- Vulnerability/
- RHSA-2020:1292
RHSA-2020:1292: Important: qemu-kvm-rhev security update
First published: Thu Apr 02 2020(Updated: )
KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.<br>Security Fix(es):<br><li> CVE-2020-8608 QEMU: Slirp: potential OOB access due to unsafe snprintf() usages</li> Users of qemu-kvm are advised to upgrade to these updated packages. After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/qemu-kvm-rhev | <2.12.0-44.el7_8.1 | 2.12.0-44.el7_8.1 |
| redhat/qemu-img-rhev | <2.12.0-44.el7_8.1 | 2.12.0-44.el7_8.1 |
| redhat/qemu-kvm-common-rhev | <2.12.0-44.el7_8.1 | 2.12.0-44.el7_8.1 |
| redhat/qemu-kvm-rhev | <2.12.0-44.el7_8.1 | 2.12.0-44.el7_8.1 |
| redhat/qemu-kvm-rhev-debuginfo | <2.12.0-44.el7_8.1 | 2.12.0-44.el7_8.1 |
| redhat/qemu-kvm-tools-rhev | <2.12.0-44.el7_8.1 | 2.12.0-44.el7_8.1 |
| redhat/qemu-img-rhev | <2.12.0-44.el7_8.1 | 2.12.0-44.el7_8.1 |
| redhat/qemu-kvm-common-rhev | <2.12.0-44.el7_8.1 | 2.12.0-44.el7_8.1 |
| redhat/qemu-kvm-rhev | <2.12.0-44.el7_8.1 | 2.12.0-44.el7_8.1 |
| redhat/qemu-kvm-rhev-debuginfo | <2.12.0-44.el7_8.1 | 2.12.0-44.el7_8.1 |
| redhat/qemu-kvm-tools-rhev | <2.12.0-44.el7_8.1 | 2.12.0-44.el7_8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHSA-2020:1292?
The severity of RHSA-2020:1292 is classified as important.
How do I fix RHSA-2020:1292?
To fix RHSA-2020:1292, update the affected packages to version 2.12.0-44.el7_8.1.
Which packages are affected by RHSA-2020:1292?
The affected packages by RHSA-2020:1292 include qemu-kvm-rhev, qemu-img-rhev, and qemu-kvm-common-rhev.
What products does RHSA-2020:1292 apply to?
RHSA-2020:1292 applies to Red Hat environments using KVM virtualization.
Is there a workaround for RHSA-2020:1292?
There are no known workarounds for RHSA-2020:1292; updating to the recommended version is necessary.
- agent/severity
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/title
- agent/remedy
- agent/description
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2020:1292
- agent/software-canonical-lookup
- agent/references
- agent/tags
- agent/event
- agent/source
- package-manager/redhat