Red Hat Security AdvisoryRHSA-2019:3860
redhat-release-virtualization-host and redhat-virtualization-host update
Released 2019-11-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-virtualization-host-4.3.6-20191108.0.el7_7, redhat-virtualization-host-image-update-4.3.6-20191108.0.el7_7
- Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.3.6-20191108.0.el7_7, redhat-virtualization-host-image-update-4.3.6-20191108.0.el7_7
- Red Hat Virtualization 4.2 Hypervisor for RHEL 7.6 EUS redhat-virtualization-host-4.2-20191107.0.el7_6, redhat-virtualization-host-image-update-4.2-20191107.0.el7_6
Fixes 2 records
Priority LOW 34
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.03133 · Published 2019-11-14 · Partial fix
Priority LOW 31
Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local acces…
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.00915 · Published 2019-11-14 · Partial fix CWE-20