drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Preisgabe von Informationen in Linux
Name: |
Preisgabe von Informationen in Linux |
|
ID: |
SUSE-SU-2018:2473-1 |
|
Distribution: |
SUSE |
|
Plattformen: |
SUSE Linux Enterprise Module for Live Patching 15 |
|
Datum: |
Di, 21. August 2018, 22:53 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3646 |
|
Applikationen: |
Linux |
|
Originalnachricht |
SUSE Security Update: Security update for the Linux Kernel (Live Patch 2 for SLE 15) ______________________________________________________________________________
Announcement ID: SUSE-SU-2018:2473-1 Rating: important References: #1099306 Cross-References: CVE-2018-3646 Affected Products: SUSE Linux Enterprise Module for Live Patching 15 ______________________________________________________________________________
An update that fixes one vulnerability is now available.
Description:
This update for the Linux Kernel 4.12.14-25_6 fixes one issue.
The following security issue was fixed:
- CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data, even from other virtual machines or the host system (bsc#1099306).
Patch Instructions:
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Module for Live Patching 15:
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-2018-1738=1
Package List:
- SUSE Linux Enterprise Module for Live Patching 15 (ppc64le x86_64):
kernel-livepatch-4_12_14-25_6-default-2-2.1 kernel-livepatch-4_12_14-25_6-default-debuginfo-2-2.1
References:
https://www.suse.com/security/cve/CVE-2018-3646.html https://bugzilla.suse.com/1099306
_______________________________________________ sle-security-updates mailing list sle-security-updates@lists.suse.com http://lists.suse.com/mailman/listinfo/sle-security-updates
|
|
|
|