shield Recommended update for tboot

SUSE-SLE-SERVER-12-SP2-2017-1901

This update for tboot fixes the following issues: Security issue fixed: - CVE-2017-16837: Certain function pointers in Trusted Boot (tboot) through 1.9.6 are notvalidated and can cause arbitrary code execution, which allows local users tooverwrite dynamic PCRs of Trusted Platform Module (TPM) by h (bsc#1068390) Bug fixes: - Fixed failed trusted boot on some systems like Intel Xeon "Purley 8s" processors. The following error message showed: "TBOOT: wait-for-sipi loop timed-out". Booting continued but "TXT measured launch" was wrongly reported as FALSE. (bsc#1057555)

• Release Date
  Nov 24 2017
• References
  Bugzilla: 1057555, 1068390
  CVEs: CVE-2017-16837
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  tboot
  Performs a verified launch using Intel(R) TXT

  20160518_1.9.4-7.5.1 lock rpm lock src