Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
98
security advisorymoderatebug fixRed Hat Enterprise Linux 8.1: RHSA-2021-3676-01 Moderate KVM Security
An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: kernel security, bug fix, and enhancement update Advisory ID: RHSA-2021:3676-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:3676 Issue date: 2021-09-28 CVE Names: CVE-2021-3653 CVE-2021-3656 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat CodeReady Linux Builder EUS (v. 8.1) - aarch64, ppc64le, x86_64 Red Hat Enterprise Linux BaseOS EUS (v. 8.1) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: SVM nested virtualization issue in KVM (AVIC support) (CVE-2021-3653) * kernel: SVM nested virtualization issue in KVM (VMLOAD/VMSAVE) (CVE-2021-3656) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * RHEL8.1 Snapshot1 - [4.18.0-128.el8.ppc64le] [ Brazos 31TB/192 Core ] While running upstream kernel selftest case system crashed (TM) (BZ#1996056) * Kernel panic at n_tty_set_termios+0x30(BZ#1998001) Enhancement(s): * ixgbe: ea7813c6167a [netdrv] ixgbe: fix possible deadlock in ixgbe_service_task() (BZ#1993834) * [Marvell 8.2 FEAT] update qla2xxx to latest upstream (BZ#2000531) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1983686 - CVE-2021-3653 kernel: SVM nested virtualization issue in KVM (AVIC support) 1983988 - CVE-2021-3656 kernel: SVM nested virtualization issue in KVM (VMLOAD/VMSAVE) 6. Package List: Red Hat Enterprise Linux BaseOS EUS (v.8.1): Source: kernel-4.18.0-147.56.1.el8_1.src.rpm aarch64: bpftool-4.18.0-147.56.1.el8_1.aarch64.rpm bpftool-debuginfo-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-core-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-cross-headers-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-debug-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-debug-core-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-debug-debuginfo-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-debug-devel-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-debug-modules-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-debug-modules-extra-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-debuginfo-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-debuginfo-common-aarch64-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-devel-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-headers-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-modules-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-modules-extra-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-tools-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-tools-debuginfo-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-tools-libs-4.18.0-147.56.1.el8_1.aarch64.rpm perf-4.18.0-147.56.1.el8_1.aarch64.rpm perf-debuginfo-4.18.0-147.56.1.el8_1.aarch64.rpm python3-perf-4.18.0-147.56.1.el8_1.aarch64.rpm python3-perf-debuginfo-4.18.0-147.56.1.el8_1.aarch64.rpm noarch: kernel-abi-whitelists-4.18.0-147.56.1.el8_1.noarch.rpm kernel-doc-4.18.0-147.56.1.el8_1.noarch.rpm ppc64le: bpftool-4.18.0-147.56.1.el8_1.ppc64le.rpm bpftool-debuginfo-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-core-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-cross-headers-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-debug-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-debug-core-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-debug-debuginfo-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-debug-devel-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-debug-modules-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-debug-modules-extra-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-debuginfo-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-debuginfo-common-ppc64le-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-devel-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-headers-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-modules-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-modules-extra-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-tools-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-tools-debuginfo-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-tools-libs-4.18.0-147.56.1.el8_1.ppc64le.rpm perf-4.18.0-147.56.1.el8_1.ppc64le.rpm perf-debuginfo-4.18.0-147.56.1.el8_1.ppc64le.rpm python3-perf-4.18.0-147.56.1.el8_1.ppc64le.rpm python3-perf-debuginfo-4.18.0-147.56.1.el8_1.ppc64le.rpm s390x: bpftool-4.18.0-147.56.1.el8_1.s390x.rpm bpftool-debuginfo-4.18.0-147.56.1.el8_1.s390x.rpm kernel-4.18.0-147.56.1.el8_1.s390x.rpm kernel-core-4.18.0-147.56.1.el8_1.s390x.rpm kernel-cross-headers-4.18.0-147.56.1.el8_1.s390x.rpm