Red Hat Product Errata RHSA-2016:0997 - Security Advisory
Issued:
2016-05-10
Updated:
2016-05-10

RHSA-2016:0997 - Security Advisory

Synopsis

Important: qemu-kvm security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for qemu-kvm is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm packages provide the user-space component for running virtual machines using KVM.

Security Fix(es):

  • An out-of-bounds read/write access flaw was found in the way QEMU's VGA emulation with VESA BIOS Extensions (VBE) support performed read/write operations via I/O port methods. A privileged guest user could use this flaw to execute arbitrary code on the host with the privileges of the host's QEMU process. (CVE-2016-3710)

Red Hat would like to thank Wei Xiao (360 Marvel Team) and Qinghao Tang (360 Marvel Team) for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 i386
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386

Fixes

  • BZ - 1331401 - CVE-2016-3710 qemu: incorrect banked access bounds checking in vga module

Red Hat Enterprise Linux Server 6

SRPM
qemu-kvm-0.12.1.2-2.491.el6_8.1.src.rpm SHA-256: be3915eb961da165c1b166eb22f44385b007979adf474b915e74878cd54d82f9
x86_64
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: f6264f3c301438c57958b8e6fb84b0672445155cc432ca0b06c7f7e98e3b3903
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: f6264f3c301438c57958b8e6fb84b0672445155cc432ca0b06c7f7e98e3b3903
qemu-img-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: ef7731ea6a81837e49f684e3bac0d366bcee43495215510a47b11757e1b3ef99
qemu-img-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: ef7731ea6a81837e49f684e3bac0d366bcee43495215510a47b11757e1b3ef99
qemu-kvm-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: 14c7ed07756fdbb432f9646d13b01d0ac96e1d1e03ce44cbf755a15a20c8c2e9
qemu-kvm-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: 14c7ed07756fdbb432f9646d13b01d0ac96e1d1e03ce44cbf755a15a20c8c2e9
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: e133467049da764fb102e536b685c623f504bd06817e927206ebeb6ec2227366
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: e133467049da764fb102e536b685c623f504bd06817e927206ebeb6ec2227366
qemu-kvm-tools-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: d7c2c4ced596bb8627b18540d2fe72a426e67a27908f1c75cd1cdcead163e712
qemu-kvm-tools-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: d7c2c4ced596bb8627b18540d2fe72a426e67a27908f1c75cd1cdcead163e712
i386
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.i686.rpm SHA-256: be8ba2dcb5f36d57fcfdaf7a22d37e4fb09beb22de2dd5a6487d8af95911b007
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.i686.rpm SHA-256: efe1c16c4edf876ee3fe98cf5485f664e7382d95b5a73f3b87d83d997b1f459e

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
qemu-kvm-0.12.1.2-2.491.el6_8.1.src.rpm SHA-256: be3915eb961da165c1b166eb22f44385b007979adf474b915e74878cd54d82f9
i386
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.i686.rpm SHA-256: be8ba2dcb5f36d57fcfdaf7a22d37e4fb09beb22de2dd5a6487d8af95911b007
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.i686.rpm SHA-256: efe1c16c4edf876ee3fe98cf5485f664e7382d95b5a73f3b87d83d997b1f459e
x86_64
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: f6264f3c301438c57958b8e6fb84b0672445155cc432ca0b06c7f7e98e3b3903
qemu-img-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: ef7731ea6a81837e49f684e3bac0d366bcee43495215510a47b11757e1b3ef99
qemu-kvm-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: 14c7ed07756fdbb432f9646d13b01d0ac96e1d1e03ce44cbf755a15a20c8c2e9
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: e133467049da764fb102e536b685c623f504bd06817e927206ebeb6ec2227366
qemu-kvm-tools-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: d7c2c4ced596bb8627b18540d2fe72a426e67a27908f1c75cd1cdcead163e712

Red Hat Enterprise Linux Workstation 6

SRPM
qemu-kvm-0.12.1.2-2.491.el6_8.1.src.rpm SHA-256: be3915eb961da165c1b166eb22f44385b007979adf474b915e74878cd54d82f9
x86_64
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: f6264f3c301438c57958b8e6fb84b0672445155cc432ca0b06c7f7e98e3b3903
qemu-img-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: ef7731ea6a81837e49f684e3bac0d366bcee43495215510a47b11757e1b3ef99
qemu-kvm-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: 14c7ed07756fdbb432f9646d13b01d0ac96e1d1e03ce44cbf755a15a20c8c2e9
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: e133467049da764fb102e536b685c623f504bd06817e927206ebeb6ec2227366
qemu-kvm-tools-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: d7c2c4ced596bb8627b18540d2fe72a426e67a27908f1c75cd1cdcead163e712
i386
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.i686.rpm SHA-256: be8ba2dcb5f36d57fcfdaf7a22d37e4fb09beb22de2dd5a6487d8af95911b007
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.i686.rpm SHA-256: efe1c16c4edf876ee3fe98cf5485f664e7382d95b5a73f3b87d83d997b1f459e

