CVE-2019-9836

Secure Encrypted Virtualization (SEV) on Advanced Micro Devices(AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation. This update provides Amd SEV Firmware to 0.17 build 22 (CVE-2019-9836).

It also updates the Intel Microcode for the following:

• SNB-E/EN/EP C1/M0 6-2d-6/6d 0000061d->0000061f Xeon E3/E5, Core X
• SNB-E/EN/EP C2/M1 6-2d-7/6d 00000714->00000718 Xeon E3/E5, Core X

This update for kernel-firmware fixes the following issues:

kernel-firmware was updated to version 20190618:

• cavium: Add firmware for CNN55XX crypto driver.
• linux-firmware: Update firmware file for Intel Bluetooth 22161
• linux-firmware: Update firmware file for Intel Bluetooth 9560
• linux-firmware: Update firmware file for Intel Bluetooth 9260
• linux-firmware: Update AMD SEV firmware (CVE-2019-9836, bsc#1139383)
• linux-firmware: update licence text for Marvell firmware
• linux-firmware: update firmware for mhdp8546
• linux-firmware: rsi: update firmware images for Redpine 9113 chipset
• imx: sdma: update firmware to v3.5/v4.5
• nvidia: update GP10[2467] SEC2 RTOS with the one already used on GP108
• linux-firmware: Update firmware file for Intel Bluetooth 8265
• linux-firmware: Update firmware file for Intel Bluetooth 9260
• linux-firmware: Update firmware file for Intel Bluetooth 9560
• amlogic: add video decoder firmwares
• iwlwifi: update -46 firmwares for 22260 and 9000 series
• iwlwifi: add firmware for 22260 and update 9000 series -46 firmwares
• iwlwifi: add -46.ucode firmwares for 9000 series
• amdgpu: update vega20 to the latest 19.10 firmware
• amdgpu: update vega12 to the latest 19.10 firmware
• amdgpu: update vega10 to the latest 19.10 firmware
• amdgpu: update polaris11 to the latest 19.10 firmware
• amdgpu: update polaris10 to the latest 19.10 firmware
• amdgpu: update raven2 to the latest 19.10 firmware
• amdgpu: update raven to the latest 19.10 firmware
• amdgpu: update picasso to the latest 19.10 firmware
• linux-firmware: update fw for qat devices
• Mellanox: Add new mlxsw_spectrum firmware 13.2000.1122
• drm/i915/firmware: Add ICL HuC v8.4.3238
• drm/i915/firmware: Add ICL GuC v32.0.3
• drm/i915/firmware: Add GLK HuC v03.01.2893
• drm/i915/firmware: Add GLK GuC v32.0.3
• drm/i915/firmware: Add KBL GuC v32.0.3
• drm/i915/firmware: Add SKL GuC v32.0.3
• drm/i915/firmware: Add BXT GuC v32.0.3
• linux-firmware: Add firmware file for Intel Bluetooth 22161
• cxgb4: update firmware to revision 1.23.4.0 (bsc#1136334)
• linux-firmware: Update NXP Management Complex firmware to version 10.14.3
• linux-firmware: add firmware for MT7615E
• mediatek: update MT8173 VPU firmware to v1.1.2 [decoder] Enlarge struct vdec_pic_info to support more capture buffer plane and capture buffer format change.
• linux-firmware: update Marvell 8797/8997 firmware images
• nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.23

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the kernel-firmware-20210901-1.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-amdgpu-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-ath10k-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-ath11k-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-ath12k-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-atheros-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-bluetooth-20250208-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-bnx2-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-brcm-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-chelsio-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-dpaa2-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-i915-20250210-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-intel-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-iwlwifi-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-liquidio-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-marvell-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-media-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-mediatek-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-mellanox-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-mwifiex-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-network-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-nfp-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-nvidia-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-platform-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-prestera-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-qcom-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-qlogic-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-radeon-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-realtek-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-serial-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-sound-20250210-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-ti-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-ueagle-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-usb-network-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-all-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

This update for kernel-firmware fixes the following issues:

kernel-firmware was updated to version 20190618:

