Ubuntu 14.04 LTS / 16.04 LTS : Intel Microcode regression (USN-3531-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3531-2 advisory. USN-3531-1 updated Intel microcode to the 20180108 release. Regressions were discovered in the microcode updates which could cause system instability ...

Lies and More Lies

Following the release of the Spectre and Meltdown CPU attacks, the security community wondered if other researchers would find related speculative attack problems. When the following appeared, we were concerned: "Skyfall and Solace More vulnerabilities in modern computers. Following the recent...

(RHSA-2018:0112) Important: libvirt security update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fixes: An industry-wide issue was found in the way many modern...

(RHSA-2018:0111) Important: libvirt security update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fixes: An industry-wide issue was found in the way many modern...

(RHSA-2018:0108) Important: libvirt security update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fixes: An industry-wide issue was found in the way many modern...

(RHSA-2018:0106) Important: qemu-kvm security update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm package provides the user-space component for running virtual machines that use KVM. Security Fixes: An industry-wide issue was found in the way many modern microprocessor...

(RHSA-2018:0105) Important: qemu-kvm security update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm package provides the user-space component for running virtual machines that use KVM. Security Fixes: An industry-wide issue was found in the way many modern microprocessor...

(RHSA-2018:0104) Important: qemu-kvm security update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm package provides the user-space component for running virtual machines that use KVM. Security Fixes: An industry-wide issue was found in the way many modern microprocessor...

(RHSA-2018:0103) Important: qemu-kvm security update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm package provides the user-space component for running virtual machines that use KVM. Security Fixes: An industry-wide issue was found in the way many modern microprocessor...

Security fix for the ALT Linux 10 package firefox-esr version 52.6.0-alt1

Jan. 22, 2018 Andrey Cherepanov 52.6.0-alt1 - New ESR version 52.6.0 - Fixes: + CVE-2018-5095 Integer overflow in Skia library during edge builder allocation + CVE-2018-5096 Use-after-free while editing form elements + CVE-2018-5097 Use-after-free when source document is manipulated during XSLT +...

Microsoft Windows Speculative Execution Side-Channel Vulnerabilities (KB4073291)

This host is missing an important security update according to Microsoft KB4073291. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

EulerOS 2.0 SP2 : dracut (EulerOS-SA-2018-1021)

According to the version of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly us...

Amazon Linux AMI : qemu-kvm (ALAS-2018-942) (Spectre)

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used performance optimization. There are three primary variants of the issue which differ in the way the speculative execution can be exploited. Variant...

EulerOS 2.0 SP2 : qemu-kvm (EulerOS-SA-2018-1015)

According to the version of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly...

EulerOS 2.0 SP2 : libvirt (EulerOS-SA-2018-1017)

According to the version of the libvirt packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly...

EulerOS 2.0 SP1 : qemu-kvm (EulerOS-SA-2018-1014)

According to the version of the qemu-kvm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly...

EulerOS 2.0 SP1 : dracut (EulerOS-SA-2018-1020)

According to the version of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly us...

Meltdown and Spectre Aren’t Business as Usual

The new year brought a new vulnerability type — the CPU-based Meltdown and Spectre bugs — that’s forcing vendors and IT departments to modify long-standing ways of identifying threats, prioritizing remediation, managing patches and evaluating risk. “Meltdown and Spectre are different...

(RHSA-2018:0092) Important: Red Hat CloudForms 4.0 security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. CloudForms virtual machines include a copy of the Linux Kernel. Security Fixes: An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructio...

SUSE-SU-2018:0115-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. This update adds mitigations for various side channel attacks against modern CPUs that could disclose content of otherwise unreadable memory bnc1068032. - CVE-2017-5753 / 'SpectreAttack': Local...