Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0008-1

Опубликовано: 03 янв. 2018
Источник: suse-cvrf

Описание

Security update for kernel-firmware

This update for kernel-firmware fixes the following issues:

  • Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715)

This new firmware disables branch prediction on AMD family 17h processor to mitigate a attack on the branch predictor that could lead to information disclosure from e.g. kernel memory (bsc#1068032 CVE-2017-5715).

Список пакетов

SUSE Linux Enterprise Desktop 12 SP2
kernel-firmware-20170530-21.16.1
ucode-amd-20170530-21.16.1
SUSE Linux Enterprise Desktop 12 SP3
kernel-firmware-20170530-21.16.1
ucode-amd-20170530-21.16.1
SUSE Linux Enterprise Server 12 SP2
kernel-firmware-20170530-21.16.1
ucode-amd-20170530-21.16.1
SUSE Linux Enterprise Server 12 SP3
kernel-firmware-20170530-21.16.1
ucode-amd-20170530-21.16.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
kernel-firmware-20170530-21.16.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
kernel-firmware-20170530-21.16.1
ucode-amd-20170530-21.16.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
kernel-firmware-20170530-21.16.1
ucode-amd-20170530-21.16.1

Ссылки

Описание

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP2:kernel-firmware-20170530-21.16.1
SUSE Linux Enterprise Desktop 12 SP2:ucode-amd-20170530-21.16.1
SUSE Linux Enterprise Desktop 12 SP3:kernel-firmware-20170530-21.16.1
SUSE Linux Enterprise Desktop 12 SP3:ucode-amd-20170530-21.16.1
Ссылки