Red Hat Security Advisory

RHSA-2019:1181

qemu-kvm security update

Released 2019-05-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.3, qemu-img-2:0.12.1.2-2.506.el6_10.3, qemu-kvm-2:0.12.1.2-2.506.el6_10.3 +1
Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.3, qemu-img-2:0.12.1.2-2.506.el6_10.3, qemu-kvm-2:0.12.1.2-2.506.el6_10.3 +1
Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.3, qemu-img-2:0.12.1.2-2.506.el6_10.3, qemu-kvm-2:0.12.1.2-2.506.el6_10.3 +1
Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.506.el6_10.3, qemu-img-2:0.12.1.2-2.506.el6_10.3, qemu-kvm-2:0.12.1.2-2.506.el6_10.3 +1

Fixes 4 records

TI-2018-08699 CVE-2018-12130 · GHSA-j579-gjpv-mwhp

Information disclosure in Intel Central Processing Units

LOW 30

Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel w…

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.01553 Published 2019-05-30 Partial fix CWE-200

TI-2018-08698 CVE-2018-12127 · GHSA-9x4m-r2fg-43cj

Information disclosure in Intel Central Processing Units

LOW 28

Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with…

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.01497 Published 2019-05-30 Partial fix CWE-200

TI-2018-08697 CVE-2018-12126 · GHSA-443r-v97h-37x3

Information disclosure in Intel Central ProcCVE-2018-12126essing Units

LOW 28

Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel…

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.0151 Published 2019-05-30 Partial fix CWE-200

TI-2019-08296 CVE-2019-11091 · GHSA-25x5-mfj4-w63g

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some…

LOW 26

Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a s…

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00607 Published 2019-05-30 Partial fix