SUSE-SU-2019:1490-1 -- SLES libvirtID: oval:org.secpod.oval:def:89050887 | Date: (C)2024-01-30 (M)2024-04-17 |
Class: PATCH | Family: unix |
This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling - CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling - CVE-2018-12130: Microarchitectural Load Port Data Sampling - CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory These updates contain the libvirt adjustments, that pass through the new "md-clear" CPU flag . For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736 Security issues fixed: - CVE-2019-10132: Reject clients unless their UID matches the server UID Non security issues fixed: - delay global firewall setup if no networks are running - add systemd-container dependency to qemu and lxc drivers
Platform: |
SUSE Linux Enterprise Desktop 15 SP1 |
SUSE Linux Enterprise Server 15 SP1 |