Security update for kernel-firmware SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:3106-1 Final 1 1 2017-11-27T15:41:22Z current 2017-11-27T15:41:22Z 2017-11-27T15:41:22Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for kernel-firmware This update for kernel-firmware fixes the following issues: - Update Intel WiFi firmwares for the 3160, 7260 and 7265 adapters. Security issues fixed are part of the 'KRACK' attacks affecting the firmware: - CVE-2017-13080: The reinstallation of the Group Temporal key could be used for replay attacks (bsc#1066295): - CVE-2017-13081: The reinstallation of the Integrity Group Temporal key could be used for replay attacks (bsc#1066295): The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-CAASP-ALL-2017-1918,SUSE-SLE-DESKTOP-12-SP2-2017-1918,SUSE-SLE-DESKTOP-12-SP3-2017-1918,SUSE-SLE-RPI-12-SP2-2017-1918,SUSE-SLE-SERVER-12-SP2-2017-1918,SUSE-SLE-SERVER-12-SP3-2017-1918 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20173106-1/ Link for SUSE-SU-2017:3106-1 https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00042.html E-Mail link for SUSE-SU-2017:3106-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1066295 SUSE Bug 1066295 https://www.suse.com/security/cve/CVE-2017-13080/ SUSE CVE CVE-2017-13080 page https://www.suse.com/security/cve/CVE-2017-13081/ SUSE CVE CVE-2017-13081 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-firmware-20170530-21.13.1 ucode-amd-20170530-21.13.1 kernel-firmware-20170530-21.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 ucode-amd-20170530-21.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 kernel-firmware-20170530-21.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 ucode-amd-20170530-21.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 kernel-firmware-20170530-21.13.1 as a component of SUSE Linux Enterprise Server 12 SP2 ucode-amd-20170530-21.13.1 as a component of SUSE Linux Enterprise Server 12 SP2 kernel-firmware-20170530-21.13.1 as a component of SUSE Linux Enterprise Server 12 SP3 ucode-amd-20170530-21.13.1 as a component of SUSE Linux Enterprise Server 12 SP3 kernel-firmware-20170530-21.13.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 kernel-firmware-20170530-21.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 ucode-amd-20170530-21.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-firmware-20170530-21.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 ucode-amd-20170530-21.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients. CVE-2017-13080 SUSE Linux Enterprise Desktop 12 SP2:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Desktop 12 SP2:ucode-amd-20170530-21.13.1 SUSE Linux Enterprise Desktop 12 SP3:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Desktop 12 SP3:ucode-amd-20170530-21.13.1 SUSE Linux Enterprise Server 12 SP2:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Server 12 SP2:ucode-amd-20170530-21.13.1 SUSE Linux Enterprise Server 12 SP3:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Server 12 SP3:ucode-amd-20170530-21.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:ucode-amd-20170530-21.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-amd-20170530-21.13.1 important 7.8 AV:A/AC:L/Au:N/C:C/I:C/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173106-1/ https://www.suse.com/security/cve/CVE-2017-13080.html CVE-2017-13080 https://bugzilla.suse.com/1056061 SUSE Bug 1056061 https://bugzilla.suse.com/1063479 SUSE Bug 1063479 https://bugzilla.suse.com/1063667 SUSE Bug 1063667 https://bugzilla.suse.com/1063671 SUSE Bug 1063671 https://bugzilla.suse.com/1066295 SUSE Bug 1066295 https://bugzilla.suse.com/1105108 SUSE Bug 1105108 https://bugzilla.suse.com/1178872 SUSE Bug 1178872 https://bugzilla.suse.com/1179588 SUSE Bug 1179588 Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attacker within radio range to spoof frames from access points to clients. CVE-2017-13081 SUSE Linux Enterprise Desktop 12 SP2:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Desktop 12 SP2:ucode-amd-20170530-21.13.1 SUSE Linux Enterprise Desktop 12 SP3:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Desktop 12 SP3:ucode-amd-20170530-21.13.1 SUSE Linux Enterprise Server 12 SP2:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Server 12 SP2:ucode-amd-20170530-21.13.1 SUSE Linux Enterprise Server 12 SP3:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Server 12 SP3:ucode-amd-20170530-21.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:ucode-amd-20170530-21.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-firmware-20170530-21.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-amd-20170530-21.13.1 important 7.8 AV:A/AC:L/Au:N/C:C/I:C/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20173106-1/ https://www.suse.com/security/cve/CVE-2017-13081.html CVE-2017-13081 https://bugzilla.suse.com/1056061 SUSE Bug 1056061 https://bugzilla.suse.com/1063479 SUSE Bug 1063479 https://bugzilla.suse.com/1066295 SUSE Bug 1066295 https://bugzilla.suse.com/1105108 SUSE Bug 1105108 https://bugzilla.suse.com/1179588 SUSE Bug 1179588