Stay Secure with the Latest Linux Advisories

security advisorysecurity updatedebian

Debian: DSA-4566-1 Security Update For QEMU - Critical Hypervisor Fix

This update for QEMU, a fast processor emulator, backports support to passthrough the pschange-mc-no CPU flag. The virtualised MSR seen by a guest is set to show the bug as fixed, allowing to disable iTLB Multihit mitigations in nested hypervisors (cf. DSA 4564-1). . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4566-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso November 12, 2019 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : qemu Debian Bug : 944623 This update for QEMU, a fast processor emulator, backports support to passthrough the pschange-mc-no CPU flag. The virtualised MSR seen by a guest is set to show the bug as fixed, allowing to disable iTLB Multihit mitigations in nested hypervisors (cf. DSA 4564-1). For the stable distribution (buster), this problem has been fixed in version 1:3.1+dfsg-8+deb10u3. We recommend that you upgrade your qemu packages. For the detailed security status of qemu please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/qemu Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Security Advisory DSA-4570-1 outlines updates to the Nginx web server released on March 3, 2020.. QEMU Update, Security Patch, Debian Advisory, Processor Emulator. . Severity: Critical. LinuxSecurity.com Team

Nov 12, 2019 •Critical Debian