Red Hat Security Advisory: rhevm-setup-plugins security, bug fix, and enhancement update
Affects Red Hat rhevm-setup-plugins security,Source GCVE Database
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 14 Nov 2026, 17:45 UTC
What to do
AI-suggested
A fixed version of rhevm-setup-plugins (4.1.4) has been released containing the mitigation for CVE-2017-5715. Users should upgrade to this version to address the vulnerability. No additional mitigation steps are specified in the advisory.
Description
The rhevm-setup-plugins package for Red Hat Virtualization Manager was updated to address a security issue related to speculative execution vulnerabilities in modern microprocessors, specifically CVE-2017-5715 (branch target injection). This flaw could allow an unprivileged attacker to read privileged memory across syscall and guest/host boundaries via cache side-channel attacks. The update includes the mitigation for this vulnerability on the rhevm-setup-plugins component. The issue was reported by Google Project Zero.
References
- access.redhat.com/errata/RHSA-2018:0051 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
- access.redhat.com/solutions/3307851 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1527107 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0051.json (opens in a new tab)