gpp_maybe Security update for xen

SUSE-SLE-SERVER-12-2018-1746

This update for xen fixes the following issues: This security issue was fixed: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis (bsc#1091107, bsc#1027519). These non-security issue were fixed: - bsc#1102116: SSBD is not virtualized for guests - bsc#1101684: Not able to disable the visibility of the new CPU flags

• Release Date
  Aug 23 2018
• References
  Bugzilla: 1027519, 1101684, 1091107, 1102116
  CVEs: CVE-2018-3646
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.4.4_36-22.74.1 lock rpm lock src

  xen-doc-html
  Xen Virtualization: HTML documentation

  4.4.4_36-22.74.1 lock rpm

  xen-kmp-default
  Xen para-virtual device drivers for fully virtualized guests

  4.4.4_36_k3.12.61_52.141-22.74.1 lock rpm

  xen-libs
  Xen Virtualization: Libraries

  4.4.4_36-22.74.1 lock rpm

  xen-libs-32bit
  Xen Virtualization: Libraries

  4.4.4_36-22.74.1 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.4.4_36-22.74.1 lock rpm

  xen-tools-domU
  Xen Virtualization: Control tools for domain U

  4.4.4_36-22.74.1 lock rpm