[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249461

 
 

909

 
 

195508

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2019:1438-1 -- SLES libvirt

ID: oval:org.secpod.oval:def:89003354Date: (C)2021-02-27   (M)2024-04-17
Class: PATCHFamily: unix




This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling - CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling - CVE-2018-12130: Microarchitectural Load Port Data Sampling - CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory These updates contain the libvirt adjustments, that pass through the new "md-clear" CPU flag . For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736 Other security issues fixed: - CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode . - qemu: Add support for using AES secret for SCSI hotplug

Platform:
SUSE Linux Enterprise Server 12 SP2
Product:
libvirt
Reference:
SUSE-SU-2019:1438-1
CVE-2018-12126
CVE-2018-12127
CVE-2018-12130
CVE-2019-11091
CVE-2019-3886
CVE    5
CVE-2019-3886
CVE-2018-12127
CVE-2018-12126
CVE-2018-12130
...
CPE    2
cpe:/o:suse:suse_linux_enterprise_server:12:sp2
cpe:/a:redhat:libvirt

© SecPod Technologies