Red Hat Security Advisory

RHSA-2019:0457

redhat-virtualization-host security update

Released 2019-03-05 · Red Hat rating Important · View on Red Hat →

Fixed in

RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-release-virtualization-host-4.2-8.3.el7, redhat-virtualization-host-image-update-placeholder-4.2-8.3.el7
Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.2-20190219.0.el7_6, redhat-virtualization-host-image-update-4.2-20190219.0.el7_6

TI-2019-02825 CVE-2019-3813 · GHSA-j8r4-w4xh-mcv3

LOW 35

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslot_get_virt.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.01208 Published 2019-02-04 Fixed CWE-193

TI-2019-02843 CVE-2019-3831 · GHSA-mgfj-qcpq-xx99

LOW 32

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.01029 Published 2019-03-25 Fixed CWE-863

TI-2019-04521 CVE-2019-6454 · GHSA-8h89-jj6w-g26p

LOW 29

An issue was discovered in sd-bus in systemd 239.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.02035 Published 2019-03-17 Fixed CWE-787