kernel-debug-4.18.0-147.56.1.el8_1.s390x.rpm kernel-debug-core-4.18.0-147.56.1.el8_1.s390x.rpm kernel-debug-debuginfo-4.18.0-147.56.1.el8_1.s390x.rpm kernel-debug-devel-4.18.0-147.56.1.el8_1.s390x.rpm kernel-debug-modules-4.18.0-147.56.1.el8_1.s390x.rpm kernel-debug-modules-extra-4.18.0-147.56.1.el8_1.s390x.rpm kernel-debuginfo-4.18.0-147.56.1.el8_1.s390x.rpm kernel-debuginfo-common-s390x-4.18.0-147.56.1.el8_1.s390x.rpm kernel-devel-4.18.0-147.56.1.el8_1.s390x.rpm kernel-headers-4.18.0-147.56.1.el8_1.s390x.rpm kernel-modules-4.18.0-147.56.1.el8_1.s390x.rpm kernel-modules-extra-4.18.0-147.56.1.el8_1.s390x.rpm kernel-tools-4.18.0-147.56.1.el8_1.s390x.rpm kernel-tools-debuginfo-4.18.0-147.56.1.el8_1.s390x.rpm kernel-zfcpdump-4.18.0-147.56.1.el8_1.s390x.rpm kernel-zfcpdump-core-4.18.0-147.56.1.el8_1.s390x.rpm kernel-zfcpdump-debuginfo-4.18.0-147.56.1.el8_1.s390x.rpm kernel-zfcpdump-devel-4.18.0-147.56.1.el8_1.s390x.rpm kernel-zfcpdump-modules-4.18.0-147.56.1.el8_1.s390x.rpm kernel-zfcpdump-modules-extra-4.18.0-147.56.1.el8_1.s390x.rpm perf-4.18.0-147.56.1.el8_1.s390x.rpm perf-debuginfo-4.18.0-147.56.1.el8_1.s390x.rpm python3-perf-4.18.0-147.56.1.el8_1.s390x.rpm python3-perf-debuginfo-4.18.0-147.56.1.el8_1.s390x.rpm x86_64: bpftool-4.18.0-147.56.1.el8_1.x86_64.rpm bpftool-debuginfo-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-core-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-cross-headers-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-debug-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-debug-core-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-debug-debuginfo-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-debug-devel-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-debug-modules-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-debug-modules-extra-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-debuginfo-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-debuginfo-common-x86_64-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-devel-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-headers-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-modules-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-modules-extra-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-tools-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-tools-debuginfo-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-tools-libs-4.18.0-147.56.1.el8_1.x86_64.rpm perf-4.18.0-147.56.1.el8_1.x86_64.rpm perf-debuginfo-4.18.0-147.56.1.el8_1.x86_64.rpm python3-perf-4.18.0-147.56.1.el8_1.x86_64.rpm python3-perf-debuginfo-4.18.0-147.56.1.el8_1.x86_64.rpm Red Hat CodeReady Linux Builder EUS (v.8.1): aarch64: bpftool-debuginfo-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-debug-debuginfo-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-debuginfo-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-debuginfo-common-aarch64-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-tools-debuginfo-4.18.0-147.56.1.el8_1.aarch64.rpm kernel-tools-libs-devel-4.18.0-147.56.1.el8_1.aarch64.rpm perf-debuginfo-4.18.0-147.56.1.el8_1.aarch64.rpm python3-perf-debuginfo-4.18.0-147.56.1.el8_1.aarch64.rpm ppc64le: bpftool-debuginfo-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-debug-debuginfo-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-debuginfo-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-debuginfo-common-ppc64le-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-tools-debuginfo-4.18.0-147.56.1.el8_1.ppc64le.rpm kernel-tools-libs-devel-4.18.0-147.56.1.el8_1.ppc64le.rpm perf-debuginfo-4.18.0-147.56.1.el8_1.ppc64le.rpm python3-perf-debuginfo-4.18.0-147.56.1.el8_1.ppc64le.rpm x86_64: bpftool-debuginfo-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-debug-debuginfo-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-debuginfo-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-debuginfo-common-x86_64-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-tools-debuginfo-4.18.0-147.56.1.el8_1.x86_64.rpm kernel-tools-libs-devel-4.18.0-147.56.1.el8_1.x86_64.rpm perf-debuginfo-4.18.0-147.56.1.el8_1.x86_64.rpm python3-perf-debuginfo-4.18.0-147.56.1.el8_1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-3653 https://access.redhat.com/security/cve/CVE-2021-3656 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYVMoU9zjgjWX9erEAQj7Hw/7B4jfbBZDxD/EwrYYkix835qtbNor28yB ScE13wiandGeli7rBfVk+A2LUIwX3h3KpjMUiuQuZkHSqU/EehPhkJldg+uLqCTP n48V2GD8ihBnAOt8Mh3XhXydnFJnKgLK2hTgZiXjZ6qdIe1Bc3iMNRmCdm+st7Gb t5pUkMOKEHM1FWp8C1jEMRHnIh0HsrbdZo3E34Y7dsqTv2b0F3kKpPBEw1iR+SmJ wcwQj+UU9P1t347xzEE6gI0jorlunuThmfGn5gRfIpVRyon9FjNhzJbm1LcXAnrE xRcIZDXVi/b6WIr2HBMIqzfMsoh9g01ojcx51EryzSYAaCbKO3Ng7++rSVJ69tim VzvUiDgZ5dANxT74sXd9t0s1/aGcFNBAMOr9LW6V7tBlm5mSHl1zhXqiCqkoxCuH EKYMci39rTWC+bx4XKRUbyC0YHr39VI92EENr2Tf2g/ePRqfqtpiAacwupTgazYH /7lBLYqPqyfxnbDTvlqzmlMVXz1qlNrlQ8EhelhBzJU7NF1A8RqWZErm7PKuyPot 3feRIVWYX5S5caCpJM9dREKeNzJ89zCypkeSmlzwi5X1C/MsPIqBSTY3WM1mnIbT lsNVcTUWzChy92/zkuVVAKHriJLMJiQhV/uprFP0QCHuxdna+r3pjMQSAeMZjSFx +1XIdqOF8Ic=TDFN -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Sep 28, 2021
