libvirt security update

CentOS Errata and Security Advisory CESA-2018:1929 An update for libvirt is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Low: Red Hat Security Advisory: libvirt security update

An update for libvirt is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent

An incomplete fix for CVE-2018-5748 that affects QEMU monitor leading to a resource exhaustion but now also triggered via QEMU guest agent...

libvirt: Resource exhaustion via qemuMonitorIORead() method

qemu/qemumonitor.c in libvirt allows attackers to cause a denial of service memory consumption via a large QEMU reply...

RHEL 6 : libvirt (RHSA-2018:1929)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1929 advisory. - libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent CVE-2018-1064 - libvirt: Resource exhaustion via qemuMonitorIORead...

Security Bulletin: A vulnerability in libvirt affects PowerKVM

Summary PowerKVM is affected by a vulnerability in libvirt. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2015-5160 DESCRIPTION: libvirt could allow a local attacker to obtain sensitive information, caused by the leak of private credentials to the process list. By...

Security Bulletin: Two vulnerabilities in libvirt affect PowerKVM (CVE-2015-5313, CVE-2016-5008)

Summary PowerKVM is affected by two vulnerabilities in libvirt. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-5313 DESCRIPTION: libvirt could allow a local attacker to traverse directories on the system, caused by an error in the virStorageBackendFileSystemVolCreate...

Ubuntu: Security Advisory (USN-3680-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : libvirt vulnerability and update (USN-3680-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3680-1 advisory. Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allo...

USN-3680-1 libvirt vulnerability and update

Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via sidechannel attacks. An attacker in the guest could use this to expose sensitive guest information, including kernel memory. This update...

USN-3680-1: libvirt vulnerability and update

Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via sidechannel attacks. An attacker in the guest could use this to expose sensitive guest information, including kernel memory. This update...

Amazon Linux 2 : libvirt (ALAS-2018-1033) (Spectre)

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2018:1614-1) (Spectre)

This update for libvirt fixes the following issues : - CVE-2018-3639: cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits pass through bsc1092885 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

openSUSE Security Update : libvirt (openSUSE-2018-602) (Spectre)

This update for libvirt fixes the following issues : This update fixes the following security issue : - Added support for 'ssbd' and 'virt-ssbd' CPUID feature bits CVE-2018-3639, boo1092885 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Security update for libvirt (important)

This update for libvirt fixes the following issues: This update fixes the following security issue: - Added support for 'ssbd' and 'virt-ssbd' CPUID feature bits CVE-2018-3639, boo1092885...

SUSE-SU-2018:1614-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2018-3639: cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits pass through bsc1092885...

Important: libvirt

Issue Overview: An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code...

CentOS Update for libvirt CESA-2018:1396 centos7

Check the version of libvirt SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882904";...

MGASA-2018-0262 Updated libvirt packages fix security vulnerability

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Stor...

Updated libvirt packages fix security vulnerability

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Stor...