Red Hat Security Advisory: redhat-release-virtualization-host and redhat-virtualization-host update

Fixed packages 2

Vulnerabilities 2

• Medium 6.5
  CVE-2019-11135

  TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potent…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Alpine
  Nov 14, 2019
• Unscored —
  CVE-2018-12207

  Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may a…

  linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu Alpine
  Nov 14, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/ifu-page-mce
• article
  https://access.redhat.com/solutions/tsx-asynchronousabort
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1646768
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1753062
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3860.json
• report
  https://access.redhat.com/security/cve/CVE-2018-12207
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-12207
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-12207
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00210.html
• report
  https://access.redhat.com/security/cve/CVE-2019-11135
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-11135
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-11135
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00270.html