SUSE-SU-2019:1238-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2019-9824: Fixed an information leak in slirp bsc1129622 - CVE-2019-8934: Added method to specify whether or not to expose certain ppc64 host information, which can be considered a security issue bsc1126455 - CVE-2019-3812: Fixed OOB memory...

Xen Project fsgsbase CPU Feature Privilege Escalation Vulnerability (XSA-293)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a privilege escalation vulnerability. Only x86 systems with the fsgsbase CPU feature are affected. Note that Nessus has checked the changeset versions based on the xen.git change log...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1377-2) (Spectre)

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bug was fixed : CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature in modern CPUs were mitigated, aka 'Spectre Variant 4' bnc1087082. A new boot commandlin...

SUSE-SU-2018:1614-2 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2018-3639: cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits pass through bsc1092885...

SUSE-SU-2018:1452-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2018-3639: cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits pass through...

SUSE SLES12 Security Update : qemu (SUSE-SU-2018:1386-1) (Spectre)

This update for qemu fixes several issues. This security issue was fixed : - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests bsc1092885. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all pri...

SUSE SLES11 Security Update : kvm (SUSE-SU-2018:1389-1) (Spectre)

This update for kvm fixes the following issues: This security issue was fixed : - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests bsc1092885. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of al...

Security update for qemu (important)

This update for qemu fixes several issues. This security issue was fixed: - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests bsc1092885. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prio...

SUSE-SU-2018:1389-1 Security update for kvm

This update for kvm fixes the following issues: This security issue was fixed: - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests bsc1092885. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all...

SUSE-SU-2018:1308-1 Security update for kvm

This update for kvm fixes the following issues: This update has the next round of Spectre v2 related patches, which now integrates with corresponding changes in libvirt. A January 2018 release of qemu initially addressed the Spectre v2 vulnerability for KVM guests by exposing the spec-ctrl featur...

SUSE-SU-2018:1077-1 Security update for kvm

This update for kvm fixes the following issues: - This update has the next round of Spectre v2 related patches, which now integrates with corresponding changes in libvirt. A January 2018 release of qemu initially addressed the Spectre v2 vulnerability for KVM guests by exposing the spec-ctrl...

SUSE-SU-2018:0831-1 Security update for qemu

This update for qemu fixes the following issues: This update has the next round of Spectre v2 related patches, which now integrate with corresponding changes in libvirt. CVE-2017-5715 bsc1068032 The January 2018 release of qemu initially addressed the Spectre v2 vulnerability for KVM guests by...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2018:0762-1) (Spectre)

This update for qemu fixes the following issues: This update has the next round of Spectre v2 related patches, which now integrate with corresponding changes in libvirt. CVE-2017-5715 bsc1068032 The January 2018 release of qemu initially addressed the Spectre v2 vulnerability for KVM guests by...

SUSE-SU-2018:0762-1 Security update for qemu

This update for qemu fixes the following issues: This update has the next round of Spectre v2 related patches, which now integrate with corresponding changes in libvirt. CVE-2017-5715 bsc1068032 The January 2018 release of qemu initially addressed the Spectre v2 vulnerability for KVM guests by...

Pool update does not complete when CPU feature set has changed

When applying a hotfix that contains CPU feature setchangesto a XenServer host or pool that has running VMs, the XenCenterInstall Update wizard might stop after installing the update on one or more of the hosts and display the following error: The host does not have some of the CPU features that...

XenMotion Compatibility Requirements

When migrating a VM with XenMotion or Storage XenMotion, the new VM host must meet the followingcompatibility requirements in order for the migration to proceed: • XenServer Tools must be installed on each VM that you wish to migrate. • The target host must have the same or a more recent version ...

Updated kernel-tmb package fixes security vulnerabilities

Updated kernel-tmb provides upstream 3.10.51 kernel and fixes the following security issues: Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value CVE-2014-020...

CVE-2014-4508

arch/x86/kernel/entry32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of service OOPS and system crash via an invalid syscall number, as demonstrated by number 1000...

CVE-2014-4508

arch/x86/kernel/entry32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of service OOPS and system crash via an invalid syscall number, as demonstrated by number 1000...

Amazon Linux AMI : kernel (ALAS-2013-166)

It was found that a deadlock could occur in the Out of Memory OOM killer. A process could trigger this deadlock by consuming a large amount of memory, and then causing requestmodule to be called. A local, unprivileged user could use this flaw to cause a denial of service excessive memory...