gpp_maybe Security update for xen

SUSE-SLE-Module-Basesystem-15-2018-1663

This update for xen fixes the following security issues: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis (bsc#1091107, bsc#1027519). - Incorrect MSR_DEBUGCTL handling let guests enable BTS allowing a malicious or buggy guest administrator can lock up the entire host (bsc#1103276)

• Release Date
  Aug 17 2018
• References
  Bugzilla: 1091107, 1027519, 1103276
  CVEs: CVE-2018-3646
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.10.1_08-3.6.1 lock src

  xen-libs
  Xen Virtualization: Libraries

  4.10.1_08-3.6.1 lock rpm

  xen-tools-domU
  Xen Virtualization: Control tools for domain U

  4.10.1_08-3.6.1 lock rpm