Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2020-5722

Опубликовано: 10 июн. 2020
Источник: oracle-oval
Платформа: Oracle Linux 6
Платформа: Oracle Linux 7

Описание

ELSA-2020-5722: Unbreakable Enterprise kernel security update (IMPORTANT)

[4.1.12-124.39.5.1]

  • x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf) [Orabug: 31352782] {CVE-2020-0543}
  • x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross) [Orabug: 31352782] {CVE-2020-054 3}
  • x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross) [Orabug: 31352782] {CVE- 2020-0543}
  • x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross) [Orabug: 31352782] {CVE-2020-0543}
  • x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross) [Orabug: 31352782] {CVE-2020-0543}
  • x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping (Jia Zhang) [Orabug: 31352782] {CVE-2020-0543}

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

kernel-uek

4.1.12-124.39.5.1.el6uek

kernel-uek-debug

4.1.12-124.39.5.1.el6uek

kernel-uek-debug-devel

4.1.12-124.39.5.1.el6uek

kernel-uek-devel

4.1.12-124.39.5.1.el6uek

kernel-uek-doc

4.1.12-124.39.5.1.el6uek

kernel-uek-firmware

4.1.12-124.39.5.1.el6uek

Oracle Linux 7

Oracle Linux x86_64

kernel-uek

4.1.12-124.39.5.1.el7uek

kernel-uek-debug

4.1.12-124.39.5.1.el7uek

kernel-uek-debug-devel

4.1.12-124.39.5.1.el7uek

kernel-uek-devel

4.1.12-124.39.5.1.el7uek

kernel-uek-doc

4.1.12-124.39.5.1.el7uek

kernel-uek-firmware

4.1.12-124.39.5.1.el7uek

Связанные CVE

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 5 лет назад

Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS3: 6.5
redhat
около 5 лет назад

Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS3: 5.5
nvd
около 5 лет назад

Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS3: 5.5
debian
около 5 лет назад

Incomplete cleanup from specific special register read operations in s ...

suse-cvrf
около 5 лет назад

Security update for xen