Security update for kernel-firmware SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2018:0703-1 Final 1 1 2018-03-15T20:26:54Z current 2018-03-15T20:26:54Z 2018-03-15T20:26:54Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for kernel-firmware This update for kernel-firmware fixes the following issues: - CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files to fix a ethernet flow control vulnerability in SRIOV devices (bsc#1077355) This update was imported from the SUSE:SLE-12-SP2:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2018-03/msg00050.html E-Mail link for openSUSE-SU-2018:0703-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.3 kernel-firmware-20170530-17.1 ucode-amd-20170530-17.1 kernel-firmware-20170530-17.1 as a component of openSUSE Leap 42.3 ucode-amd-20170530-17.1 as a component of openSUSE Leap 42.3 On multiple SR-IOV cars it is possible for VF's assigned to guests to send ethernet flow control pause frames via the PF. This includes Linux kernel ixgbe driver before commit f079fa005aae08ee0e1bc32699874ff4f02e11c1, the Linux Kernel i40e/i40evf driver before e7358f54a3954df16d4f87e3cad35063f1c17de5 and the DPDK before commit 3f12b9f23b6499ff66ec8b0de941fb469297e5d0, additionally Multiple vendor NIC firmware is affected. CVE-2015-1142857 openSUSE Leap 42.3:kernel-firmware-20170530-17.1 openSUSE Leap 42.3:ucode-amd-20170530-17.1 moderate Please Install the update. https://lists.opensuse.org/opensuse-updates/2018-03/msg00050.html https://www.suse.com/security/cve/CVE-2015-1142857.html CVE-2015-1142857 https://bugzilla.suse.com/1077355 SUSE Bug 1077355 https://bugzilla.suse.com/1091815 SUSE Bug 1091815 https://bugzilla.suse.com/1105108 SUSE Bug 1105108