Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a6cec238 by Salvatore Bonaccorso at 2020-03-10T21:11:41+01:00
Expand notes for CVE-2020-0551/LVI
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -25853,7 +25853,11 @@ CVE-2020-0551 [Load Value Injection]
NOTE:
https://software.intel.com/security-software-guidance/software-guidance/load-value-injection
NOTE:
https://software.intel.com/security-software-guidance/insights/deep-dive-load-value-injection
NOTE: https://xenbits.xen.org/xsa/advisory-315.html
- NOTE: No mitigation will provided by this issue in software.
+ NOTE: https://lviattack.eu/
+ NOTE: No mitigation will provided by this issue in software, primarily
impacts Intel SGX
+ NOTE: binutils/toolchain updates will include a patch that optionally
emits lfence
+ NOTE: instructions in problematic situations (but have performance
impact), cf.
+ NOTE: https://sourceware.org/pipermail/binutils/2020-March/110175.html
CVE-2020-0550
RESERVED
CVE-2020-0549 (Cleanup errors in some data cache evictions for some Intel(R)
Processo ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6cec2384183c1eaec84d2466b71985eb1f3e916
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6cec2384183c1eaec84d2466b71985eb1f3e916
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
