3166 matches found
Information Disclosure
Systems with microprocessors utilizing speculative execution and address translations are vulnerable to information disclosure. An L1TF issue allows an unprivileged attacker to read privileged memory of the kernel or other processes by conducting targeted cache side-channel attacks...
Information Disclosure
Linux kernel is vulnerable to information disclosure. The FPU state information is disclosed in a lazy FPU restore, which would allow a local process to determine information from another process through a specilative execution side channel...
Information Disclosure
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known, are vulnerable to information disclosure. A local unprivileged attacker is able to perform a side-channel analysis known as Speculative...
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2019-42) (Spectre)
This update for java-170-openjdk to version 7u201 fixes the following issues : Security issues fixed : - CVE-2018-3136: Manifest better support bsc1112142 - CVE-2018-3139: Better HTTP Redirection bsc1112143 - CVE-2018-3149: Enhance JNDI lookups bsc1112144 - CVE-2018-3169: Improve field accesses...
openSUSE: Security Advisory for java-1_7_0-openjdk (openSUSE-SU-2019:0042-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for java-1_7_0-openjdk (important)
openSUSE Security Update: Security update for java-170-openjdk Announcement ID: openSUSE-SU-2019:0042-1 Rating: important References: 1101644 1101645 1101651 1101656 1112142 1112143 1112144 1112146 1112147 1112152 1112153 Cross-References: CVE-2018-13785 CVE-2018-16435 CVE-2018-2938 CVE-2018-2940...
January 8, 2019—KB4480975 (Monthly Rollup)
None None...
January 8, 2019—KB4480960 (Security-only update)
None None...
January 8, 2019—KB4480957 (Security-only update)
None None...
January 8, 2019—KB4480968 (Monthly Rollup)
None None...
January 8, 2019—KB4480964 (Security-only update)
None None...
January 8, 2019—KB4480963 (Monthly Rollup)
None None...
January 8, 2019—KB4480970 (Monthly Rollup)
None None...
January 8, 2019—KB4480972 (Security-only update)
None None...
Fedora 28 : xen (2018-683dfde81a) (Foreshadow)
L1 Terminal Fault speculative side channel patch bundle XSA-273, CVE-2018-3620, CVE-2018-3646 drop patches also in the bundle, which also includes Use of v2 grant tables may cause crash on ARM XSA-268 1616081 x86: Incorrect MSRDEBUGCTL handling lets guests enable BTS XSA-269 1616077 oxenstored do...
Fedora 28 : 2:qemu (2018-44f8a7454d) (Spectre)
New CPU features for speculative store bypass CVE-2018-3639 On Intel x86 hosts, the 'ssbd' feature must be explicitly added to any virtual machines that are not using host-passthrough/host-model CPU setup. NB this requires new microcode too, which is not yet available in Fedora microcodectl RPMs...
Fedora 28 : libvirt (2018-527698a904) (Spectre)
Add new CPU features for speculative store bypass CVE-2018-3639 On Intel x86 hosts, the 'ssbd' feature must be explicitly added to any virtual machines that are not using host-passthrough/host-model CPU setup. NB this requires new microcode too, which is not yet available in Fedora microcodectl...
SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2018:2409-1) (Foreshadow)
This update for xen fixes the following security issues : - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest O...
SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2018:2092-1) (Spectre)
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following new feature was added : - NVDIMM memory error notification ACPI 6.2 The following security bugs were fixed : - CVE-2018-13406: An integer overflow in the uvesafbsetcmap function could have resu...
