<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Thu, Jan 4, 2018 at 9:51 AM,  <span dir="ltr"><<a href="mailto:rikske@deds.nl" target="_blank">rikske@deds.nl</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Please patch the CentOS-virt Kernel to fix the<br>
Kernel Side-Channel Attacks vulnerabilities.<br>
<br>
The latest CentOS-virt kernel was released in November, as seen below.<br>
<br>
kernel-4.9.63-29.el7.x86_64.<wbr>rpm 2017-11-21 13:30<br>
<br>
<a href="https://access.redhat.com/security/vulnerabilities/speculativeexecution" rel="noreferrer" target="_blank">https://access.redhat.com/<wbr>security/vulnerabilities/<wbr>speculativeexecution</a><br>
<a href="http://mirror.centos.org/centos/7/virt/x86_64/xen/" rel="noreferrer" target="_blank">http://mirror.centos.org/<wbr>centos/7/virt/x86_64/xen/</a><br></blockquote><div><br><div style="font-family:monospace,monospace;display:inline" class="gmail_default">​As far as I can see, the patches for ​</div>KAISER (Kernel Address<div style="font-family:monospace,monospace;display:inline" class="gmail_default">​ ​Isolation to have Side-channels Efficiently Removed) will appear in kernel 4.9.75. Looks like it will be released soon upstream (<a href="http://kernel.org">kernel.org</a>).<br><br></div><div style="font-family:monospace,monospace;display:inline" class="gmail_default">Akemi<br></div> <br></div></div></div></div>