Red Hat Security Advisory

RHSA-2018:0023

qemu-kvm security update

Released 2018-01-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-141.el7_4.6, qemu-kvm-10:1.5.3-141.el7_4.6, qemu-kvm-common-10:1.5.3-141.el7_4.6 +1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-141.el7_4.6, qemu-kvm-10:1.5.3-141.el7_4.6, qemu-kvm-common-10:1.5.3-141.el7_4.6 +1
Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-141.el7_4.6, qemu-kvm-10:1.5.3-141.el7_4.6, qemu-kvm-common-10:1.5.3-141.el7_4.6 +1
Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-141.el7_4.6, qemu-kvm-10:1.5.3-141.el7_4.6, qemu-kvm-common-10:1.5.3-141.el7_4.6 +1

Fixes 1 record

TI-2017-03706 CVE-2017-5715

Observable discrepancy in Intel Microprocessors with Speculative Execution

MEDIUM 63

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.73249 Published 2018-01-04 Partial fix CWE-203