SUSE-SU-2019:1490-1: libvirt&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2019:1490-1 is a vulnerability in libvirt&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 13-06-2019
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for libvirt This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS) - CVE-2018-12130: Microarchitectural Load Port Data Sampling (MLPDS) - CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) These updates contain the libvirt adjustments, that pass through the new 'md-clear' CPU flag (bsc#1135273). For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736 Security issues fixed: - CVE-2019-10132: Reject clients unless their UID matches the server UID (bsc#1134348) Non security issues fixed: - delay global firewall setup if no networks are running (bsc#1133229) - add systemd-container dependency to qemu and lxc drivers (bsc#1136109)

No weakness data has been published for this record.