gpp_maybe
Security update for libvirt
SUSE-SLE-Module-Basesystem-15-SP1-2019-1490
This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS) - CVE-2018-12130: Microarchitectural Load Port Data Sampling (MLPDS) - CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) These updates contain the libvirt adjustments, that pass through the new 'md-clear' CPU flag (bsc#1135273). For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736 Security issues fixed: - CVE-2019-10132: Reject clients unless their UID matches the server UID (bsc#1134348) Non security issues fixed: - delay global firewall setup if no networks are running (bsc#1133229) - add systemd-container dependency to qemu and lxc drivers (bsc#1136109)
-
Release DateJun 13 2019
-
ReferencesBugzilla: 1134348, 1136109, 1135273, 1133229, 1111331
CVEs: CVE-2018-12127, CVE-2018-12126, CVE-2018-12130, CVE-2019-10132, CVE-2019-11091 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Basesystem Module 15.1 ppc64le
-
Packageslibvirt
Library providing a virtualization APIlibvirt-libs5.1.0-8.3.1 lock src
Client side libraries for libvirt5.1.0-8.3.1 lock rpm
Basesystem Module 15.1 aarch64
-
Packageslibvirt
Library providing a virtualization APIlibvirt-libs5.1.0-8.3.1 lock src
Client side libraries for libvirt5.1.0-8.3.1 lock rpm
Basesystem Module 15.1 s390x
-
Packageslibvirt
Library providing a virtualization APIlibvirt-libs5.1.0-8.3.1 lock src
Client side libraries for libvirt5.1.0-8.3.1 lock rpm
Basesystem Module 15.1 x86_64
-
Packageslibvirt
Library providing a virtualization APIlibvirt-libs5.1.0-8.3.1 lock src
Client side libraries for libvirt5.1.0-8.3.1 lock rpm