Red Hat Security AdvisoryRHSA-2019:1177
libvirt security update
Released 2019-05-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-bash-completion-4.5.0-10.el7_6.9, libvirt-client-4.5.0-10.el7_6.9 +21
- Red Hat Enterprise Linux Client Optional (v. 7) libvirt-admin-4.5.0-10.el7_6.9, libvirt-daemon-lxc-4.5.0-10.el7_6.9, libvirt-devel-4.5.0-10.el7_6.9 +4
- Red Hat Enterprise Linux ComputeNode (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-bash-completion-4.5.0-10.el7_6.9, libvirt-client-4.5.0-10.el7_6.9 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-admin-4.5.0-10.el7_6.9, libvirt-daemon-4.5.0-10.el7_6.9 +25
- Red Hat Enterprise Linux Server (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-bash-completion-4.5.0-10.el7_6.9, libvirt-client-4.5.0-10.el7_6.9 +26
- Red Hat Enterprise Linux Server Optional (v. 7) libvirt-admin-4.5.0-10.el7_6.9, libvirt-daemon-lxc-4.5.0-10.el7_6.9, libvirt-lock-sanlock-4.5.0-10.el7_6.9 +3
- Red Hat Enterprise Linux Workstation (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-bash-completion-4.5.0-10.el7_6.9, libvirt-client-4.5.0-10.el7_6.9 +23
- Red Hat Enterprise Linux Workstation Optional (v. 7) libvirt-admin-4.5.0-10.el7_6.9, libvirt-daemon-lxc-4.5.0-10.el7_6.9, libvirt-lock-sanlock-4.5.0-10.el7_6.9 +2
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-bash-completion-4.5.0-10.el7_6.9, libvirt-client-4.5.0-10.el7_6.9 +21
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libvirt-4.5.0-10.el7_6.9, libvirt-admin-4.5.0-10.el7_6.9, libvirt-bash-completion-4.5.0-10.el7_6.9 +26
Fixes 4 records
Priority LOW 30
Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel w…
CVSS 3.1MEDIUM 5.9· Local · No auth · No interaction · EPSS 0.01553 · Published 2019-05-30 · Partial fix CWE-200
Priority LOW 28
Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.01497 · Published 2019-05-30 · Partial fix CWE-200
Priority LOW 28
Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.0151 · Published 2019-05-30 · Partial fix CWE-200
Priority LOW 26
Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a s…
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.00607 · Published 2019-05-30 · Partial fix
THREATIST.IORead the docs