Описание
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Security issue fixed:
- CVE-2018-5383: Fixed an implementation issue in Bluetooth where the eliptic curve parameters were not sufficiently validated during Diffie-Hellman key exchange (bsc#1104301).
This update was imported from the SUSE:SLE-12-SP2:Update update project.
Список пакетов
openSUSE Leap 42.3
kernel-firmware-20170530-26.1
ucode-amd-20170530-26.1
Ссылки
- E-Mail link for openSUSE-SU-2019:0275-1
- SUSE Security Ratings
Описание
Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public keys during a Diffie-Hellman key exchange, which may allow a remote attacker to obtain the encryption key used by the device.
Затронутые продукты
openSUSE Leap 42.3:kernel-firmware-20170530-26.1
openSUSE Leap 42.3:ucode-amd-20170530-26.1
Ссылки
- CVE-2018-5383
- SUSE Bug 1104301
- SUSE Bug 1126909