1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2018-2001

[ELSA-2018-2001] qemu-kvm security update

Severity Important
Affected Packages 4
CVEs 1
Info Packages References Vulnerabilities

[1.5.3-156.el7_5.3]
- kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584363]
- kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584363]
- Resolves: bz#1584363
(CVE-2018-3639 qemu-kvm: hw: cpu: AMD: speculative store bypass [rhel-7.5.z])

Package Affected Version
pkg:rpm/oraclelinux/qemu-kvm?distro=oraclelinux-7.5 < 1.5.3-156.el7_5.3
pkg:rpm/oraclelinux/qemu-kvm-tools?distro=oraclelinux-7.5 < 1.5.3-156.el7_5.3
pkg:rpm/oraclelinux/qemu-kvm-common?distro=oraclelinux-7.5 < 1.5.3-156.el7_5.3
pkg:rpm/oraclelinux/qemu-img?distro=oraclelinux-7.5 < 1.5.3-156.el7_5.3
ID
ELSA-2018-2001
Severity
important
URL
https://linux.oracle.com/errata/ELSA-2018-2001.html
Published
2018-06-27T00:00:00
(6 years ago)
Modified
2018-06-27T00:00:00
(6 years ago)
Rights
Copyright 2018 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/qemu-kvm?distro=oraclelinux-7.5 oraclelinux qemu-kvm < 1.5.3-156.el7_5.3 oraclelinux-7.5
Affected pkg:rpm/oraclelinux/qemu-kvm-tools?distro=oraclelinux-7.5 oraclelinux qemu-kvm-tools < 1.5.3-156.el7_5.3 oraclelinux-7.5
Affected pkg:rpm/oraclelinux/qemu-kvm-common?distro=oraclelinux-7.5 oraclelinux qemu-kvm-common < 1.5.3-156.el7_5.3 oraclelinux-7.5
Affected pkg:rpm/oraclelinux/qemu-img?distro=oraclelinux-7.5 oraclelinux qemu-img < 1.5.3-156.el7_5.3 oraclelinux-7.5
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date