Explore top 10 tips to secure your open-source projects now. Read More
×
This update for xen fixes the following issues: This security issue was fixed: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis (bsc#1091107, bsc#1027519). These non-security issue were fixed: - bsc#1102116: SSBD is not virtualized for guests - bsc#1101684: Not able to disable the visibility of the new CPU flags Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-LTSS:
#1027519 #1091107 #1101684 #1102116
Cross- CVE-2018-3646
Affected Products:
SUSE Linux Enterprise Server 12-LTSS
https://www.suse.com/security/cve/CVE-2018-3646.html
https://bugzilla.suse.com/1027519
https://bugzilla.suse.com/1091107
https://bugzilla.suse.com/1101684
https://bugzilla.suse.com/1102116
Get the latest Linux and open source security news straight to your inbox.