Red Hat Security AdvisoryRHSA-2019:2975
kernel security and bug fix update
Released 2019-10-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) kernel-3.10.0-862.43.1.el7, kernel-abi-whitelists-3.10.0-862.43.1.el7, kernel-debug-3.10.0-862.43.1.el7 +7
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) kernel-tools-libs-devel-3.10.0-862.43.1.el7
- Red Hat Enterprise Linux Server EUS (v. 7.5) kernel-3.10.0-862.43.1.el7, kernel-abi-whitelists-3.10.0-862.43.1.el7, kernel-bootwrapper-3.10.0-862.43.1.el7 +10
- Red Hat Enterprise Linux Server Optional EUS (v. 7.5) kernel-debug-devel-3.10.0-862.43.1.el7, kernel-tools-libs-devel-3.10.0-862.43.1.el7
Fixes 2 records
Priority MEDIUM 40
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.
CVSS 3.1HIGH 8.1· Adjacent network · No auth · No interaction · EPSS 0.02691 · Published 2019-08-14 · Partial fix CWE-310
Priority LOW 33
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory.
CVSS 3.1MEDIUM 5.6· Local · Low privileges · No interaction · EPSS 0.04521 · Published 2019-09-03 · Partial fix · publication