gpp_maybe Security update for xen

SUSE-SLE-SERVER-12-SP2-2018-1664

This update for xen fixes the following security issues: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis (bsc#1091107, bsc#1027519). - Incorrect MSR_DEBUGCTL handling let guests enable BTS allowing a malicious or buggy guest administrator can lock up the entire host (bsc#1103276)

• Release Date
  Aug 17 2018
• References
  Bugzilla: 1091107, 1027519, 1103276
  CVEs: CVE-2018-3646
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12.2 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.7.6_04-43.39.1 lock rpm lock src

  xen-doc-html
  Xen Virtualization: HTML documentation

  4.7.6_04-43.39.1 lock rpm

  xen-libs
  Xen Virtualization: Libraries

  4.7.6_04-43.39.1 lock rpm

  xen-libs-32bit
  Xen Virtualization: Libraries

  4.7.6_04-43.39.1 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.7.6_04-43.39.1 lock rpm

  xen-tools-domU
  Xen Virtualization: Control tools for domain U

  4.7.6_04-43.39.1 lock rpm