SUSE-SU-2018:1503-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2018/suse-su-20181503-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:1503-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2018:1503-1

Related

CVE-2017-5715

Published

2018-06-05T09:18:01Z

Modified

2018-06-05T09:18:01Z

Summary

Security update for oracleasm kmp

Details

This update provides rebuilt kernel modules for SUSE Linux Enterprise 12 SP3 products with retpoline enablement to address Spectre Variant 2 (CVE-2017-5715 bsc#1068032).

Following modules have been rebuilt:

drbd
oracleasm
crash
lttng-modules

References

Affected packages

SUSE:Linux Enterprise High Availability Extension 12 SP3 / drbd

Package

Name: drbd
Purl: purl:rpm/suse/drbd&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.0.8+git.c8bc3670-3.5.1

Ecosystem specific

{
    "binaries": [
        {
            "drbd": "9.0.8+git.c8bc3670-3.5.1",
            "drbd-kmp-default": "9.0.8+git.c8bc3670_k4.4.131_94.29-3.5.1"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP3 / crash

Package

Name: crash
Purl: purl:rpm/suse/crash&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.1.8-4.8.1

Ecosystem specific

{
    "binaries": [
        {
            "crash-devel": "7.1.8-4.8.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3 / crash

Package

Name: crash
Purl: purl:rpm/suse/crash&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.1.8-4.8.1

Ecosystem specific

{
    "binaries": [
        {
            "crash-kmp-default": "7.1.8_k4.4.131_94.29-4.8.1",
            "crash": "7.1.8-4.8.1",
            "lttng-modules": "2.7.1-8.2.1",
            "lttng-modules-kmp-default": "2.7.1_k4.4.131_94.29-8.2.1",
            "oracleasm-kmp-default": "2.0.8_k4.4.131_94.29-3.8.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3 / lttng-modules

Package

Name: lttng-modules
Purl: purl:rpm/suse/lttng-modules&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.1-8.2.1

Ecosystem specific

{
    "binaries": [
        {
            "crash-kmp-default": "7.1.8_k4.4.131_94.29-4.8.1",
            "crash": "7.1.8-4.8.1",
            "lttng-modules": "2.7.1-8.2.1",
            "lttng-modules-kmp-default": "2.7.1_k4.4.131_94.29-8.2.1",
            "oracleasm-kmp-default": "2.0.8_k4.4.131_94.29-3.8.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3 / oracleasm

Package

Name: oracleasm
Purl: purl:rpm/suse/oracleasm&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.8-3.8.1

Ecosystem specific

{
    "binaries": [
        {
            "crash-kmp-default": "7.1.8_k4.4.131_94.29-4.8.1",
            "crash": "7.1.8-4.8.1",
            "lttng-modules": "2.7.1-8.2.1",
            "lttng-modules-kmp-default": "2.7.1_k4.4.131_94.29-8.2.1",
            "oracleasm-kmp-default": "2.0.8_k4.4.131_94.29-3.8.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP3 / crash

Package

Name: crash
Purl: purl:rpm/suse/crash&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.1.8-4.8.1

Ecosystem specific

{
    "binaries": [
        {
            "crash-kmp-default": "7.1.8_k4.4.131_94.29-4.8.1",
            "crash": "7.1.8-4.8.1",
            "lttng-modules": "2.7.1-8.2.1",
            "lttng-modules-kmp-default": "2.7.1_k4.4.131_94.29-8.2.1",
            "oracleasm-kmp-default": "2.0.8_k4.4.131_94.29-3.8.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP3 / lttng-modules

Package

Name: lttng-modules
Purl: purl:rpm/suse/lttng-modules&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.1-8.2.1

Ecosystem specific

{
    "binaries": [
        {
            "crash-kmp-default": "7.1.8_k4.4.131_94.29-4.8.1",
            "crash": "7.1.8-4.8.1",
            "lttng-modules": "2.7.1-8.2.1",
            "lttng-modules-kmp-default": "2.7.1_k4.4.131_94.29-8.2.1",
            "oracleasm-kmp-default": "2.0.8_k4.4.131_94.29-3.8.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP3 / oracleasm

Package

Name: oracleasm
Purl: purl:rpm/suse/oracleasm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.8-3.8.1

Ecosystem specific

{
    "binaries": [
        {
            "crash-kmp-default": "7.1.8_k4.4.131_94.29-4.8.1",
            "crash": "7.1.8-4.8.1",
            "lttng-modules": "2.7.1-8.2.1",
            "lttng-modules-kmp-default": "2.7.1_k4.4.131_94.29-8.2.1",
            "oracleasm-kmp-default": "2.0.8_k4.4.131_94.29-3.8.1"
        }
    ]
}