SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1375-1) (Spectre)

The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature in modern CPUs were mitigated, aka 'Spectre Variant 4' bnc1087082. A new boot...

AIX 7.1 TL 4 : variant4 (IJ05823) (Spectre)

https://vulners.com/cve/CVE-2018-3639 https://vulners.com/cve/CVE-2018-3639 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory variant4advisory.asc. include'compat.inc'; if description scriptid109955; scriptversion"1.12";...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20180522) (Spectre)

Security Fixes : - An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged...

Ubuntu 18.04 LTS : Linux kernel vulnerability (USN-3652-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3652-1 advisory. Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via a sidechannel...

Ubuntu 17.10 : Linux kernel vulnerabilities (USN-3653-1) (Spectre)

Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via a sidechannel attack. This flaw is known as Spectre Variant 4. A local attacker could use this to expose sensitive information, including kernel memor...

Oracle Linux 6 : qemu-kvm (ELSA-2018-1660)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1660 advisory. - qemu-kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch bz1574067 Tenable has extracted the preceding description block directly from the Oracle...

Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x i386/x86_64 (20180521) (Spectre)

Security Fixes : - An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged...

Scientific Linux Security Update : java-1.7.0-openjdk on SL7.x x86_64 (20180522) (Spectre)

Security Fixes : - An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged...

RHEL 7 : java-1.7.0-openjdk (RHSA-2018:1648) (Spectre)

An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

AIX 7.2 TL 1 : variant4 (IJ05820) (Spectre)

https://vulners.com/cve/CVE-2018-3639 https://vulners.com/cve/CVE-2018-3639 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory variant4advisory.asc. include'compat.inc'; if description scriptid109952; scriptversion"1.12";...

AIX 5.3 TL 12 : variant4 (IJ05826) (Spectre)

https://vulners.com/cve/CVE-2018-3639 https://vulners.com/cve/CVE-2018-3639 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory variant4advisory.asc. include'compat.inc'; if description scriptid109957; scriptversion"1.11";...

CentOS 7 : libvirt (CESA-2018:1632) (Spectre)

An update for libvirt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CentOS 7 : qemu-kvm (CESA-2018:1633) (Spectre)

An update for qemu-kvm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CentOS 7 : java-1.7.0-openjdk (CESA-2018:1648) (Spectre)

An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CentOS 7 : java-1.8.0-openjdk (CESA-2018:1649) (Spectre)

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CentOS 6 : java-1.8.0-openjdk (CESA-2018:1650) (Spectre)

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 7 : kernel-rt (RHSA-2018:1630) (Spectre)

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RHEL 7 : qemu-kvm (RHSA-2018:1663) (Spectre)

An update for qemu-kvm is now available for Red Hat Enterprise Linux 7.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2018-1649)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1649 advisory. 1:1.8.0.171-8.b10 - added and applied 1566890embargoed20180521.patch - Resolves: rhbz1578555 Tenable has extracted the preceding description block directly from...

Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2018-1650)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-1650 advisory. 1:1.8.0.171-8.b10 - added and applied 1566890embargoed20180521.patch - Resolves: rhbz1578545 Tenable has extracted the preceding description block directly from...