Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 596
Alerts This Week
Warning Icon 1 596

SUSE: 2018:2483-1 Important: Xen Speculative Execution Threat

suse
Calendar Grey August 23, 2018
Dist Suse Esm H88
The latest SUSE Security Update resolves a significant vulnerability within xen, tackling a severe risk of unauthorized data access.
An update that solves one vulnerability and has three fixes is now available

Summary

This update for xen fixes the following issues: This security issue was fixed: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis (bsc#1091107, bsc#1027519). These non-security issue were fixed: - bsc#1102116: SSBD is not virtualized for guests - bsc#1101684: Not able to disable the visibility of the new CPU flags Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-LTSS:

References

#1027519 #1091107 #1101684 #1102116

Cross- CVE-2018-3646

Affected Products:

SUSE Linux Enterprise Server 12-LTSS

https://www.suse.com/security/cve/CVE-2018-3646.html

https://bugzilla.suse.com/1027519

https://bugzilla.suse.com/1091107

https://bugzilla.suse.com/1101684

https://bugzilla.suse.com/1102116

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2018:2483-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.