• cavium: Add firmware for CNN55XX crypto driver.
• linux-firmware: Update firmware file for Intel Bluetooth 22161
• linux-firmware: Update firmware file for Intel Bluetooth 9560
• linux-firmware: Update firmware file for Intel Bluetooth 9260
• linux-firmware: Update AMD SEV firmware (CVE-2019-9836, bsc#1139383)
• linux-firmware: update licence text for Marvell firmware
• linux-firmware: update firmware for mhdp8546
• linux-firmware: rsi: update firmware images for Redpine 9113 chipset
• imx: sdma: update firmware to v3.5/v4.5
• nvidia: update GP10[2467] SEC2 RTOS with the one already used on GP108
• linux-firmware: Update firmware file for Intel Bluetooth 8265
• linux-firmware: Update firmware file for Intel Bluetooth 9260
• linux-firmware: Update firmware file for Intel Bluetooth 9560
• amlogic: add video decoder firmwares
• iwlwifi: update -46 firmwares for 22260 and 9000 series
• iwlwifi: add firmware for 22260 and update 9000 series -46 firmwares
• iwlwifi: add -46.ucode firmwares for 9000 series
• amdgpu: update vega20 to the latest 19.10 firmware
• amdgpu: update vega12 to the latest 19.10 firmware
• amdgpu: update vega10 to the latest 19.10 firmware
• amdgpu: update polaris11 to the latest 19.10 firmware
• amdgpu: update polaris10 to the latest 19.10 firmware
• amdgpu: update raven2 to the latest 19.10 firmware
• amdgpu: update raven to the latest 19.10 firmware
• amdgpu: update picasso to the latest 19.10 firmware
• linux-firmware: update fw for qat devices
• Mellanox: Add new mlxsw_spectrum firmware 13.2000.1122
• drm/i915/firmware: Add ICL HuC v8.4.3238
• drm/i915/firmware: Add ICL GuC v32.0.3
• drm/i915/firmware: Add GLK HuC v03.01.2893
• drm/i915/firmware: Add GLK GuC v32.0.3
• drm/i915/firmware: Add KBL GuC v32.0.3
• drm/i915/firmware: Add SKL GuC v32.0.3
• drm/i915/firmware: Add BXT GuC v32.0.3
• linux-firmware: Add firmware file for Intel Bluetooth 22161
• cxgb4: update firmware to revision 1.23.4.0 (bsc#1136334)
• linux-firmware: Update NXP Management Complex firmware to version 10.14.3
• linux-firmware: add firmware for MT7615E
• mediatek: update MT8173 VPU firmware to v1.1.2 [decoder] Enlarge struct vdec_pic_info to support more capture buffer plane and capture buffer format change.
• linux-firmware: update Marvell 8797/8997 firmware images
• nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.23

This update for kernel-firmware aligns the firmware code with SUSE Linux Enterprise Server 15. The version is now at 20190618.

Please refer to the kernel-firmware rpm changelog file to see the full history of changes.

This update for kernel-firmware fixes the following issues:

kernel-firmware was updated to version 20190618:

• cavium: Add firmware for CNN55XX crypto driver.
• linux-firmware: Update firmware file for Intel Bluetooth 22161
• linux-firmware: Update firmware file for Intel Bluetooth 9560
• linux-firmware: Update firmware file for Intel Bluetooth 9260
• linux-firmware: Update AMD SEV firmware (CVE-2019-9836, bsc#1139383)
• linux-firmware: update licence text for Marvell firmware
• linux-firmware: update firmware for mhdp8546
• linux-firmware: rsi: update firmware images for Redpine 9113 chipset
• imx: sdma: update firmware to v3.5/v4.5
• nvidia: update GP10[2467] SEC2 RTOS with the one already used on GP108
• linux-firmware: Update firmware file for Intel Bluetooth 8265
• linux-firmware: Update firmware file for Intel Bluetooth 9260
• linux-firmware: Update firmware file for Intel Bluetooth 9560
• amlogic: add video decoder firmwares
• iwlwifi: update -46 firmwares for 22260 and 9000 series
• iwlwifi: add firmware for 22260 and update 9000 series -46 firmwares
• iwlwifi: add -46.ucode firmwares for 9000 series
• amdgpu: update vega20 to the latest 19.10 firmware
• amdgpu: update vega12 to the latest 19.10 firmware
• amdgpu: update vega10 to the latest 19.10 firmware
• amdgpu: update polaris11 to the latest 19.10 firmware
• amdgpu: update polaris10 to the latest 19.10 firmware
• amdgpu: update raven2 to the latest 19.10 firmware
• amdgpu: update raven to the latest 19.10 firmware
• amdgpu: update picasso to the latest 19.10 firmware
• linux-firmware: update fw for qat devices
• Mellanox: Add new mlxsw_spectrum firmware 13.2000.1122
• drm/i915/firmware: Add ICL HuC v8.4.3238
• drm/i915/firmware: Add ICL GuC v32.0.3
• drm/i915/firmware: Add GLK HuC v03.01.2893
• drm/i915/firmware: Add GLK GuC v32.0.3
• drm/i915/firmware: Add KBL GuC v32.0.3
• drm/i915/firmware: Add SKL GuC v32.0.3
• drm/i915/firmware: Add BXT GuC v32.0.3
• linux-firmware: Add firmware file for Intel Bluetooth 22161
• cxgb4: update firmware to revision 1.23.4.0 (bsc#1136334)
• linux-firmware: Update NXP Management Complex firmware to version 10.14.3
• linux-firmware: add firmware for MT7615E
• mediatek: update MT8173 VPU firmware to v1.1.2 [decoder] Enlarge struct vdec_pic_info to support more capture buffer plane and capture buffer format change.
• linux-firmware: update Marvell 8797/8997 firmware images
• nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.10.A.23