IBM Security Bulletin: PowerKVM has released fixes in response to the vulnerabilities known as Spectre and Meltdown.
PowerKVM is affected by vulnerabilities in the Linux kernel . IBM has now addressed these vulnerabilities. IBM has released the following updates fo rPowerKVM in response to CVE-2017-5753, CVE-2017-5715 and CVE-2017-5754. Note that, although the CVE descriptions do not reference POWER, POWER CPUs are afftected.
CVE(s): CVE-2017-5753, CVE-2017-5715, CVE-2017-5754
Affected product(s) and affected version(s):
PowerKVM v3.1
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=isg3T1026853
The post IBM Security Bulletin: PowerKVM has released fixes in response to the vulnerabilities known as Spectre and Meltdown. appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team http://ift.tt/2rBYTh7