Red Hat Enterprise Linux Desktop 6

SRPM
qemu-kvm-0.12.1.2-2.491.el6_8.1.src.rpm SHA-256: be3915eb961da165c1b166eb22f44385b007979adf474b915e74878cd54d82f9
x86_64
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: f6264f3c301438c57958b8e6fb84b0672445155cc432ca0b06c7f7e98e3b3903
qemu-img-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: ef7731ea6a81837e49f684e3bac0d366bcee43495215510a47b11757e1b3ef99
qemu-kvm-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: 14c7ed07756fdbb432f9646d13b01d0ac96e1d1e03ce44cbf755a15a20c8c2e9
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: e133467049da764fb102e536b685c623f504bd06817e927206ebeb6ec2227366
qemu-kvm-tools-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: d7c2c4ced596bb8627b18540d2fe72a426e67a27908f1c75cd1cdcead163e712
i386
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.i686.rpm SHA-256: be8ba2dcb5f36d57fcfdaf7a22d37e4fb09beb22de2dd5a6487d8af95911b007
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.i686.rpm SHA-256: efe1c16c4edf876ee3fe98cf5485f664e7382d95b5a73f3b87d83d997b1f459e

Red Hat Enterprise Linux for Power, big endian 6

SRPM
qemu-kvm-0.12.1.2-2.491.el6_8.1.src.rpm SHA-256: be3915eb961da165c1b166eb22f44385b007979adf474b915e74878cd54d82f9
ppc64
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.ppc64.rpm SHA-256: eef5ad6a6a9442ce660635f1193715ed025c5539409d3c3b23a88a09e2344fab
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.ppc64.rpm SHA-256: 9ed0aeb72b75de9e00a94d70191f9b2ae96681927556a1bc73be81c69eebd5b0

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
qemu-kvm-0.12.1.2-2.491.el6_8.1.src.rpm SHA-256: be3915eb961da165c1b166eb22f44385b007979adf474b915e74878cd54d82f9
x86_64
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: f6264f3c301438c57958b8e6fb84b0672445155cc432ca0b06c7f7e98e3b3903
qemu-img-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: ef7731ea6a81837e49f684e3bac0d366bcee43495215510a47b11757e1b3ef99
qemu-kvm-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: 14c7ed07756fdbb432f9646d13b01d0ac96e1d1e03ce44cbf755a15a20c8c2e9
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: e133467049da764fb102e536b685c623f504bd06817e927206ebeb6ec2227366
qemu-kvm-tools-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: d7c2c4ced596bb8627b18540d2fe72a426e67a27908f1c75cd1cdcead163e712

Red Hat Enterprise Linux Server from RHUI 6

SRPM
qemu-kvm-0.12.1.2-2.491.el6_8.1.src.rpm SHA-256: be3915eb961da165c1b166eb22f44385b007979adf474b915e74878cd54d82f9
x86_64
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: f6264f3c301438c57958b8e6fb84b0672445155cc432ca0b06c7f7e98e3b3903
qemu-img-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: ef7731ea6a81837e49f684e3bac0d366bcee43495215510a47b11757e1b3ef99
qemu-kvm-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: 14c7ed07756fdbb432f9646d13b01d0ac96e1d1e03ce44cbf755a15a20c8c2e9
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: e133467049da764fb102e536b685c623f504bd06817e927206ebeb6ec2227366
qemu-kvm-tools-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: d7c2c4ced596bb8627b18540d2fe72a426e67a27908f1c75cd1cdcead163e712
i386
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.i686.rpm SHA-256: be8ba2dcb5f36d57fcfdaf7a22d37e4fb09beb22de2dd5a6487d8af95911b007
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.i686.rpm SHA-256: efe1c16c4edf876ee3fe98cf5485f664e7382d95b5a73f3b87d83d997b1f459e

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6

SRPM
qemu-kvm-0.12.1.2-2.491.el6_8.1.src.rpm SHA-256: be3915eb961da165c1b166eb22f44385b007979adf474b915e74878cd54d82f9
x86_64
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: f6264f3c301438c57958b8e6fb84b0672445155cc432ca0b06c7f7e98e3b3903
qemu-img-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: ef7731ea6a81837e49f684e3bac0d366bcee43495215510a47b11757e1b3ef99
qemu-kvm-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: 14c7ed07756fdbb432f9646d13b01d0ac96e1d1e03ce44cbf755a15a20c8c2e9
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: e133467049da764fb102e536b685c623f504bd06817e927206ebeb6ec2227366
qemu-kvm-tools-0.12.1.2-2.491.el6_8.1.x86_64.rpm SHA-256: d7c2c4ced596bb8627b18540d2fe72a426e67a27908f1c75cd1cdcead163e712
i386
qemu-guest-agent-0.12.1.2-2.491.el6_8.1.i686.rpm SHA-256: be8ba2dcb5f36d57fcfdaf7a22d37e4fb09beb22de2dd5a6487d8af95911b007
qemu-kvm-debuginfo-0.12.1.2-2.491.el6_8.1.i686.rpm SHA-256: efe1c16c4edf876ee3fe98cf5485f664e7382d95b5a73f3b87d83d997b1f459e

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.