This update rebuilds missing kernel modules (KMP) to use "retpolines" mitigations for Spectre Variant 2 (CVE-2017-5715). Rebuilt KMP packages: - cluster-network - drbd - gfs2 - iscsitarget - ocfs2 - ofed - oracleasm Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-kmps-retpoline-20190320-13999=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-kmps-retpoline-20190320-13999=1 - SUSE Linux Enterprise Real Time Extension 11-SP4: zypper in -t patch slertesp4-kmps-retpoline-20190320-13999=1
#1095824
Cross- CVE-2017-5715
Affected Products:
SUSE Linux Enterprise Software Development Kit 11-SP4
SUSE Linux Enterprise Server 11-SP4
SUSE Linux Enterprise Real Time Extension 11-SP4
SUSE Linux Enterprise High Availability Extension 11-SP4
SUSE Linux Enterprise Debuginfo 11-SP4
https://www.suse.com/security/cve/CVE-2017-5715.html
https://bugzilla.suse.com/1095824
Get the latest Linux and open source security news straight to your inbox.