Security update for kernel-firmware (important)

An update that fixes four vulnerabilities is now available.

Description:

This update for kernel-firmware fixes the following issues:

• CVE-2020-12373: Fixed an expired pointer dereference may lead to DOS
  (bsc#1181738).
• CVE-2020-12364: Fixed a null pointer reference may lead to DOS
  (bsc#1181736).
• CVE-2020-12362: Fixed an integer overflow which could have led to
  privilege escalation (bsc#1181720).
• CVE-2020-12363: Fixed an improper input validation which may have led to
  DOS (bsc#1181735).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.2:

  zypper in -t patch openSUSE-2021-407=1