SUSE-SU-2024:4397-1

Details

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).
CVE-2024-50290: media: cx24116: prevent overflows on SNR calculus (bsc#1233479).
CVE-2024-53063: media: dvbdev: prevent the risk of out of memory access (bsc#1233557).

Affected Packages(14 packages)

kernel-default

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.171.1

kernel-default-base

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.171.1

kernel-default-devel

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.171.1

kernel-ec2

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.171.1

kernel-ec2-base

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.171.1

kernel-ec2-devel

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.171.1

kernel-source

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.171.1

kernel-syms

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.171.1

kernel-trace

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.171.1

kernel-trace-base

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.171.1

References

REPORT

https://bugzilla.suse.com/1232432

REPORT

https://bugzilla.suse.com/1233479

REPORT

https://bugzilla.suse.com/1233557

WEB

https://www.suse.com/security/cve/CVE-2024-49995

WEB

https://www.suse.com/security/cve/CVE-2024-50290

WEB

https://www.suse.com/security/cve/CVE-2024-53063

ADVISORY

https://www.suse.com/support/update/announcement/2024/suse-su-20244397-1/