gpp_maybe Security update for xen

SUSE-SLE-SDK-12-SP3-2018-1656

This update for xen fixes the following security issues: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis (bsc#1091107, bsc#1027519). - Incorrect MSR_DEBUGCTL handling let guests enable BTS allowing a malicious or buggy guest administrator can lock up the entire host (bsc#1103276)

• Release Date
  Aug 17 2018
• References
  Bugzilla: 1091107, 1027519, 1103276
  CVEs: CVE-2018-3646
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.3 aarch64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.9.2_10-3.41.1

  lock src

  xen-devel
  Xen Virtualization: Headers and libraries for development

  4.9.2_10-3.41.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.3 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.9.2_10-3.41.1

  lock src

  xen-devel
  Xen Virtualization: Headers and libraries for development

  4.9.2_10-3.41.1

  lock rpm