ELSA-2018-1633 — Important: qemu-kvm security update (Oracle Linux 7)

Summary

[1.5.3-156.el7_5.2]
- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
(EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 7	qemu-img	10:1.5.3-156.el7_5.2
Oracle Linux · 7	qemu-kvm	10:1.5.3-156.el7_5.2
Oracle Linux · 7	qemu-kvm-common	10:1.5.3-156.el7_5.2
Oracle Linux · 7	qemu-kvm-tools	10:1.5.3-156.el7_5.2

Vulnerabilities 1

Medium 5.5

CVE-2018-3639 Public exploit EPSS 60%

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addre…

Intel Multiple linux-raspi2 linux-hwe Debian Ubuntu Alpine

May 22, 2018

Important: qemu-kvm security update (Oracle Linux 7)

Summary

Fixed packages 4

Vulnerabilities 1

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addre…