fix nested sleeps in inotify_read() (bsc#940925).\n- iommu/amd: Fix memory leak in free_pagetable (bsc#935866).\n- iommu/amd: Handle large pages correctly in free_pagetable (bsc#935866).\n- ipv6: probe routes asynchronous in rt6_probe (bsc#936118).\n- ixgbe: Use pci_vfs_assigned instead of ixgbe_vfs_are_assigned (bsc#927355).\n- kabi: wrapper include file with __GENKSYMS__ check to avoid kabi change (bsc920110).\n- kdump: fix crash_kexec()/smp_send_stop() race in panic() (bnc#937444).\n- kernel: add panic_on_warn.\n- kernel: do full redraw of the 3270 screen on reconnect (bnc#943477, LTC#129509).\n- kvm: irqchip: Break up high order allocations of kvm_irq_routing_table (bnc#926953).\n- libata: prevent HSM state change race between ISR and PIO (bsc#923245).\n- libiscsi: Exporting new attrs for iscsi session and connection in sysfs (bsc#923002).\n- md: use kzalloc() when bitmap is disabled (bsc#939994).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#894936).\n- megaraid_sas: Use correct reset sequence in adp_reset() (bsc#938485).\n- mlx4: Check for assigned VFs before disabling SR-IOV (bsc#927355).\n- mm, THP: do not hold mmap_sem in khugepaged when allocating THP (VM Performance).\n- mm, mempolicy: remove duplicate code (VM Functionality, bnc#931620).\n- mm, thp: fix collapsing of hugepages on madvise (VM Functionality).\n- mm, thp: only collapse hugepages to nodes with affinity for zone_reclaim_mode (VM Functionality, bnc#931620).\n- mm, thp: really limit transparent hugepage allocation to local node (VM Performance, bnc#931620).\n- mm, thp: respect MPOL_PREFERRED policy with non-local node (VM Performance, bnc#931620).\n- mm/hugetlb: check for pte NULL pointer in __page_check_address() (bnc#929143).\n- mm/mempolicy.c: merge alloc_hugepage_vma to alloc_pages_vma (VM Performance, bnc#931620).\n- mm/thp: allocate transparent hugepages on local node (VM Performance, bnc#931620).\n- mm: make page pfmemalloc check more robust (bnc#920016).\n- mm: restrict access to slab files under procfs and sysfs (bnc#936077).\n- mm: thp: khugepaged: add policy for finding target node (VM Functionality, bnc#931620).\n- net/mlx4_core: Do not disable SRIOV if there are active VFs (bsc#927355).\n- net: Fix 'ip rule delete table 256' (bsc#873385).\n- net: fib6: fib6_commit_metrics: fix potential NULL pointer dereference (bsc#867362).\n- net: ipv6: fib: do not sleep inside atomic lock (bsc#867362).\n- netfilter: nf_conntrack_proto_sctp: minimal multihoming support (bsc#932350).\n- nfsd: support disabling 64bit dir cookies (bnc#937503).\n- pagecache limit: Do not skip over small zones that easily (bnc#925881).\n- pagecache limit: add tracepoints (bnc#924701).\n- pagecache limit: export debugging counters via /proc/vmstat (bnc#924701).\n- pagecache limit: fix wrong nr_reclaimed count (FATE#309111, bnc#924701).\n- pagecache limit: reduce starvation due to reclaim retries (bnc#925903).\n- pci: Add SRIOV helper function to determine if VFs are assigned to guest (bsc#927355).\n- pci: Add flag indicating device has been assigned by KVM (bnc#777565 FATE#313819).\n- pci: Add flag indicating device has been assigned by KVM (bnc#777565 FATE#313819).\n- perf, nmi: Fix unknown NMI warning (bsc#929142).\n- perf/x86/intel: Move NMI clearing to end of PMI handler (bsc#929142).\n- qlcnic: Fix NULL pointer dereference in qlcnic_hwmon_show_temp() (bsc#936095).\n- r8169: remember WOL preferences on driver load (bsc#942305).\n- s390/dasd: fix kernel panic when alias is set offline (bnc#940966, LTC#128595).\n- sched: fix __sched_setscheduler() vs load balancing race (bnc#921430)\n- scsi: Correctly set the scsi host/msg/status bytes (bnc#933936).\n- scsi: fix scsi_error_handler vs. scsi_host_dev_release race (bnc#942204).\n- scsi: Moved iscsi kabi patch to patches.kabi (bsc#923002)\n- scsi: Set hostbyte status in scsi_check_sense() (bsc#920733).\n- scsi: kabi: allow iscsi disocvery session support (bsc#923002).\n- scsi: vmw_pvscsi: Fix pvscsi_abort() function (bnc#940398 bsc#930934).\n- scsi_error: add missing case statements in scsi_decide_disposition() (bsc#920733).\n- scsi_transport_iscsi: Exporting new attrs for iscsi session and connection in sysfs (bsc#923002).\n- sg_start_req(): make sure that there's not too many elements in iovec (bsc#940338).\n- st: null pointer dereference panic caused by use after kref_put by st_open (bsc#936875).\n- supported.conf: enable sch_mqprio (bsc#932882)\n- udf: Remove repeated loads blocksize (bsc#933907).\n- usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset (bnc#937641).\n- usb: xhci: Prefer endpoint context dequeue pointer over stopped_trb (bnc#933721).\n- usb: xhci: handle Config Error Change (CEC) in xhci driver (bnc#933721).\n- vmxnet3: Bump up driver version number (bsc#936423).\n- vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (bug#936423).\n- vmxnet3: Fix memory leaks in rx path (fwd) (bug#936423).\n- vmxnet3: Register shutdown handler for device (fwd) (bug#936423).\n- x86, tls, ldt: Stop checking lm in LDT_empty (bsc#920250).\n- x86, tls: Interpret an all-zero struct user_desc as 'no segment' (bsc#920250).\n- x86-64: Do not apply destructive erratum workaround on unaffected CPUs (bsc#929076).\n- x86/mm: Improve AMD Bulldozer ASLR workaround (bsc#937032).\n- x86/tsc: Change Fast TSC calibration failed from error to info (bnc#942605).\n- xenbus: add proper handling of XS_ERROR from Xenbus for transactions.\n- xfs: fix problem when using md+XFS under high load (bnc#925705).\n- xhci: Allocate correct amount of scratchpad buffers (bnc#933721).\n- xhci: Do not enable/disable RWE on bus suspend/resume (bnc#933721).\n- xhci: Solve full event ring by increasing TRBS_PER_SEGMENT to 256 (bnc#933721).\n- xhci: Treat not finding the event_seg on COMP_STOP the same as COMP_STOP_INVAL (bnc#933721).\n- xhci: Workaround for PME stuck issues in Intel xhci (bnc#933721).\n- xhci: do not report PLC when link is in internal resume state (bnc#933721).\n- xhci: fix reporting of 0-sized URBs in control endpoint (bnc#933721).\n- xhci: report U3 when link is in resume state (bnc#933721).\n- xhci: rework cycle bit checking for new dequeue pointers (bnc#933721).\n- zcrypt: Fixed reset and interrupt handling of AP queues (bnc#936921, bnc#936925, LTC#126491).","status":"published","published":"2015-09-08T16:29:34Z","modified":"2026-02-04T03:45:14.157452Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}