Synopsis

Moderate: qemu-kvm security update

Type/Severity

Security Advisory: Moderate

Topic

An update for qemu-kvm is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

• QEMU: cirrus: OOB access when updating VGA display (CVE-2018-7858)
  

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank Ross Lagerwall (Citrix.com) for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.6 x86_64

Fixes

• BZ - 1553402 - CVE-2018-7858 QEMU: cirrus: OOB access when updating VGA display

CVEs

• CVE-2018-7858

References

• https://access.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 7

SRPM
qemu-kvm-1.5.3-156.el7_5.1.src.rpm	SHA-256: 851156c8bc47e94c61c8d7a107899c9a7b101739a3e82307dbd7c1b4cad79501
x86_64
qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 2bf741d0cbfc9c64e204e9dae3e5e7a6723b699c3722dc9486338c0fc3b43be2
qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 0d5a36b9a3ad195b11b2f39a281ab4d05a4bbacfa2d1d717016528c9eb5b74c2
qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 678fd8901c34d55464df985e84a4899a2ea17f151b25afe76640bd44106a40be
qemu-kvm-debuginfo-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 4974dd04ef5276e844336775945d35c6fc88780f2c8761bcc71ceaaa6117f419
qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 1c25471d2adae4bc409f0d8c3939dcf69fcacaa6574088698ef99ea8d807a4b3

Red Hat Enterprise Linux Server - Extended Update Support 7.6

SRPM
qemu-kvm-1.5.3-156.el7_5.1.src.rpm	SHA-256: 851156c8bc47e94c61c8d7a107899c9a7b101739a3e82307dbd7c1b4cad79501
x86_64
qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 2bf741d0cbfc9c64e204e9dae3e5e7a6723b699c3722dc9486338c0fc3b43be2
qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 0d5a36b9a3ad195b11b2f39a281ab4d05a4bbacfa2d1d717016528c9eb5b74c2
qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 678fd8901c34d55464df985e84a4899a2ea17f151b25afe76640bd44106a40be
qemu-kvm-debuginfo-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 4974dd04ef5276e844336775945d35c6fc88780f2c8761bcc71ceaaa6117f419
qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 1c25471d2adae4bc409f0d8c3939dcf69fcacaa6574088698ef99ea8d807a4b3

Red Hat Enterprise Linux Server - Extended Update Support 7.5

SRPM
qemu-kvm-1.5.3-156.el7_5.1.src.rpm	SHA-256: 851156c8bc47e94c61c8d7a107899c9a7b101739a3e82307dbd7c1b4cad79501
x86_64
qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 2bf741d0cbfc9c64e204e9dae3e5e7a6723b699c3722dc9486338c0fc3b43be2
qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 0d5a36b9a3ad195b11b2f39a281ab4d05a4bbacfa2d1d717016528c9eb5b74c2
qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 678fd8901c34d55464df985e84a4899a2ea17f151b25afe76640bd44106a40be
qemu-kvm-debuginfo-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 4974dd04ef5276e844336775945d35c6fc88780f2c8761bcc71ceaaa6117f419
qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 1c25471d2adae4bc409f0d8c3939dcf69fcacaa6574088698ef99ea8d807a4b3

Red Hat Enterprise Linux Workstation 7

SRPM
qemu-kvm-1.5.3-156.el7_5.1.src.rpm	SHA-256: 851156c8bc47e94c61c8d7a107899c9a7b101739a3e82307dbd7c1b4cad79501
x86_64
qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 2bf741d0cbfc9c64e204e9dae3e5e7a6723b699c3722dc9486338c0fc3b43be2
qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 0d5a36b9a3ad195b11b2f39a281ab4d05a4bbacfa2d1d717016528c9eb5b74c2
qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 678fd8901c34d55464df985e84a4899a2ea17f151b25afe76640bd44106a40be
qemu-kvm-debuginfo-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 4974dd04ef5276e844336775945d35c6fc88780f2c8761bcc71ceaaa6117f419
qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 1c25471d2adae4bc409f0d8c3939dcf69fcacaa6574088698ef99ea8d807a4b3

Red Hat Enterprise Linux Desktop 7

SRPM
qemu-kvm-1.5.3-156.el7_5.1.src.rpm	SHA-256: 851156c8bc47e94c61c8d7a107899c9a7b101739a3e82307dbd7c1b4cad79501
x86_64
qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 2bf741d0cbfc9c64e204e9dae3e5e7a6723b699c3722dc9486338c0fc3b43be2
qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 0d5a36b9a3ad195b11b2f39a281ab4d05a4bbacfa2d1d717016528c9eb5b74c2
qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 678fd8901c34d55464df985e84a4899a2ea17f151b25afe76640bd44106a40be
qemu-kvm-debuginfo-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 4974dd04ef5276e844336775945d35c6fc88780f2c8761bcc71ceaaa6117f419
qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 1c25471d2adae4bc409f0d8c3939dcf69fcacaa6574088698ef99ea8d807a4b3

