Red Hat Security Advisory: rhevm-setup-plugins security, bug fix, and enhancement update
Affects Red Hat rhevm-setup-plugins security,Source GCVE Database
0
Mentioned vulnerabilities
Severity
HighRated by Threat Radar
Data as of 14 Nov 2026, 17:45 UTC
What to do
AI-suggested
A fixed version of rhevm-setup-plugins (3.6.6) has been released that includes the mitigation for CVE-2017-5715. Users should upgrade to this version to address the vulnerability.
Description
This advisory addresses a security update for the rhevm-setup-plugins package used exclusively in Red Hat Virtualization Manager. It includes a fix related to the speculative execution vulnerability CVE-2017-5715, which allows an unprivileged attacker to read privileged memory via targeted cache side-channel attacks. The update is part of mitigating this industry-wide microprocessor design flaw.
References
- access.redhat.com/errata/RHSA-2018:0052 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
- access.redhat.com/solutions/3307851 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1527109 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0052.json (opens in a new tab)
Community reviews
Loading reviews…