Security update for kernel-firmware SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0674-1 Final 1 1 2018-03-14T16:01:11Z current 2018-03-14T16:01:11Z 2018-03-14T16:01:11Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for kernel-firmware This update for kernel-firmware fixes the following issues: - CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files to fix a ethernet flow control vulnerability in SRIOV devices (bsc#1077355) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-CAASP-ALL-2018-457,SUSE-SLE-DESKTOP-12-SP2-2018-457,SUSE-SLE-DESKTOP-12-SP3-2018-457,SUSE-SLE-RPI-12-SP2-2018-457,SUSE-SLE-SERVER-12-SP2-2018-457,SUSE-SLE-SERVER-12-SP3-2018-457 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180674-1/ Link for SUSE-SU-2018:0674-1 https://lists.suse.com/pipermail/sle-security-updates/2018-March/003812.html E-Mail link for SUSE-SU-2018:0674-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1077355 SUSE Bug 1077355 https://www.suse.com/security/cve/CVE-2015-1142857/ SUSE CVE CVE-2015-1142857 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-firmware-20170530-21.19.1 ucode-amd-20170530-21.19.1 kernel-firmware-20170530-21.19.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 ucode-amd-20170530-21.19.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 kernel-firmware-20170530-21.19.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 ucode-amd-20170530-21.19.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 kernel-firmware-20170530-21.19.1 as a component of SUSE Linux Enterprise Server 12 SP2 ucode-amd-20170530-21.19.1 as a component of SUSE Linux Enterprise Server 12 SP2 kernel-firmware-20170530-21.19.1 as a component of SUSE Linux Enterprise Server 12 SP3 ucode-amd-20170530-21.19.1 as a component of SUSE Linux Enterprise Server 12 SP3 kernel-firmware-20170530-21.19.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 kernel-firmware-20170530-21.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 ucode-amd-20170530-21.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-firmware-20170530-21.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 ucode-amd-20170530-21.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected. CVE-2015-1142857 SUSE Linux Enterprise Desktop 12 SP2:kernel-firmware-20170530-21.19.1 SUSE Linux Enterprise Desktop 12 SP2:ucode-amd-20170530-21.19.1 SUSE Linux Enterprise Desktop 12 SP3:kernel-firmware-20170530-21.19.1 SUSE Linux Enterprise Desktop 12 SP3:ucode-amd-20170530-21.19.1 SUSE Linux Enterprise Server 12 SP2:kernel-firmware-20170530-21.19.1 SUSE Linux Enterprise Server 12 SP2:ucode-amd-20170530-21.19.1 SUSE Linux Enterprise Server 12 SP3:kernel-firmware-20170530-21.19.1 SUSE Linux Enterprise Server 12 SP3:ucode-amd-20170530-21.19.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:kernel-firmware-20170530-21.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:kernel-firmware-20170530-21.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:ucode-amd-20170530-21.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:kernel-firmware-20170530-21.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:ucode-amd-20170530-21.19.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180674-1/ https://www.suse.com/security/cve/CVE-2015-1142857.html CVE-2015-1142857 https://bugzilla.suse.com/1077355 SUSE Bug 1077355 https://bugzilla.suse.com/1091815 SUSE Bug 1091815 https://bugzilla.suse.com/1105108 SUSE Bug 1105108