Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::hypervisor | redhat-release-virtualization-host | 0:4.2-15.1.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::hypervisor | redhat-release-virtualization-host-content | 0:4.2-15.1.el7 |
| Red Hat · RHEL 7 enterprise_linux:7::hypervisor | redhat-virtualization-host | 0:4.2-20191022.0.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::hypervisor | redhat-virtualization-host-image-update | 0:4.2-20191022.0.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::hypervisor | redhat-virtualization-host-image-update-placeholder | 0:4.2-15.1.el7 |
Vulnerabilities 2
-
Medium 5.6CVE-2019-1125 Public exploit
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability,…
-
Unscored —
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and s…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1761720
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_3248.json
-
report
https://access.redhat.com/security/cve/CVE-2019-1125
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1724389
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-1125
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-1125
-
report
https://access.redhat.com/security/cve/CVE-2019-14287
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1760531
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-14287
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-14287
-
article
https://www.sudo.ws/alerts/minus_1_uid.html