Synopsis

Important: qemu-kvm-rhev security and bug fix update

Type/Severity

Security Advisory: Important

Topic

An update for qemu-kvm-rhev is now available for Red Hat Virtualization for Red Hat Virtualization Host 7.

Red Hat Product Security has rated this update as having a Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.

Security Fix(es):

• CVE-2018-20815 QEMU: device_tree: heap buffer overflow while loading device tree blob
  
• CVE-2019-6778 QEMU: slirp: heap buffer overflow in tcp_em
  

This update fixes the following bug:

• 1705364 RHV VM pauses when 'dd' issued inside guest to a direct lun configured as virtio-scsi with scsi-passthrough
  

Users of qemu-kvm are advised to upgrade to these updated packages. After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/2974891

Affected Products

• Red Hat Virtualization Manager 4.3 x86_64
• Red Hat Virtualization Manager 4.2 x86_64
• Red Hat Virtualization 4 for RHEL 7 x86_64
• Red Hat Virtualization for IBM Power LE 4 for RHEL 7 ppc64le

Fixes

• BZ - 1664205 - CVE-2019-6778 QEMU: slirp: heap buffer overflow in tcp_emu()
• BZ - 1693101 - CVE-2018-20815 QEMU: device_tree: heap buffer overflow while loading device tree blob

CVEs

• CVE-2018-20815
• CVE-2019-6778

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Virtualization Manager 4.3

SRPM
qemu-kvm-rhev-2.12.0-18.el7_6.7.src.rpm	SHA-256: 745fe2b3afb523cb88bcdc5b9b19546669962cbe9c918c84b8a705b35a02dab7
x86_64
qemu-img-rhev-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: 39d0b5dafad597dfbdc7e53eb4cd99fa0e53ecd4c7dfac9f8d85454e156c2f4f
qemu-kvm-common-rhev-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: afc3d21c2d9eb7d94a3eecaba0a5bfa9508b339cacba5f957f6cd94fba02884b
qemu-kvm-rhev-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: 27768bc0eeb86cd62de9cbef67a31134e4f793e5b25fea5f940297fd55ab2dd7
qemu-kvm-rhev-debuginfo-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: fac5998b2249f75d4eebfd438a7b9794cd14df1d2f0404e737315e7dfd0256f9
qemu-kvm-tools-rhev-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: 4681d087e63790c0b35ddbc002bf203bd9d6e6a8a54fc602d86c0a83ac512cbc

Red Hat Virtualization Manager 4.2

SRPM
qemu-kvm-rhev-2.12.0-18.el7_6.7.src.rpm	SHA-256: 745fe2b3afb523cb88bcdc5b9b19546669962cbe9c918c84b8a705b35a02dab7
x86_64
qemu-img-rhev-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: 39d0b5dafad597dfbdc7e53eb4cd99fa0e53ecd4c7dfac9f8d85454e156c2f4f
qemu-kvm-common-rhev-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: afc3d21c2d9eb7d94a3eecaba0a5bfa9508b339cacba5f957f6cd94fba02884b
qemu-kvm-rhev-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: 27768bc0eeb86cd62de9cbef67a31134e4f793e5b25fea5f940297fd55ab2dd7
qemu-kvm-rhev-debuginfo-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: fac5998b2249f75d4eebfd438a7b9794cd14df1d2f0404e737315e7dfd0256f9
qemu-kvm-tools-rhev-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: 4681d087e63790c0b35ddbc002bf203bd9d6e6a8a54fc602d86c0a83ac512cbc

Red Hat Virtualization 4 for RHEL 7

SRPM
qemu-kvm-rhev-2.12.0-18.el7_6.7.src.rpm	SHA-256: 745fe2b3afb523cb88bcdc5b9b19546669962cbe9c918c84b8a705b35a02dab7
x86_64
qemu-img-rhev-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: 39d0b5dafad597dfbdc7e53eb4cd99fa0e53ecd4c7dfac9f8d85454e156c2f4f
qemu-kvm-common-rhev-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: afc3d21c2d9eb7d94a3eecaba0a5bfa9508b339cacba5f957f6cd94fba02884b
qemu-kvm-rhev-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: 27768bc0eeb86cd62de9cbef67a31134e4f793e5b25fea5f940297fd55ab2dd7
qemu-kvm-rhev-debuginfo-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: fac5998b2249f75d4eebfd438a7b9794cd14df1d2f0404e737315e7dfd0256f9
qemu-kvm-tools-rhev-2.12.0-18.el7_6.7.x86_64.rpm	SHA-256: 4681d087e63790c0b35ddbc002bf203bd9d6e6a8a54fc602d86c0a83ac512cbc

Red Hat Virtualization for IBM Power LE 4 for RHEL 7

SRPM
qemu-kvm-rhev-2.12.0-18.el7_6.7.src.rpm	SHA-256: 745fe2b3afb523cb88bcdc5b9b19546669962cbe9c918c84b8a705b35a02dab7
ppc64le
qemu-img-rhev-2.12.0-18.el7_6.7.ppc64le.rpm	SHA-256: 7a42bbf3aad8acd23a248eb658f607be39c2995effe99615a9cce10d6173c200
qemu-img-rhev-2.12.0-18.el7_6.7.ppc64le.rpm	SHA-256: 7a42bbf3aad8acd23a248eb658f607be39c2995effe99615a9cce10d6173c200
qemu-kvm-common-rhev-2.12.0-18.el7_6.7.ppc64le.rpm	SHA-256: ccc1d5bda896337f95f91c88782ef240acc641139ef6625065a85e1ea98069c4
qemu-kvm-common-rhev-2.12.0-18.el7_6.7.ppc64le.rpm	SHA-256: ccc1d5bda896337f95f91c88782ef240acc641139ef6625065a85e1ea98069c4
qemu-kvm-rhev-2.12.0-18.el7_6.7.ppc64le.rpm	SHA-256: 7afd8d863235b9a94d992d1d9d7bee115a4247160653e17f104817c8534b7a25
qemu-kvm-rhev-2.12.0-18.el7_6.7.ppc64le.rpm	SHA-256: 7afd8d863235b9a94d992d1d9d7bee115a4247160653e17f104817c8534b7a25
qemu-kvm-rhev-debuginfo-2.12.0-18.el7_6.7.ppc64le.rpm	SHA-256: 0587e3c9ed0d774f8cbe22fd35afe43fc6440e9b95f1ce91db253f8af2d27fe5
qemu-kvm-rhev-debuginfo-2.12.0-18.el7_6.7.ppc64le.rpm	SHA-256: 0587e3c9ed0d774f8cbe22fd35afe43fc6440e9b95f1ce91db253f8af2d27fe5
qemu-kvm-tools-rhev-2.12.0-18.el7_6.7.ppc64le.rpm	SHA-256: a98bbad85b490633805a22ed3d06631460a969618d44f1df8066de007c5b55fa
qemu-kvm-tools-rhev-2.12.0-18.el7_6.7.ppc64le.rpm	SHA-256: a98bbad85b490633805a22ed3d06631460a969618d44f1df8066de007c5b55fa