DSA-4210: -1 xen -- security update

Published May 25, 2018

Updated

This update provides mitigations for the Spectre v4 variant in x86-based micro processors. On Intel CPUs this requires updated microcode which is currently not released publicly (but your hardware vendor may have issued an update). For servers with AMD CPUs no microcode update is needed, please refer to https://xenbits.xen.org/xsa/advisory-263.html for further information.

Affected Software

2 affected components

debian/xen

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade xen to a version that resolves this vulnerability.
Patch DSA-4210-1

Event History

May 25, 2018

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2018-3639

Frequently Asked Questions

Which systems need a microcode update in addition to this Xen update?

Intel-based systems require updated CPU microcode to mitigate Spectre v4. The update notes state that public Intel microcode was not available at the time, although a hardware vendor may have issued an update.

Do AMD-based servers require a microcode update for this mitigation?

No. The update notes state that servers with AMD CPUs do not need a microcode update.

DSA-4210: -1 xen -- security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems need a microcode update in addition to this Xen update?

Do AMD-based servers require a microcode update for this mitigation?

Company

Resources

Contact

Frequently Asked Questions

Which systems need a microcode update in addition to this Xen update?

Do AMD-based servers require a microcode update for this mitigation?