Synopsis

Important: qemu-kvm-ma security update

Type/Severity

Security Advisory: Important

Topic

An update for qemu-kvm-ma is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-ma packages provide the user-space component for running virtual machines that use KVM on the IBM z Systems, IBM Power, and 64-bit ARM architectures.

Security Fix(es):

• QEMU: usb: out-of-bounds r/w access issue while processing usb packets (CVE-2020-14364)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

Affected Products

• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Fixes

• BZ - 1869201 - CVE-2020-14364 QEMU: usb: out-of-bounds r/w access issue while processing usb packets

CVEs

• CVE-2020-14364

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
qemu-kvm-ma-2.12.0-48.el7_9.1.src.rpm	SHA-256: 735083d6ef0a439cf3e9fac05c7127afc33c5f7745d8f3996320c125560cda92
s390x
qemu-img-ma-2.12.0-48.el7_9.1.s390x.rpm	SHA-256: d4ad53fb6d068a02c88496d135b7049a81dd71e5d9a1a6e2fafa47f1a45f7d3c
qemu-kvm-common-ma-2.12.0-48.el7_9.1.s390x.rpm	SHA-256: 1bd6a8ffced82f6c185f46e5b47f1bf28c46a6cc017e868b7b6658e522ace7aa
qemu-kvm-ma-2.12.0-48.el7_9.1.s390x.rpm	SHA-256: dd613251073c56185e6d8ea153e288379c67aeedcb041bdc8015a502836874e8
qemu-kvm-ma-debuginfo-2.12.0-48.el7_9.1.s390x.rpm	SHA-256: 488591a6c54d2f44484b9d4bb16d421d215b793cd42efface875d538291aa7d8
qemu-kvm-tools-ma-2.12.0-48.el7_9.1.s390x.rpm	SHA-256: 26c6a30930bcf9953be86ad5a22376bde94f3e845025cd6a4ae16e45e32212a3

Red Hat Enterprise Linux for Power, big endian 7

SRPM
qemu-kvm-ma-2.12.0-48.el7_9.1.src.rpm	SHA-256: 735083d6ef0a439cf3e9fac05c7127afc33c5f7745d8f3996320c125560cda92
ppc64
qemu-img-ma-2.12.0-48.el7_9.1.ppc64.rpm	SHA-256: 6f9a458f5090f4eede03b94d3d1800843f3bf9717096b495ef8ad7be5e88077a
qemu-kvm-common-ma-2.12.0-48.el7_9.1.ppc64.rpm	SHA-256: 2bcfea6a6f97d194675a97621fe8aea5a0860e300c4d5cce11b0f9f2c61107b4
qemu-kvm-ma-2.12.0-48.el7_9.1.ppc64.rpm	SHA-256: 9f54465a86f82bd5a34b1ceeb8a1887b62819a969b3c0eae1e6322217998cf16
qemu-kvm-ma-debuginfo-2.12.0-48.el7_9.1.ppc64.rpm	SHA-256: 2efb6dcb42c65915d6550a4d38b829919be177e69765d9d4dbac24c210d28d7c
qemu-kvm-ma-debuginfo-2.12.0-48.el7_9.1.ppc64.rpm	SHA-256: 2efb6dcb42c65915d6550a4d38b829919be177e69765d9d4dbac24c210d28d7c
qemu-kvm-tools-ma-2.12.0-48.el7_9.1.ppc64.rpm	SHA-256: 5a4d0ceed824d29877f3a29a7f47758a0bfbe4543174405909b18b28a2d7552d

Red Hat Enterprise Linux for Power, little endian 7

SRPM
qemu-kvm-ma-2.12.0-48.el7_9.1.src.rpm	SHA-256: 735083d6ef0a439cf3e9fac05c7127afc33c5f7745d8f3996320c125560cda92
ppc64le
qemu-img-ma-2.12.0-48.el7_9.1.ppc64le.rpm	SHA-256: 0ff09880ca2d3e1e6af9da5671fbe75f6d54e5d62705bd31da93afbcca6f12e6
qemu-kvm-common-ma-2.12.0-48.el7_9.1.ppc64le.rpm	SHA-256: d419d2d2e726d72093d57ff80d8e2ac825b0f40abfe1bbd4cc0f85090d047cb8
qemu-kvm-ma-2.12.0-48.el7_9.1.ppc64le.rpm	SHA-256: 2dbdfec282d47cf04f3fa0e71d3d0dcb9f78d1c6f9967137f996f1779acfcf34
qemu-kvm-ma-debuginfo-2.12.0-48.el7_9.1.ppc64le.rpm	SHA-256: 2aa19874d2c423168cf2331dc01011cd6a8f1068926cb0e10a5ada1d7da9575f
qemu-kvm-tools-ma-2.12.0-48.el7_9.1.ppc64le.rpm	SHA-256: 6b1334beef0a2c112ca6f813a990f1db645527e50b262722a6b1bee70043750d