PT-2019-6437 · Advanced Micro Devices Inc. +2 · Amd Secure Encrypted Virtualization +3

Name of the Vulnerable Software and Affected Versions: Secure Encrypted Virtualization SEV on Advanced Micro Devices AMD Platform Security Processor PSP 0.17 build 11 and earlier Description: The issue is related to an insecure cryptographic implementation in AMD's Secure Encrypted Virtualization...

February 12, 2019—KB4486564 (Security-only update)

None None...

February 12, 2019—KB4486993 (Security-only update)

None None...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0007) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/bugs: Fix the AMD SSBD usage of the SPECCTRL MSR Tom Lendacky Orabug: 28870524 CVE-2018-3639 - x86/bugs: Add AMD's SPECCTRL MSR usage Konrad Rzeszutek Wilk Orabug: 28870524 CVE-2018-3639 -...

Unbreakable Enterprise kernel security update

4.1.12-124.25.1 - x86/bugs: Fix the AMD SSBD usage of the SPECCTRL MSR Tom Lendacky Orabug: 28870524 CVE-2018-3639 - x86/bugs: Add AMD's SPECCTRL MSR usage Konrad Rzeszutek Wilk Orabug: 28870524 CVE-2018-3639 - x86/cpufeatures: rename X86FEATUREAMDSSBD to X86FEATURELSCFGSSBD Mihai Carabas Orabug:...

kernel security, bug fix, and enhancement update

3.10.0-957.5.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-957.5.1 - fs revert 'fs sunrpc: Ensure we always close the socket after a...

USN-3848-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description USN-3848-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.0...

January 22, 2019—KB4476976 (OS Build 17763.292)

None None...

Denial Of Service (DoS)

QEMU is vulnerable to denial of service. A heap-based buffer overflow flaw was discovered in the way QEMU's AMD PC-Net II Ethernet Controller emulation received certain packets in loopback mode. A privileged user with the CAPSYSRAWIO capability inside a guest could use this flaw to crash the host...

January 8, 2019—KB4480957 (Security-only update)

None None...

January 8, 2019—KB4480968 (Monthly Rollup)

None None...

January 8, 2019—KB4480972 (Security-only update)

None None...

January 8, 2019—KB4480975 (Monthly Rollup)

None None...

SUSE SLES11 Security Update : xen (SUSE-SU-2019:13921-1)

This update for xen fixes the following issues : Security vulnerabilities fixed : CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowed a guest to escalate its privileges, may cause a Denial of Service DoS affecting the enti...

SUSE SLES12 Security Update : xen (SUSE-SU-2019:0020-1)

This update for xen fixes the following issues : Security vulnerabilities fixed : CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowed a guest to escalate its privileges, may cause a Denial of Service DoS affecting the enti...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4315)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4315 advisory. - pinctrl: amd: Use devmpinctrlregister for pinctrl registration Laxman Dewangan Orabug: 27539246 CVE-2017-18174 - mlock: fix mlock count can not...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2019:0003-1)

This update for xen fixes the following issues : Update to Xen 4.11.1 bug fix release bsc1027519 CVE-2018-17963: Fixed an integer overflow issue in the QEMU emulator, which could occur when a packet with large packet size is processed. A user inside a guest could have used this flaw to crash the...

Fedora 28 : 2:qemu (2018-44f8a7454d) (Spectre)

New CPU features for speculative store bypass CVE-2018-3639 On Intel x86 hosts, the 'ssbd' feature must be explicitly added to any virtual machines that are not using host-passthrough/host-model CPU setup. NB this requires new microcode too, which is not yet available in Fedora microcodectl RPMs...

Fedora 29 : xen (2018-2fde555d91)

insufficient TLB flushing / improper large page mappings with AMD IOMMUs XSA-275 1651665 resource accounting issues in x86 IOREQ server handling XSA-276 x86: incorrect error handling for guest p2m page removals XSA-277 x86: DoS from attempting to use INVPCID with a non-canonical addresses XSA-279...

Fedora 28 : libvirt (2018-527698a904) (Spectre)

Add new CPU features for speculative store bypass CVE-2018-3639 On Intel x86 hosts, the 'ssbd' feature must be explicitly added to any virtual machines that are not using host-passthrough/host-model CPU setup. NB this requires new microcode too, which is not yet available in Fedora microcodectl...