Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

SUSE: 2019:1244-1 Important: Kernel Updates for Execution Leak Issues

suse
Calendar Grey May 14, 2019
Dist Suse Esm H88
A critical update for Ubuntu addressing kernel flaws, enhancing security through numerous enhancements and countermeasures.
An update that solves 9 vulnerabilities and has 154 fixes is now available

Summary

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS) - CVE-2018-12130: Microarchitectural Load Port Data Samling (MLPDS) - CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) This kernel update contains software mitigations for these issues, which also utilize CPU microcode updates shipped in parallel. For more information on this set of vulnerabilities, check out https://support.scc.suse.com/s/kb?language=en_US The following security issues were fixed:

References

#1050549 #1051510 #1052904 #1053043 #1055117

#1055121 #1061840 #1065600 #1065729 #1070872

#1082555 #1083647 #1085535 #1085536 #1088804

#1094244 #1097583 #1097584 #1097585 #1097586

#1097587 #1097588 #1100132 #1103259 #1111331

#1112128 #1112178 #1113399 #1113722 #1114279

#1114542 #1114638 #1119086 #1119680 #1120318

#1120902 #1122767 #1123105 #1125342 #1126221

#1126356 #1126704 #1126740 #1127175 #1127371

#1127372 #1127374 #1127378 #1127445 #1128415

#1128544 #1129276 #1129770 #1130130 #1130154

#1130195 #1130335 #1130336 #1130337 #1130338

#1130425 #1130427 #1130518 #1130527 #1130567

#1131062 #1131107 #1131167 #1131168 #1131169

#1131170 #1131171 #1131172 #1131173 #1131174

#1131175 #113...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:1244-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here