Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:1486-1

Опубликовано: 01 июн. 2018
Источник: suse-cvrf

Описание

Security update for HA kernel modules

This update provides rebuilds of HA kernel modules with retpoline support to mitigate Spectre Variant 2 (CVE-2017-5715 bsc#1068032)

cluster fs also received these bugfixes:

  • backport patch to fix dlmglue false deadlock (bnc#962257)
  • Fix for online increase of filesystem in kernel mode fails (bsc#936517).

Список пакетов

SUSE Linux Enterprise High Availability Extension 12
cluster-network-kmp-default-1.4_k3.12.61_52.133-26.4.1
cluster-network-kmp-xen-1.4_k3.12.61_52.133-26.4.1
dlm-kmp-default-4.0.2_k3.12.61_52.133-22.5.1
dlm-kmp-xen-4.0.2_k3.12.61_52.133-22.5.1
drbd-8.4.4.7-9.11.1
drbd-kmp-default-8.4.4.7_k3.12.61_52.133-9.11.1
drbd-kmp-xen-8.4.4.7_k3.12.61_52.133-9.11.1
gfs2-kmp-default-3.1.6_k3.12.61_52.133-22.5.1
gfs2-kmp-xen-3.1.6_k3.12.61_52.133-22.5.1
ocfs2-kmp-default-1.8.2_k3.12.61_52.133-22.5.1
ocfs2-kmp-xen-1.8.2_k3.12.61_52.133-22.5.1

Описание

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.


Затронутые продукты
SUSE Linux Enterprise High Availability Extension 12:cluster-network-kmp-default-1.4_k3.12.61_52.133-26.4.1
SUSE Linux Enterprise High Availability Extension 12:cluster-network-kmp-xen-1.4_k3.12.61_52.133-26.4.1
SUSE Linux Enterprise High Availability Extension 12:dlm-kmp-default-4.0.2_k3.12.61_52.133-22.5.1
SUSE Linux Enterprise High Availability Extension 12:dlm-kmp-xen-4.0.2_k3.12.61_52.133-22.5.1

Ссылки
Уязвимость SUSE-SU-2018:1486-1