{"affected":[{"ecosystem_specific":{"binaries":[{"kernel-firmware":"20160516git-10.8.1","ucode-amd":"20160516git-10.8.1"}]},"package":{"ecosystem":"SUSE:OpenStack Cloud 6","name":"kernel-firmware","purl":"pkg:rpm/suse/kernel-firmware&distro=SUSE%20OpenStack%20Cloud%206"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"20160516git-10.8.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-firmware":"20160516git-10.8.1","ucode-amd":"20160516git-10.8.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","name":"kernel-firmware","purl":"pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"20160516git-10.8.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-firmware":"20160516git-10.8.1","ucode-amd":"20160516git-10.8.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","name":"kernel-firmware","purl":"pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"20160516git-10.8.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for kernel-firmware fixes the following issues:\n\n- Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715)\n\nThis new firmware enables the Indirect Branch Control (IBC) feature on\nAMD family 17h processor to mitigate an attack on the branch predictor\nthat could lead to information disclosure from e.g. kernel memory\n(bsc#1068032 CVE-2017-5715).\n\n","id":"SUSE-SU-2018:0041-1","modified":"2018-01-08T15:31:06Z","published":"2018-01-08T15:31:06Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180041-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1068032"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-5715"}],"related":["CVE-2017-5715"],"summary":"Security update for kernel-firmware","upstream":["CVE-2017-5715"]}