SUSE Linux: 2018:1456-1 Important: Xen Memory Disambiguation Update
suse
May 29, 2018
An update that solves three vulnerabilities and has three fixes is now available
Summary
This update for xen fixes the following issues: Security issues fixed: - CVE-2018-3639: Spectre V4 ??? Speculative Store Bypass aka "Memory Disambiguation" (bsc#1092631) This feature can be controlled by the "ssbd=on/off" commandline flag for the XEN hypervisor. - CVE-2018-10982: x86 vHPET interrupt injection errors (XSA-261 bsc#1090822) - CVE-2018-10981: qemu may drive Xen into unbounded loop (XSA-262 bsc#1090823) Other bugfixes: - Upstream patches from Jan (bsc#1027519) - additional fixes related to Page Table Isolation (XPTI). (bsc#1074562 XSA-254) - qemu-system-i386 cannot handle more than 4 HW NICs (bsc#1090296) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Topics Covered
References
#1027519 #1074562 #1090296 #1090822 #1090823
#1092631
Cross- CVE-2018-10981 CVE-2018-10982 CVE-2018-3639
Affected Products:
SUSE Linux Enterprise Software Development Kit 12-SP3
SUSE Linux Enterprise Server 12-SP3
SUSE Linux Enterprise Desktop 12-SP3
SUSE CaaS Platform ALL
https://www.suse.com/security/cve/CVE-2018-10981.html
https://www.suse.com/security/cve/CVE-2018-10982.html
https://www.suse.com/security/cve/CVE-2018-3639.html
https://bugzilla.suse.com/1027519
https://bugzilla.suse.com/1074562
https://bugzilla.suse.com/1090296
https://bugzilla.suse.com/1090822
https://bugzilla.suse.com/1090823
https://bugzilla.suse.com/1092631
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2018:1456-1
Rating: important
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!