RHSA-2021:0346: Moderate: qemu-kvm-ma security update
Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-ma packages provide the user-space component for running virtual machines that use KVM on the IBM z Systems, IBM Power, and 64-bit ARM architectures.<br>Security Fix(es):<br><li> QEMU: slirp: use-after-free in ipreass() function in ipinput.c (CVE-2020-1983)</li> <li> QEMU: reachable assertion failure in nettxpktaddrawfragment() in hw/net/nettxpkt.c (CVE-2020-16092)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:0346?
The severity of RHSA-2021:0346 is classified as moderate.
How do I fix RHSA-2021:0346?
To fix RHSA-2021:0346, update the affected packages to version 2.12.0-48.el7_9.2.
Which packages are affected by RHSA-2021:0346?
Packages affected by RHSA-2021:0346 include qemu-kvm-ma, qemu-img-ma, qemu-kvm-common-ma, and related debuginfo packages.
On which architectures does RHSA-2021:0346 apply?
RHSA-2021:0346 applies to IBM z Systems, IBM Power, and 64-bit ARM architectures.
What is qemu-kvm in the context of RHSA-2021:0346?
Qemu-kvm is a full virtualization solution for Linux, providing user-space components for running KVM-based virtual machines.