Описание
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes.
This update is only provided as a fix update for IBM Z platform.
- CVE-2017-5753 / 'Spectre Attack': IBM Z fixes were included but not enabled in the previous update. This update enables those fixes.
- CVE-2017-5715 / 'Spectre Attack': IBM Z fixes were already included in the previous update. A bugfix for the patches has been applied on top.
- CVE-2017-5754: The IBM Z architecture is not affected by the 'Meltdown' attack.
Список пакетов
SUSE Linux Enterprise Server 12 SP1-LTSS
kernel-default-3.12.74-60.64.72.1
kernel-default-base-3.12.74-60.64.72.1
kernel-default-devel-3.12.74-60.64.72.1
kernel-default-man-3.12.74-60.64.72.1
kernel-devel-3.12.74-60.64.72.1
kernel-macros-3.12.74-60.64.72.1
kernel-source-3.12.74-60.64.72.1
kernel-syms-3.12.74-60.64.72.1
Ссылки
- Link for SUSE-SU-2018:0114-1
- E-Mail link for SUSE-SU-2018:0114-1
- SUSE Security Ratings
- SUSE Bug 1068032
- SUSE CVE CVE-2017-5715 page
- SUSE CVE CVE-2017-5753 page
Описание
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.72.1
SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.72.1
SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.72.1
SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.72.1
Ссылки
- CVE-2017-5715
- SUSE Bug 1068032
- SUSE Bug 1074562
- SUSE Bug 1074578
- SUSE Bug 1074701
- SUSE Bug 1074741
- SUSE Bug 1074919
- SUSE Bug 1075006
- SUSE Bug 1075007
- SUSE Bug 1075262
- SUSE Bug 1075419
- SUSE Bug 1076115
- SUSE Bug 1076372
- SUSE Bug 1076606
- SUSE Bug 1078353
- SUSE Bug 1080039
- SUSE Bug 1087887
- SUSE Bug 1087939
- SUSE Bug 1088147
- SUSE Bug 1089055
Описание
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-3.12.74-60.64.72.1
SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-base-3.12.74-60.64.72.1
SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-devel-3.12.74-60.64.72.1
SUSE Linux Enterprise Server 12 SP1-LTSS:kernel-default-man-3.12.74-60.64.72.1
Ссылки
- CVE-2017-5753
- SUSE Bug 1068032
- SUSE Bug 1074562
- SUSE Bug 1074578
- SUSE Bug 1074701
- SUSE Bug 1075006
- SUSE Bug 1075419
- SUSE Bug 1075748
- SUSE Bug 1080039
- SUSE Bug 1087084
- SUSE Bug 1087939
- SUSE Bug 1089055
- SUSE Bug 1136865
- SUSE Bug 1178658
- SUSE Bug 1201877
- SUSE Bug 1209547