Shulou(Shulou.com)05/31 Report--

On June 13, 2018, Intel issued a security announcement that it had discovered a vulnerability in the presumed execution side channel, Lazy FPU, numbered CVE-2018-3665, which could be used to steal sensitive data from CPU's mathematical processing unit. Red Hat immediately issued a security announcement on June 14, saying that security patches had been issued for all affected RHEL 7 series systems and urged users of the affected systems to upgrade immediately.

­the systems affected this time include Red Hat Enterprise Linux Server 7, Red Hat Enterprise Linux Server-Extended Update Support 7.5, Red Hat Enterprise Linux Workstation 7, Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux 7 for IBM System z, POWER, ARM64,Red Hat Enterprise Linux for Scientific Computing 7, Red Hat Enterprise Linux EUS Compute Node 7.5 and Red Hat Virtualization Host 4.

­the CnetOS Linux 7 distribution, an operating system based on the RHEL 7 series, has also received kernel security updates for "Lazy FPU". Therefore, it is recommended that all CentOS 7 users upgrade to the kernel-3.10.0-862.3.3.el7.x86_64.rpm kernel version immediately. For more information, please check out today's security bulletin.

­in today's security bulletin, Red Hat also gave special thanks to Julian Stecklina from Amazon.de, Thomas Prescher from cyberus-technology.de, and Zdenek Sojka from sysgo.com, who discovered this vulnerability.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.