Page 1 of 1

kernel security updates for MDS/Zombieload & co.

Posted: 2019/05/15 15:17:15
by kilian
Hi there!

With the recent release of RHEL8 GA and the ongoing CentOS 8 building process (https://wiki.centos.org/About/Building_8), I'd like to know if we'll see kernel security updates for CentOS 7.x for the newly announced Intel CPU security vulnerabilities.

Red Hat released a number of kernel and microcode updates yesterday:
* https://access.redhat.com/errata/RHSA-2019:1168: kernel-3.10.0-957.12.2.el7
* https://access.redhat.com/errata/RHEA-2019:1210: microcode_ctl-2.1-47.2.el7_6

and they don't seem to have made their way to the CentOS updates repo yet. So I'm wondering if it's just a matter of time, or if they won't be provided at all.

Thanks!

Re: kernel security updates for MDS/Zombieload & co.

Posted: 2019/05/15 15:53:23
by TrevorH
They only came out yesterday!

Yes, they're building and pending release. Soon.

Re: kernel security updates for MDS/Zombieload & co.

Posted: 2019/05/15 16:30:34
by kilian
Thanks for clarifying!

Re: kernel security updates for MDS/Zombieload & co.

Posted: 2019/05/15 16:35:01
by TrevorH
Announcements have gone out, packages are pushed, mirrors are updating. If you don't see anything new soon then try yum clean all as it only refreshes every 6 hours by default.

Re: kernel security updates for MDS/Zombieload & co.

Posted: 2019/05/15 17:55:16
by kilian
Awesome, thanks!

Re: kernel security updates for MDS/Zombieload & co.

Posted: 2019/05/21 04:04:07
by Nay
Hi

May I know where and how to download patches to fix Intel MDS vulnerabilities?

Re: kernel security updates for MDS/Zombieload & co.

Posted: 2019/05/21 06:11:53
by TrevorH
yum update