Security update series of three Common Exposures and Vulnerabilities

Support for security such as Firewalls and securing linux
Post Reply
somaraz
Posts: 7
Joined: 2018/01/04 02:23:41

Security update series of three Common Exposures and Vulnerabilities

Post by somaraz » 2019/11/14 02:08:15

Dear All,

Red Hat Product Security is aware of a series of vulnerabilities - CVE-2018-12207 - Machine Check Error on Page Size Change, CVE-2019-11135 - TSX Asynchronous Abort, and CVE-2019-0155, CVE-2019-0154 - i915 graphics driver.

Regarding to CentOS 7 do we have any work around ?

Thanks,

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Security update series of three Common Exposures and Vulnerabilities

Post by TrevorH » 2019/11/14 07:20:51

There are new kernels on their way for all supported CentOS Versions. I haven't checked the CVE numbers you listed but they are for the latest set of Intel vulnerabilities.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

somaraz
Posts: 7
Joined: 2018/01/04 02:23:41

Re: Security update series of three Common Exposures and Vulnerabilities

Post by somaraz » 2019/11/14 08:52:37

When will the latest kernel release for latest set of Intel vulnerabilities ? :D

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Security update series of three Common Exposures and Vulnerabilities

Post by TrevorH » 2019/11/14 09:46:11

As always, when they're ready. Red Hat have released them for RHEL, CentOS will rebuild and publish ASAP.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

CCheetah75
Posts: 1
Joined: 2019/11/20 19:33:44

Re: Security update series of three Common Exposures and Vulnerabilities

Post by CCheetah75 » 2019/11/20 19:40:26

Short of simply looking for a new kernel drop on the system, is there any other way to get status on these kernel updates? I'm guessing not, but worth asking.

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Security update series of three Common Exposures and Vulnerabilities

Post by TrevorH » 2019/11/20 20:16:46

As far as I know there are no pending updates for CentOS 7. The latest kernel is kernel-3.10.0-1062.4.3.el7.x86_64 and was released a few days ago.

Build Date : Thu 14 Nov 2019 00:19:25 GMT
Install Date: Wed 20 Nov 2019 11:38:14 GMT
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

somaraz
Posts: 7
Joined: 2018/01/04 02:23:41

Re: Security update series of three Common Exposures and Vulnerabilities

Post by somaraz » 2019/11/21 02:35:44

Great let me check on few of my servers. :)

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Security update series of three Common Exposures and Vulnerabilities

Post by TrevorH » 2019/11/21 07:13:07

Mails are sent to the centos-announce mailing list when new packages are released.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply