Synopsis

Important: qemu-kvm-rhev security update

Type/Severity

Security Advisory: Important

Topic

An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 13.0 (Queens).

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.

Security Fix(es):

• QEMU: device_tree: heap buffer overflow while loading device tree blob (CVE-2018-20815)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

Affected Products

• Red Hat OpenStack 13 x86_64
• Red Hat OpenStack for IBM Power 13 ppc64le

Fixes

• BZ - 1693101 - CVE-2018-20815 QEMU: device_tree: heap buffer overflow while loading device tree blob

CVEs

• CVE-2018-20815

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat OpenStack 13

SRPM
qemu-kvm-rhev-2.12.0-18.el7_6.6.src.rpm	SHA-256: 99981710c8d5b273d62935ac0addd90a48e3ee76470131fcd0ae78292c742a5b
x86_64
qemu-img-rhev-2.12.0-18.el7_6.6.x86_64.rpm	SHA-256: cb6cff737ee709e474de6e7e5a6133f1a9ffb0872ef377a2590d416a8a0479de
qemu-kvm-common-rhev-2.12.0-18.el7_6.6.x86_64.rpm	SHA-256: 1962abd145dff5600a272f51bb4d7855660e8607e3a246e5f6199f9881b27110
qemu-kvm-rhev-2.12.0-18.el7_6.6.x86_64.rpm	SHA-256: fbefd99b24673d3e07ab2d798da63ce4fb8626748f4f961c8d9935cbe6ad0d33
qemu-kvm-rhev-debuginfo-2.12.0-18.el7_6.6.x86_64.rpm	SHA-256: 80eea392dd547f2fa59486d98ad0d94851836317258ad65c0a2c90cd1b60c288
qemu-kvm-tools-rhev-2.12.0-18.el7_6.6.x86_64.rpm	SHA-256: 76a6a35fbb0d2c8150863f8ba2dc11c349d7d3744b8724e42256b802bdeaf13b

Red Hat OpenStack for IBM Power 13

SRPM
qemu-kvm-rhev-2.12.0-18.el7_6.6.src.rpm	SHA-256: 99981710c8d5b273d62935ac0addd90a48e3ee76470131fcd0ae78292c742a5b
ppc64le
qemu-img-rhev-2.12.0-18.el7_6.6.ppc64le.rpm	SHA-256: c99e27f80ba685af2d5dd13f7c4f6ea93e384b56de1b4985a7925522947a49fa
qemu-kvm-common-rhev-2.12.0-18.el7_6.6.ppc64le.rpm	SHA-256: 955b833b4be43133b56e75a975fa27c3d34159e4d3230dc5a7231249891c89cb
qemu-kvm-rhev-2.12.0-18.el7_6.6.ppc64le.rpm	SHA-256: 67e7ecfa895f73dd159e7164fbcfa1966e6df901474d6255165b18fa41c624aa
qemu-kvm-rhev-debuginfo-2.12.0-18.el7_6.6.ppc64le.rpm	SHA-256: 121eb7d40bb827ffaa29b73f99cba9c1c1ee399155c1ca203f34b92198df339c
qemu-kvm-tools-rhev-2.12.0-18.el7_6.6.ppc64le.rpm	SHA-256: d73b97e33f1e5ed4575e5a64400446f2863a691c7b5d64bebdc4beae91504679