This update for kernel-firmware fixes the following issues: CVE-2023-20569: Fixed AMD 19h ucode to mitigate a side channel vulnerability in some of the AMD CPUs. (bsc#1213287). # Security update for kernel-firmware Announcement ID: SUSE-SU-2023:3298-1 Rating: moderate References: * #1213287 Cross-References: * CVE-2023-20569 CVSS scores: * CVE-2023-20569 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for kernel-firmware fixes the following issues: * CVE-2023-20569: Fixed AMD 19h ucode to mitigate a side channel vulnerability in some of the AMD CPUs. (bsc#1213287) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE Moderate update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-3298=1 openSUSE-SLE-15.5-2023-3298=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3298=1 ## Package List: * openSUSE Leap 15.5 (noarch) * kernel-firmware-bnx2-20230724-150500.3.6.1 * ucode-amd-20230724-150500.3.6.1 * kernel-firmware-ath11k-20230724-150500.3.6.1 * kernel-firmware-mellanox-20230724-150500.3.6.1 * kernel-firmware-network-20230724-150500.3.6.1 * kernel-firmware-nfp-20230724-150500.3.6.1 * kernel-firmware-chelsio-20230724-150500.3.6.1 * kernel-firmware-qlogic-20230724-150500.3.6.1 * kernel-firmware-intel-20230724-150500.3.6.1 *kernel-firmware-ath10k-20230724-150500.3.6.1 * kernel-firmware-radeon-20230724-150500.3.6.1 * kernel-firmware-all-20230724-150500.3.6.1 * kernel-firmware-platform-20230724-150500.3.6.1 * kernel-firmware-dpaa2-20230724-150500.3.6.1 * kernel-firmware-brcm-20230724-150500.3.6.1 * kernel-firmware-usb-network-20230724-150500.3.6.1 * kernel-firmware-qcom-20230724-150500.3.6.1 * kernel-firmware-serial-20230724-150500.3.6.1 * kernel-firmware-20230724-150500.3.6.1 * kernel-firmware-iwlwifi-20230724-150500.3.6.1 * kernel-firmware-sound-20230724-150500.3.6.1 * kernel-firmware-marvell-20230724-150500.3.6.1 * kernel-firmware-nvidia-20230724-150500.3.6.1 * kernel-firmware-i915-20230724-150500.3.6.1 * kernel-firmware-realtek-20230724-150500.3.6.1 * kernel-firmware-ti-20230724-150500.3.6.1 * kernel-firmware-ueagle-20230724-150500.3.6.1 * kernel-firmware-atheros-20230724-150500.3.6.1 * kernel-firmware-bluetooth-20230724-150500.3.6.1 * kernel-firmware-amdgpu-20230724-150500.3.6.1 * kernel-firmware-liquidio-20230724-150500.3.6.1 * kernel-firmware-mwifiex-20230724-150500.3.6.1 * kernel-firmware-prestera-20230724-150500.3.6.1 * kernel-firmware-media-20230724-150500.3.6.1 * kernel-firmware-mediatek-20230724-150500.3.6.1 * Basesystem Module 15-SP5 (noarch) * kernel-firmware-bnx2-20230724-150500.3.6.1 * ucode-amd-20230724-150500.3.6.1 * kernel-firmware-ath11k-20230724-150500.3.6.1 * kernel-firmware-mellanox-20230724-150500.3.6.1 * kernel-firmware-network-20230724-150500.3.6.1 * kernel-firmware-nfp-20230724-150500.3.6.1 * kernel-firmware-chelsio-20230724-150500.3.6.1 * kernel-firmware-qlogic-20230724-150500.3.6.1 * kernel-firmware-intel-20230724-150500.3.6.1 * kernel-firmware-ath10k-20230724-150500.3.6.1 * kernel-firmware-radeon-20230724-150500.3.6.1 * kernel-firmware-all-20230724-150500.3.6.1 * kernel-firmware-platform-20230724-150500.3.6.1 *kernel-firmware-dpaa2-20230724-150500.3.6.1 * kernel-firmware-brcm-20230724-150500.3.6.1 * kernel-firmware-usb-network-20230724-150500.3.6.1 * kernel-firmware-qcom-20230724-150500.3.6.1 * kernel-firmware-serial-20230724-150500.3.6.1 * kernel-firmware-iwlwifi-20230724-150500.3.6.1 * kernel-firmware-sound-20230724-150500.3.6.1 * kernel-firmware-marvell-20230724-150500.3.6.1 * kernel-firmware-nvidia-20230724-150500.3.6.1 * kernel-firmware-i915-20230724-150500.3.6.1 * kernel-firmware-realtek-20230724-150500.3.6.1 * kernel-firmware-ti-20230724-150500.3.6.1 * kernel-firmware-ueagle-20230724-150500.3.6.1 * kernel-firmware-atheros-20230724-150500.3.6.1 * kernel-firmware-bluetooth-20230724-150500.3.6.1 * kernel-firmware-amdgpu-20230724-150500.3.6.1 * kernel-firmware-liquidio-20230724-150500.3.6.1 * kernel-firmware-mwifiex-20230724-150500.3.6.1 * kernel-firmware-prestera-20230724-150500.3.6.1 * kernel-firmware-media-20230724-150500.3.6.1 * kernel-firmware-mediatek-20230724-150500.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-20569.html * https://bugzilla.suse.com/show_bug.cgi?id=1213287 . The Ubuntu kernel security update addresses a critical vulnerability in Intel processors, issuing timely recommendations for remediation.. openSUSE Patch, AMD Security Fix, Kernel Firmware Update. . LinuxSecurity.com Team
An update that solves one vulnerability and has one errata is now available. . SUSE Security Update: Security update for cobbler ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:0507-1 Rating: important References: #1193671 #1195906 Cross-References: CVE-2021-45083 CVSS scores: CVE-2021-45083 (SUSE): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Affected Products: HPE Helion Openstack 8 SUSE Manager Tools 12 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for cobbler fixes the following issues: - CVE-2021-45083: Fixed unsafe permissions on sensitive files (bsc#1193671). The following non-security bugs were fixed: - Move configuration files ownership to apache (bsc#1195906) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2022-507=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2022-507=1 - SUSE Manager Tools 12: zypper in -t patch SUSE-SLE-Manager-Tools-12-2022-507=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2022-507=1 Package List: - SUSE OpenStack Cloud 9 (noarch): cobbler-2.6.6-49.35.1 - SUSE OpenStack Cloud 8 (noarch): cobbler-2.6.6-49.35.1 - SUSE Manager Tools 12 (noarch): koan-2.6.6-49.35.1 - HPE Helion Openstack 8 (noarch): cobbler-2.6.6-49.35.1 References: https://www.suse.com/security/cve/CVE-2021-45083.html https://bugzilla.suse.com/1193671 https://bugzilla.suse.com/1195906 . SUSE has issued an important security update for cobbler, addressing significant permission issues and providing patching instructions.. SUSE Security Update,cobbler patch,OpenStack security,permission vulnerabilities,important update. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.