Security update for kernel-firmware

Announcement ID:	SUSE-SU-2022:1846-1
Rating:	moderate
References:	bsc#1199459 bsc#1199470
Cross-References:	CVE-2021-26312 CVE-2021-26339 CVE-2021-26342 CVE-2021-26347 CVE-2021-26348 CVE-2021-26349 CVE-2021-26350 CVE-2021-26364 CVE-2021-26372 CVE-2021-26373 CVE-2021-26375 CVE-2021-26376 CVE-2021-26378 CVE-2021-26388 CVE-2021-46744
CVSS scores:	CVE-2021-26312 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-26339 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26339 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26342 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVE-2021-26342 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2021-26347 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26348 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-26349 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-26350 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26364 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26372 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26373 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26375 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26376 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26378 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-26388 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2021-46744 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-46744 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected Products:	SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9

An update that solves 15 vulnerabilities can now be installed.

Description:

This update for kernel-firmware fixes the following issues:

Update AMD ucode and SEV firmware

• (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744, bsc#1199459, bsc#1199470)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE OpenStack Cloud 9
  zypper in -t patch SUSE-OpenStack-Cloud-9-2022-1846=1
• SUSE OpenStack Cloud Crowbar 9
  zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-1846=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP4
  zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-1846=1
• SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4
  zypper in -t patch SUSE-SLE-SERVER-12-SP4-ESPOS-2022-1846=1
• SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4
  zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-1846=1
• SUSE Linux Enterprise High Performance Computing 12 SP5
  zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-1846=1
• SUSE Linux Enterprise Server 12 SP5
  zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-1846=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP5
  zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-1846=1

Package List:

• SUSE OpenStack Cloud 9 (noarch)
  • kernel-firmware-20190618-5.25.2
  • ucode-amd-20190618-5.25.2
• SUSE OpenStack Cloud Crowbar 9 (noarch)
  • kernel-firmware-20190618-5.25.2
  • ucode-amd-20190618-5.25.2
• SUSE Linux Enterprise Server for SAP Applications 12 SP4 (noarch)
  • kernel-firmware-20190618-5.25.2
  • ucode-amd-20190618-5.25.2
• SUSE Linux Enterprise Server 12 SP4 ESPOS 12-SP4 (noarch)
  • kernel-firmware-20190618-5.25.2
  • ucode-amd-20190618-5.25.2
• SUSE Linux Enterprise Server 12 SP4 LTSS 12-SP4 (noarch)
  • kernel-firmware-20190618-5.25.2
  • ucode-amd-20190618-5.25.2
• SUSE Linux Enterprise High Performance Computing 12 SP5 (noarch)
  • kernel-firmware-20190618-5.25.2
  • ucode-amd-20190618-5.25.2
• SUSE Linux Enterprise Server 12 SP5 (noarch)
  • kernel-firmware-20190618-5.25.2
  • ucode-amd-20190618-5.25.2
• SUSE Linux Enterprise Server for SAP Applications 12 SP5 (noarch)
  • kernel-firmware-20190618-5.25.2
  • ucode-amd-20190618-5.25.2

References:

• https://www.suse.com/security/cve/CVE-2021-26312.html
• https://www.suse.com/security/cve/CVE-2021-26339.html
• https://www.suse.com/security/cve/CVE-2021-26342.html
• https://www.suse.com/security/cve/CVE-2021-26347.html
• https://www.suse.com/security/cve/CVE-2021-26348.html
• https://www.suse.com/security/cve/CVE-2021-26349.html
• https://www.suse.com/security/cve/CVE-2021-26350.html
• https://www.suse.com/security/cve/CVE-2021-26364.html
• https://www.suse.com/security/cve/CVE-2021-26372.html
• https://www.suse.com/security/cve/CVE-2021-26373.html
• https://www.suse.com/security/cve/CVE-2021-26375.html
• https://www.suse.com/security/cve/CVE-2021-26376.html
• https://www.suse.com/security/cve/CVE-2021-26378.html
• https://www.suse.com/security/cve/CVE-2021-26388.html
• https://www.suse.com/security/cve/CVE-2021-46744.html
• https://bugzilla.suse.com/show_bug.cgi?id=1199459
• https://bugzilla.suse.com/show_bug.cgi?id=1199470