MGASA-2018-0134

Source
https://advisories.mageia.org/MGASA-2018-0134.html
Import Source
https://advisories.mageia.org/MGASA-2018-0134.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2018-0134
Related
Published
2018-02-23T17:14:35Z
Modified
2018-02-23T17:01:18Z
Summary
Updated kernel packages fix security vulnerabilities
Details

This kernel update is based on the upstream 4.14.20 and and adds KPTI mitigation for Meltdown (CVE-2017-5754) on 32bit x86. Arm platorm has now also addedmitigations for Meltdown (CVE-2017-5754) and Spectre, variant 2 (CVE-2017-5715).

For other fixes in this update, read the referenced changelogs.

References
Credits

Affected packages

Mageia:6 / kernel

Package

Name
kernel
Purl
pkg:rpm/mageia/kernel?distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.14.20-1.mga6

Ecosystem specific

{
    "section": "core"
}

Mageia:6 / kernel-userspace-headers

Package

Name
kernel-userspace-headers
Purl
pkg:rpm/mageia/kernel-userspace-headers?distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.14.20-1.mga6

Ecosystem specific

{
    "section": "core"
}

Mageia:6 / kmod-vboxadditions

Package

Name
kmod-vboxadditions
Purl
pkg:rpm/mageia/kmod-vboxadditions?distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.6-10.mga6

Ecosystem specific

{
    "section": "core"
}

Mageia:6 / kmod-virtualbox

Package

Name
kmod-virtualbox
Purl
pkg:rpm/mageia/kmod-virtualbox?distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.2.6-10.mga6

Ecosystem specific

{
    "section": "core"
}

Mageia:6 / kmod-xtables-addons

Package

Name
kmod-xtables-addons
Purl
pkg:rpm/mageia/kmod-xtables-addons?distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.13-20.mga6

Ecosystem specific

{
    "section": "core"
}