shield Security update for dracut

SUSE-SLE-SERVER-12-SP1-2017-353

This update for dracut fixes the following issues: Security issues fixed: - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. (bsc#1008340) Non security issues fixed: - Allow booting from degraded MD arrays with systemd. (bsc#1017695) - Start multipath services before local-fs-pre.target. (bsc#1005410, bsc#1006118, bsc#1007925, bsc#986734, bsc#986838)

• Release Date
  Mar 9 2017
• References
  Bugzilla: 1006118, 1008340, 1017695, 1005410, 1007925, 986734, 986838
  CVEs: CVE-2016-8637
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.1 ppc64le

• Packages
  dracut
  Initramfs generator using udev

  037-91.1

  lock rpm

  lock src

  dracut-fips
  Dracut modules to build a dracut initramfs with an integrity check

  037-91.1

  lock rpm

SUSE Linux Enterprise Server 12.1 s390x

• Packages
  dracut
  Initramfs generator using udev

  037-91.1

  lock rpm

  lock src

  dracut-fips
  Dracut modules to build a dracut initramfs with an integrity check

  037-91.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64

• Packages
  dracut
  Initramfs generator using udev

  037-91.1

  lock rpm

  lock src

  dracut-fips
  Dracut modules to build a dracut initramfs with an integrity check

  037-91.1

  lock rpm