RHSA-2020:1292: Important: qemu-kvm-rhev security update
KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.<br>Security Fix(es):<br><li> CVE-2020-8608 QEMU: Slirp: potential OOB access due to unsafe snprintf() usages</li> Users of qemu-kvm are advised to upgrade to these updated packages. After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:1292?
The severity of RHSA-2020:1292 is classified as important.
How do I fix RHSA-2020:1292?
To fix RHSA-2020:1292, update the affected packages to version 2.12.0-44.el7_8.1.
Which packages are affected by RHSA-2020:1292?
The affected packages by RHSA-2020:1292 include qemu-kvm-rhev, qemu-img-rhev, and qemu-kvm-common-rhev.
What products does RHSA-2020:1292 apply to?
RHSA-2020:1292 applies to Red Hat environments using KVM virtualization.
Is there a workaround for RHSA-2020:1292?
There are no known workarounds for RHSA-2020:1292; updating to the recommended version is necessary.