Alerts This Week
Warning Icon 1 537
Alerts This Week
Warning Icon 1 537

SUSE: 2018:1784-1 Moderate: Kernel Modules Packages Mitigation

suse
Calendar Grey June 22, 2018
Dist Suse Esm H88
SUSE Security Alert addresses issue in kernel module packages, designated as SUSE-SU-2023:2045-1.
An update that solves one vulnerability and has one errata is now available

Summary

The following kernel modules were rebuild with "retpoline" enablement to allow full mitigation of the Spectre Variant 2 (CVE-2017-5715, bsc#1068032) OFED was adjusted to add an entry to control the loading/unloading of cxgb4 to /etc/sysconf/infiniband (bsc#926856). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-kmps-20180611-13671=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-kmps-20180611-13671=1 - SUSE Linux Enterprise Real Time Extension 11-SP4: zypper in -t patch slertesp4-kmps-20180611-13671=1

References

#1068032 #926856

Cross- CVE-2017-5715

Affected Products:

SUSE Linux Enterprise Software Development Kit 11-SP4

SUSE Linux Enterprise Server 11-SP4

SUSE Linux Enterprise Real Time Extension 11-SP4

SUSE Linux Enterprise Debuginfo 11-SP4

https://www.suse.com/security/cve/CVE-2017-5715.html

https://bugzilla.suse.com/1068032

https://bugzilla.suse.com/926856

Announcement ID: SUSE-SU-2018:1784-1
Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here