RHSA-2019:1968: Important: qemu-kvm-rhev security and bug fix update
KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.<br>Security Fix(es):<br><li> CVE-2018-20815 QEMU: devicetree: heap buffer overflow while loading device tree blob</li> <li> CVE-2019-6778 QEMU: slirp: heap buffer overflow in tcpem</li> This update fixes the following bug:<br><li> 1705364 RHV VM pauses when 'dd' issued inside guest to a direct lun configured as virtio-scsi with scsi-passthrough</li> Users of qemu-kvm are advised to upgrade to these updated packages. After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2019:1968?
The severity of RHSA-2019:1968 is classified as Important.
How do I fix RHSA-2019:1968?
To fix RHSA-2019:1968, update the affected packages to version 2.12.0-18.el7_6.7 or later.
What packages are affected by RHSA-2019:1968?
The packages affected by RHSA-2019:1968 include qemu-kvm-rhev, qemu-img-rhev, and qemu-kvm-common-rhev, among others.
Is RHSA-2019:1968 related to KVM vulnerabilities?
Yes, RHSA-2019:1968 addresses vulnerabilities in the KVM (Kernel-based Virtual Machine) virtualization solution.
What are the implications of not addressing RHSA-2019:1968?
Not addressing RHSA-2019:1968 could expose systems to potential security risks and exploitation due to the vulnerabilities present.