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
qemu-kvm-1.5.3-156.el7_5.1.src.rpm	SHA-256: 851156c8bc47e94c61c8d7a107899c9a7b101739a3e82307dbd7c1b4cad79501
x86_64
qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 2bf741d0cbfc9c64e204e9dae3e5e7a6723b699c3722dc9486338c0fc3b43be2
qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 0d5a36b9a3ad195b11b2f39a281ab4d05a4bbacfa2d1d717016528c9eb5b74c2
qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 678fd8901c34d55464df985e84a4899a2ea17f151b25afe76640bd44106a40be
qemu-kvm-debuginfo-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 4974dd04ef5276e844336775945d35c6fc88780f2c8761bcc71ceaaa6117f419
qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 1c25471d2adae4bc409f0d8c3939dcf69fcacaa6574088698ef99ea8d807a4b3

Red Hat Enterprise Linux EUS Compute Node 7.6

SRPM
qemu-kvm-1.5.3-156.el7_5.1.src.rpm	SHA-256: 851156c8bc47e94c61c8d7a107899c9a7b101739a3e82307dbd7c1b4cad79501
x86_64
qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 2bf741d0cbfc9c64e204e9dae3e5e7a6723b699c3722dc9486338c0fc3b43be2
qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 0d5a36b9a3ad195b11b2f39a281ab4d05a4bbacfa2d1d717016528c9eb5b74c2
qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 678fd8901c34d55464df985e84a4899a2ea17f151b25afe76640bd44106a40be
qemu-kvm-debuginfo-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 4974dd04ef5276e844336775945d35c6fc88780f2c8761bcc71ceaaa6117f419
qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 1c25471d2adae4bc409f0d8c3939dcf69fcacaa6574088698ef99ea8d807a4b3

Red Hat Enterprise Linux EUS Compute Node 7.5

SRPM
qemu-kvm-1.5.3-156.el7_5.1.src.rpm	SHA-256: 851156c8bc47e94c61c8d7a107899c9a7b101739a3e82307dbd7c1b4cad79501
x86_64
qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 2bf741d0cbfc9c64e204e9dae3e5e7a6723b699c3722dc9486338c0fc3b43be2
qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 0d5a36b9a3ad195b11b2f39a281ab4d05a4bbacfa2d1d717016528c9eb5b74c2
qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 678fd8901c34d55464df985e84a4899a2ea17f151b25afe76640bd44106a40be
qemu-kvm-debuginfo-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 4974dd04ef5276e844336775945d35c6fc88780f2c8761bcc71ceaaa6117f419
qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 1c25471d2adae4bc409f0d8c3939dcf69fcacaa6574088698ef99ea8d807a4b3

Red Hat Enterprise Linux Server - AUS 7.6

SRPM
qemu-kvm-1.5.3-156.el7_5.1.src.rpm	SHA-256: 851156c8bc47e94c61c8d7a107899c9a7b101739a3e82307dbd7c1b4cad79501
x86_64
qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 2bf741d0cbfc9c64e204e9dae3e5e7a6723b699c3722dc9486338c0fc3b43be2
qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 0d5a36b9a3ad195b11b2f39a281ab4d05a4bbacfa2d1d717016528c9eb5b74c2
qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 678fd8901c34d55464df985e84a4899a2ea17f151b25afe76640bd44106a40be
qemu-kvm-debuginfo-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 4974dd04ef5276e844336775945d35c6fc88780f2c8761bcc71ceaaa6117f419
qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 1c25471d2adae4bc409f0d8c3939dcf69fcacaa6574088698ef99ea8d807a4b3

Red Hat Enterprise Linux Server - TUS 7.6

SRPM
qemu-kvm-1.5.3-156.el7_5.1.src.rpm	SHA-256: 851156c8bc47e94c61c8d7a107899c9a7b101739a3e82307dbd7c1b4cad79501
x86_64
qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 2bf741d0cbfc9c64e204e9dae3e5e7a6723b699c3722dc9486338c0fc3b43be2
qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 0d5a36b9a3ad195b11b2f39a281ab4d05a4bbacfa2d1d717016528c9eb5b74c2
qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 678fd8901c34d55464df985e84a4899a2ea17f151b25afe76640bd44106a40be
qemu-kvm-debuginfo-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 4974dd04ef5276e844336775945d35c6fc88780f2c8761bcc71ceaaa6117f419
qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 1c25471d2adae4bc409f0d8c3939dcf69fcacaa6574088698ef99ea8d807a4b3

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.6

SRPM
qemu-kvm-1.5.3-156.el7_5.1.src.rpm	SHA-256: 851156c8bc47e94c61c8d7a107899c9a7b101739a3e82307dbd7c1b4cad79501
x86_64
qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 2bf741d0cbfc9c64e204e9dae3e5e7a6723b699c3722dc9486338c0fc3b43be2
qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 0d5a36b9a3ad195b11b2f39a281ab4d05a4bbacfa2d1d717016528c9eb5b74c2
qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 678fd8901c34d55464df985e84a4899a2ea17f151b25afe76640bd44106a40be
qemu-kvm-debuginfo-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 4974dd04ef5276e844336775945d35c6fc88780f2c8761bcc71ceaaa6117f419
qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	SHA-256: 1c25471d2adae4bc409f0d8c3939dcf69fcacaa6574088698ef99ea8d807a4b3