File _patchinfo of Package patchinfo.11107

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.11107

<patchinfo incident="11107">
  <issue tracker="cve" id="2019-11091"/>
  <issue tracker="cve" id="2018-12130"/>
  <issue tracker="cve" id="2018-12126"/>
  <issue tracker="cve" id="2018-12127"/>
  <issue tracker="cve" id="2019-3886"/>
  <issue tracker="bnc" id="1131595">VUL-0: CVE-2019-3886: libvirt: virsh domhostname command discloses guest hostname in readonly mode</issue>
  <issue tracker="bnc" id="1135273">[Build227.1]libvirt missing "md-clear" flag support</issue>
  <issue tracker="bnc" id="1111331">VUL-0: CPU issues Q2 2019 aka "Microarchitectural Data Sampling (MDS)" aka ZombieLoadAttack / RIDL / Fallout</issue>
  <issue tracker="fate" id="327255"/>
  <packager>jfehlig</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for libvirt</summary>
  <description>This update for libvirt fixes the following issues:

Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)

- CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
- CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
- CVE-2018-12130: Microarchitectural Load Port Data Sampling (MLPDS)
- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

These updates contain the libvirt adjustments, that pass through the new 'md-clear' CPU flag (bsc#1135273).

For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736

Other security issues fixed:

- CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595).
- qemu: Add support for using AES secret for SCSI hotplug
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.11107

Places