Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:0427-2

Опубликовано: 27 апр. 2019
Источник: suse-cvrf

Описание

Security update for kernel-firmware

This update for kernel-firmware fixes the following issues:

Security issue fixed:

  • CVE-2018-5383: Fixed an implementation issue in Bluetooth where the eliptic curve parameters were not sufficiently validated during Diffie-Hellman key exchange (bsc#1104301).

Список пакетов

SUSE Linux Enterprise Server for SAP Applications 12 SP1
kernel-firmware-20160516git-10.16.1
ucode-amd-20160516git-10.16.1

Ссылки

Описание

Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key exchange, which may allow a remote attacker to obtain the encryption key used by the device.

Затронутые продукты
SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-firmware-20160516git-10.16.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:ucode-amd-20160516git-10.16.1
Ссылки