Описание
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
This security issue was fixed:
- CVE-2017-5715: Prevent unauthorized disclosure of information to an attacker with local user access caused by speculative execution and indirect branch prediction (bsc#1095735)
Список пакетов
SUSE Enterprise Storage 4
kernel-firmware-20170530-21.22.1
ucode-amd-20170530-21.22.1
SUSE Linux Enterprise Desktop 12 SP3
kernel-firmware-20170530-21.22.1
ucode-amd-20170530-21.22.1
SUSE Linux Enterprise Server 12 SP2-LTSS
kernel-firmware-20170530-21.22.1
ucode-amd-20170530-21.22.1
SUSE Linux Enterprise Server 12 SP3
kernel-firmware-20170530-21.22.1
ucode-amd-20170530-21.22.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
kernel-firmware-20170530-21.22.1
ucode-amd-20170530-21.22.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
kernel-firmware-20170530-21.22.1
ucode-amd-20170530-21.22.1
SUSE OpenStack Cloud 7
kernel-firmware-20170530-21.22.1
ucode-amd-20170530-21.22.1
Ссылки
- Link for SUSE-SU-2018:1571-1
- E-Mail link for SUSE-SU-2018:1571-1
- SUSE Security Ratings
- SUSE Bug 1095735
- SUSE CVE CVE-2017-5715 page
Описание
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Затронутые продукты
SUSE Enterprise Storage 4:kernel-firmware-20170530-21.22.1
SUSE Enterprise Storage 4:ucode-amd-20170530-21.22.1
SUSE Linux Enterprise Desktop 12 SP3:kernel-firmware-20170530-21.22.1
SUSE Linux Enterprise Desktop 12 SP3:ucode-amd-20170530-21.22.1
Ссылки
- CVE-2017-5715
- SUSE Bug 1068032
- SUSE Bug 1074562
- SUSE Bug 1074578
- SUSE Bug 1074701
- SUSE Bug 1074741
- SUSE Bug 1074919
- SUSE Bug 1075006
- SUSE Bug 1075007
- SUSE Bug 1075262
- SUSE Bug 1075419
- SUSE Bug 1076115
- SUSE Bug 1076372
- SUSE Bug 1076606
- SUSE Bug 1078353
- SUSE Bug 1080039
- SUSE Bug 1087887
- SUSE Bug 1087939
- SUSE Bug 1088147
- SUSE Bug 1089055