Fix for CVE-2018-3640, CVE-2018-3639 and CVE-2018-3615/3620/3646 ?

[MiniMiner]

Hello,

I wanted to ask if there is a fix for CVE-2018-3640, CVE-2018-3639 and CVE-2018-3615, CVE-2018-3620 and CVE-2018-3646 (Foreshadow and Foreshadow-NG) available.

My package versions:

proxmox-ve: 5.2-2 (running kernel: 4.15.18-1-pve)
pve-manager: 5.2-5 (running version: 5.2-5/eb24855a)
pve-kernel-4.15: 5.2-4
pve-kernel-4.15.18-1-pve: 4.15.18-15
corosync: 2.4.2-pve5
criu: 2.11.1-1~bpo90
glusterfs-client: 3.8.8-1
ksm-control-daemon: 1.2-2
libjs-extjs: 6.0.1-2
libpve-access-control: 5.0-8
libpve-apiclient-perl: 2.0-5
libpve-common-perl: 5.0-35
libpve-guest-common-perl: 2.0-17
libpve-http-server-perl: 2.0-9
libpve-storage-perl: 5.0-24
libqb0: 1.0.1-1
lvm2: 2.02.168-pve6
lxc-pve: 3.0.0-3
lxcfs: 3.0.0-1
novnc-pve: 1.0.0-1
proxmox-widget-toolkit: 1.0-19
pve-cluster: 5.0-28
pve-container: 2.0-24
pve-docs: 5.2-4
pve-firewall: 3.0-13
pve-firmware: 2.0-5
pve-ha-manager: 2.0-5
pve-i18n: 1.0-6
pve-libspice-server1: 0.12.8-3
pve-qemu-kvm: 2.11.2-1
pve-xtermjs: 1.0-5
qemu-server: 5.0-29
smartmontools: 6.5+svn4324-1
spiceterm: 3.0-5
vncterm: 1.5-3

Kind regards,

MiniMiner

 

[TwiX]

Hello,

Seems to be patched for me with latest kernel and latest Dell R430 bios.

 

[spirit]

it's ok on the host side, (last microcode from debian backport : http://ftp.us.debian.org/debian/poo...ntel-microcode_3.20180807a.1~bpo9+1_amd64.deb)



but for vms (variant4 && l1tf), it need new cpu flags
https://git.proxmox.com/?p=qemu-server.git;a=commit;h=eabc189ee822e192cfd92d86ed320248a1a84d5e

not yet released in proxmox repo