[Oraclevm-errata] New xen updates available via Ksplice (OVMSA-2018-0282)
Errata Announcements for Oracle VM
oraclevm-errata at oss.oracle.com
Thu Dec 20 01:55:00 PST 2018
Synopsis: OVMSA-2018-0282 can now be patched using Ksplice
Users with Oracle Linux Premier Support can now use Ksplice to patch
against the latest Oracle kernel update, OVMSA-2018-0282.
INSTALLING THE UPDATES
We recommend that all users of Ksplice on OVM 3.4 install these
updates.
You can install these updates by running:
# ksplice -y user upgrade
Ksplice Xen patching requires installation of Ksplice-aware packages and the
system must be rebooted after the first installation of these packages. Refer
to the installation instructions for the Enhanced Ksplice Client in the Ksplice
User's Guide for more details. Systems may be prepared for Ksplice patching by
installing the Ksplice aware packages in advance, prior to installing the
enhanced Ksplice client.
DESCRIPTION
* XSA-282: Denial-of-service when guest uses HLE on a specific memory region.
A X86 CPU bug when using HLE (Hardware Lock Elision) on a specific
memory region could lead to a CPU hang. A user from a guest VM could use
this flaw to cause a denial-of-service.
Orabug: 28924143
SUPPORT
Ksplice support is available at ksplice-support_ww at oracle.com.
More information about the Oraclevm-errata
mailing list