Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

hw: cpu: speculative store bypass

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...

SUSE-SU-2018:2048-1 Security update for the Linux Kernel (Live Patch 11 for SLE 12 SP2)

This update for the Linux Kernel 4.4.74-9232 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

Fedora 27 : xen (2018-1a467757ce)

preemption checks bypassed in x86 PV MM handling XSA-264, CVE-2018-12891 x86: DB exception safety check can be triggered by a guest XSA-265, CVE-2018-12893 libxl fails to honour readonly flag on HVM emulated SCSI disks XSA-266, CVE-2018-12892 ---- Speculative register leakage from lazy FPU contex...

Low: libvirt

Issue Overview: An incomplete fix for CVE-2018-5748 that affects QEMU monitor leading to a resource exhaustion but now also triggered via QEMU guest agent.CVE-2018-1064 qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU...

New Spectre-Level Flaw Targets Return Stack Buffer

Researchers have discovered yet another speculative execution side-channel flaw enabling attackers to access sensitive data at the CPU level. The new Spectre-class exploit, dubbed SpectreRSB, was detailed by researchers from the University of California at Riverside in a research paper on Friday...

hw: cpu: speculative store bypass

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...

Virtuozzo 6 : parallels-server-bm-release / vzkernel / etc (VZA-2018-048)

According to the versions of the parallels-server-bm-release / vzkernel / etc packages installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - x86 AMD An industry-wide issue was found in the way many modern microprocessor designs have implemented...

hw: cpu: speculative store bypass

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update Support, and Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impac...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1949-1)

This update for the Linux Kernel 4.4.121-9273 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

CentOS Update for kernel CESA-2018:2164 centos6

Check the version of kernel SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882924";...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2018:2164 An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

SUSE-SU-2018:1949-1 Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-9273 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1943-1)

This update for the Linux Kernel 4.4.114-9267 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1945-1)

This update for the Linux Kernel 4.4.114-9264 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1947-1)

This update for the Linux Kernel 4.4.90-9250 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1944-1)

This update for the Linux Kernel 4.4.103-9256 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1946-1)

This update for the Linux Kernel 4.4.121-9280 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1940-1)

This update for the Linux Kernel 4.4.103-9253 fixes several issues. The following security issue was fixed : - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...