Recommended update for tboot SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:3090-1 Final 1 1 2017-11-24T15:17:52Z current 2017-11-24T15:17:52Z 2017-11-24T15:17:52Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Recommended update for tboot This update for tboot fixes the following issues: Security issue fixed: - CVE-2017-16837: Certain function pointers in Trusted Boot (tboot) through 1.9.6 are notvalidated and can cause arbitrary code execution, which allows local users tooverwrite dynamic PCRs of Trusted Platform Module (TPM) by h (bsc#1068390) Bug fixes: - Fixed failed trusted boot on some systems like Intel Xeon 'Purley 8s' processors. The following error message showed: 'TBOOT: wait-for-sipi loop timed-out'. Booting continued but 'TXT measured launch' was wrongly reported as FALSE. (bsc#1057555) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-SERVER-12-SP2-2017-1901,SUSE-SLE-SERVER-12-SP3-2017-1901 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20173090-1/ Link for SUSE-SU-2017:3090-1 https://lists.suse.com/pipermail/sle-security-updates/2017-November/003415.html E-Mail link for SUSE-SU-2017:3090-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1057555 SUSE Bug 1057555 https://bugzilla.suse.com/1068390 SUSE Bug 1068390 https://www.suse.com/security/cve/CVE-2017-16837/ SUSE CVE CVE-2017-16837 page SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 tboot-20160518_1.9.4-7.5.1 tboot-20160518_1.9.4-7.5.1 as a component of SUSE Linux Enterprise Server 12 SP2 tboot-20160518_1.9.4-7.5.1 as a component of SUSE Linux Enterprise Server 12 SP3 tboot-20160518_1.9.4-7.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 tboot-20160518_1.9.4-7.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module (TPM) by hooking these function pointers. CVE-2017-16837 SUSE Linux Enterprise Server 12 SP2:tboot-20160518_1.9.4-7.5.1 SUSE Linux Enterprise Server 12 SP3:tboot-20160518_1.9.4-7.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:tboot-20160518_1.9.4-7.5.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:tboot-20160518_1.9.4-7.5.1 moderate 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173090-1/ https://www.suse.com/security/cve/CVE-2017-16837.html CVE-2017-16837 https://bugzilla.suse.com/1068390 SUSE Bug 1068390 https://bugzilla.suse.com/889339 SUSE Bug 889339