CVE-2018-3639 · cross-distro fix matrix

CVE-2018-3639: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store B

Affects 8 Linux releases across 14 (distro × package) combinations.

Fix per ecosystem

Each block below is a distro release where CVE-2018-3639 has a known fix. Run the listed command on that distro to remediate.

Source: Debian Security Tracker

intel-microcode→ fixed in3.20180703.1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y intel-microcode
```
linux→ fixed in4.16.12-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux
```
xen→ fixed in4.8.3+xsa262+shim4.10.0+comet3-1+deb9u7urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y xen
```

Source: Debian Security Tracker

intel-microcode→ fixed in3.20180703.1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y intel-microcode
```
linux→ fixed in4.16.12-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux
```
xen→ fixed in4.8.3+xsa262+shim4.10.0+comet3-1+deb9u7urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y xen
```

Source: Debian Security Tracker

intel-microcode→ fixed in3.20180703.1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y intel-microcode
```
linux→ fixed in4.16.12-1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y linux
```
xen→ fixed in4.8.3+xsa262+shim4.10.0+comet3-1+deb9u7urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y xen
```