Red Hat Security Advisory: ovirt-guest-agent-docker security and bug fix update
Affects Red Hat ovirt-guest-agent-dockerSource GCVE Database
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 13 Nov 2026, 18:31 UTC
What to do
AI-suggested
A security update addressing CVE-2017-5715 has been applied to the ovirt-guest-agent-docker package. Users should apply this update to mitigate the speculative execution side-channel vulnerability. No additional action is required beyond applying the official fix.
Description
The ovirt-guest-agent-docker package for Red Hat Linux Atomic Host virtual machines received a security update addressing the speculative execution vulnerability CVE-2017-5715 (branch target injection). This vulnerability allows an unprivileged attacker to potentially read privileged memory across syscall and guest/host boundaries via cache side-channel attacks. The update also fixes a bug where the guest agent was unable to send a shutdown message during Atomic host shutdown due to premature container termination.
References
- access.redhat.com/errata/RHSA-2018:0049 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
- access.redhat.com/solutions/3307851 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1427849 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1524695 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0049.json (opens in a new tab)