•Important
Red Hat
89
security advisoryfedoracriticalFedora 28: FEDORA-2018-73dd8de892 Critical: Nested Virtualization Risk
x86: Nested VT-x usable even when disabled [XSA-278]. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-73dd8de892 2018-11-11 03:11:36.463791 --------------------------------------------------------------------------------Name : xen Product : Fedora 28 Version : 4.10.2 Release : 2.fc28 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor --------------------------------------------------------------------------------Update Information: x86: Nested VT-x usable even when disabled [XSA-278] --------------------------------------------------------------------------------ChangeLog: * Tue Sep 25 2018 Michael Young - 4.10.2-2 - x86: Nested VT-x usable even when disabled [XSA-278] (#1643118) * Tue Sep 25 2018 Michael Young - 4.10.2-1 - update to xen-4.10.2 adjust xen.use.fedora.ipxe.patch remove patches for issues now fixed upstream * Wed Aug 15 2018 Michael Young - 4.10.1-6 - L1 Terminal Fault speculative side channel patch bundle [XSA-273, CVE-2018-3620, CVE-2018-3646] drop patches also in the bundle, which also includes Use of v2 grant tables may cause crash on ARM [XSA-268, CVE-2018-15469] (#1616081) x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS [XSA-269, CVE-2018-15468] (#1616077) oxenstored does not apply quota-maxentity [XSA-272, CVE-2018-15470] (#1616080) * Wed Jun 27 2018 Michael Young - 4.10.1-5 - preemption checks bypassed in x86 PV MM handling [XSA-264, CVE-2018-12891] (#1595959) - x86: #DB exception safety check can be triggered by a guest [XSA-265, CVE-2018-12893] (#1595958) - libxl fails to honour readonly flag on HVM emulated SCSI disks [XSA-266, CVE-2018-12892] (#1595957) * Fri Jun 15 2018 Michael Young - 4.10.1-4 - Speculative register leakage fromlazy FPU context switching [XSA-267, CVE-2018-3665] - fix for change in iasl output * Tue May 22 2018 Michael Young - 4.10.1-3 - Speculative Store Bypass [XSA-263, CVE-2018-3639] (with extra patches so it applies cleanly) * Tue May 8 2018 Michael Young - 4.10.1-2 - x86: mishandling of debug exceptions [XSA-260, CVE-2018-8897] - x86 vHPET interrupt injection errors [XSA-261, CVE-2018-10982] (#1576089) - qemu may drive Xen into unbounded loop [XSA-262, CVE-2018-10981] (#1576680) * Thu May 3 2018 Michael Young - 4.10.1-1 - update to xen-4.10.1 adjust xen.use.fedora.ipxe.patch and xen.fedora.efi.build.patch remove patches for issues now fixed upstream package /usr/lib/debug/usr/lib/xen/boot/xen-shim-syms * Wed Apr 25 2018 Michael Young - 4.10.0-9 - Information leak via crafted user-supplied CDROM [XSA-258, CVE-2018-10472] (#1571867) - x86: PV guest may crash Xen with XPTI [XSA-259, CVE-2018-10471] (#1571878) --------------------------------------------------------------------------------References: [ 1 ] Bug #1643116 - CVE-2018-18883 xen: Nested VT-x usable even when disabled https://bugzilla.redhat.com/show_bug.cgi?id=1643116 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-73dd8de892' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Nov 11, 2018
•Critical
Fedora
89
security advisorymoderatesecurity issueFedora 29: FEDORA-2018-a24754252a Moderate: Nested VT-x Issue
x86: Nested VT-x usable even when disabled [XSA-278]. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-a24754252a 2018-11-04 05:49:41.589480 --------------------------------------------------------------------------------Name : xen Product : Fedora 29 Version : 4.11.0 Release : 8.fc29 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor --------------------------------------------------------------------------------Update Information: x86: Nested VT-x usable even when disabled [XSA-278] --------------------------------------------------------------------------------ChangeLog: * Wed Oct 24 2018 Michael Young - 4.11.0-8 - x86: Nested VT-x usable even when disabled [XSA-278] --------------------------------------------------------------------------------References: [ 1 ] Bug #1643116 - CVE-2018-18883 xen: Nested VT-x usable even when disabled https://bugzilla.redhat.com/show_bug.cgi?id=1643116 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-a24754252a' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Nov 04, 2018
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!