kernel-2.6.32-754.14.2.el6
エラータID: AXSA:2019-3892:03
リリース日:
2019/05/23 Thursday - 10:02
題名:
kernel-2.6.32-754.14.2.el6
影響のあるチャネル:
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Microarchitectural Store Buffer Data Sampling (MSBDS): 投機実行を利
用する一部のマイクロプロセッサの Store Buffer の実装には、認証された
ユーザーにより、ローカルアクセスのサイドチャネルを介して、情報漏洩を
可能とする脆弱性が存在します。(CVE-2018-12126)
- Microarchitectural Load Port Data Sampling (MLDPDS): 投機実行を利用
する一部のマイクロプロセッサの Load Port の実装には、認証されたユー
ザーにより、ローカルアクセスのサイドチャネルを介して、情報漏洩を可能
とする脆弱性が存在します。(CVE-2018-12127)
- Microarchitectural Fill Buffer Data Sampling (MFBDS): 投機実行を利用
する一部のマイクロプロセッサの Fill Buffer の実装には、認証されたユー
ザーにより、ローカルアクセスのサイドチャネルを介して、情報漏洩を可能
とする脆弱性が存在します。(CVE-2018-12130)
- Microarchitectural Data Sampling Uncacheable Memory (MDSUM): 投機実
行を利用する一部のマイクロプロセッサの Uncacheable Memory の実装には、
認証されたユーザーにより、ローカルアクセスのサイドチャネルを介して、
情報漏洩を可能とする脆弱性が存在します。(CVE-2019-11091)
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2018-12126
Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
CVE-2018-12127
Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
CVE-2018-12130
Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
CVE-2019-11091
Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
追加情報:
N/A
ダウンロード:
SRPMS
- kernel-2.6.32-754.14.2.el6.src.rpm
MD5: d8f859c49619047f33d80b5958ab386c
SHA-256: 3e449bfb624d76043ef001e65f7df926c7e4398003262a083cb84ca20af3d5c2
Size: 127.55 MB
Asianux Server 4 for x86
- kernel-2.6.32-754.14.2.el6.i686.rpm
MD5: 180ae7f7af86c3340fb6617058e2f3f7
SHA-256: 45b5108cf3bcb5b1bf7b53815605b24db9851efffcfc8b9025af8c169671f1b8
Size: 30.09 MB - kernel-abi-whitelists-2.6.32-754.14.2.el6.noarch.rpm
MD5: 59346602a606f27e5b7a2d83258b7f8f
SHA-256: f40dbe27a8fc2a1741cab013b705524b9691159c552a689f651f377d8b76267b
Size: 3.83 MB - kernel-debug-2.6.32-754.14.2.el6.i686.rpm
MD5: 4fa549dc39fa8df9e1af24cab747ce7f
SHA-256: 4152676fbe1f16dd12715ff94a481bdc08ebf7172e5f5f19502501ae5344e946
Size: 30.88 MB - kernel-debug-devel-2.6.32-754.14.2.el6.i686.rpm
MD5: 6b47e188bf3407d4045d95bd1c5bf0b2
SHA-256: 8ad1abfa8707196fb4c292c70d73de4aa0d02ddc61d5a55f7a3ec15a918f5ad9
Size: 10.82 MB - kernel-devel-2.6.32-754.14.2.el6.i686.rpm
MD5: d889c024f3747773f21530b59cfc2923
SHA-256: 99a6a7acd3e19211f2bc9d96d4bef42dfbf7bd7c993fd909db1e8eba091e5a9d
Size: 10.78 MB - kernel-doc-2.6.32-754.14.2.el6.noarch.rpm
MD5: 29547e9ccd0a51f9f5ea8bd1bb9c6ed4
SHA-256: 573fc8fcc5be0a476598c921ca0013f417c499e3e78844c971b7659d5265023a
Size: 12.42 MB - kernel-firmware-2.6.32-754.14.2.el6.noarch.rpm
MD5: 4c1616421133a2827afef9318a15427e
SHA-256: fbe9098d18fc8cd8f7b568bd7e12d7fde77f1edfec477fa0603312fe3e2a294b
Size: 28.90 MB - kernel-headers-2.6.32-754.14.2.el6.i686.rpm
MD5: b87d40070ffba37055dda5c2ea1c07da
SHA-256: 781522624be81fcc5308946e5f0e49fb6c94ec4e89dea2b86fbcdbfbfb55ef1d
Size: 4.56 MB - perf-2.6.32-754.14.2.el6.i686.rpm
MD5: 76b51fd1c14bda524785adbad5e06962
SHA-256: aebcf80aebd8b65d675127270746846177b82b445be65d5c8c5f5e793ce27250
Size: 4.78 MB
Asianux Server 4 for x86_64
- kernel-2.6.32-754.14.2.el6.x86_64.rpm
MD5: 40689bab71c30a7a1719da80e924e6c0
SHA-256: 09eba7ecfe574b97f852444fe2f28b94532668c088f1b84033f304657db363c4
Size: 32.39 MB - kernel-abi-whitelists-2.6.32-754.14.2.el6.noarch.rpm
MD5: d62a1eeba68021ba76a5ae03d47e4f1e
SHA-256: 2c8bcda1ad3f7cfcc1a175f486d8af360de2bfe9a4715eb14c5466e3acf64819
Size: 3.83 MB - kernel-debug-2.6.32-754.14.2.el6.x86_64.rpm
MD5: 6243c925f17059b777a36002869b475e
SHA-256: 8b0c97208c69df58512101bdfb4cbf0bfdfa1f66189370cbd6dcefe7c43f487b
Size: 33.27 MB - kernel-debug-devel-2.6.32-754.14.2.el6.x86_64.rpm
MD5: 4833b9a89907fe1f29f8b5eea6c038e2
SHA-256: 5ab7bd0eb795049db6c4776d00879d850112b8a4152585177693702816134df5
Size: 10.87 MB - kernel-devel-2.6.32-754.14.2.el6.x86_64.rpm
MD5: 26832a9e91dd84caa877ab1dfd6ee665
SHA-256: 83b1635144bab80345c7e0430808a1f31402e8240342a79a360670bf21cf1d88
Size: 10.83 MB - kernel-doc-2.6.32-754.14.2.el6.noarch.rpm
MD5: b8ca7dd83ecdbd499fbc6f46df29099c
SHA-256: 44e40b7f5d11955a983ed3e8f97088186011386ea7076a8da44744a88699db70
Size: 12.42 MB - kernel-firmware-2.6.32-754.14.2.el6.noarch.rpm
MD5: 82753e6bd45460c4fe8a239e8a7ba91c
SHA-256: 1383ab23e21d5b17d512fbdd70f4dcc33ef987f132a626d094a75ce9c9727c09
Size: 28.90 MB - kernel-headers-2.6.32-754.14.2.el6.x86_64.rpm
MD5: bf7c33de2c1ec5c607e65ab5ab8ba53b
SHA-256: 94773a68db72d894a339d8630c3dac997487cf66a63b27e8d0da3fe1f5ef6b4f
Size: 4.55 MB - perf-2.6.32-754.14.2.el6.x86_64.rpm
MD5: f761c3f68e3fb1ffb94c7cf14779d211
SHA-256: ada7bef00d59de57cd6a98db8751dc1eeec3ecdfd4cefc5b1e826caa5013e9aa
Size: 4.76 MB
English