Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Red Hat 6 RHSA-2017:0621-01 Moderate: qemu-kvm Security Update

red hat
Calendar Grey March 21, 2017
Scroller Redhat
Red Hat enhances qemu-kvm addressing significant security vulnerabilities impacting Enterprise Linux clientele by providing patches and detailed guidance.
An update for qemu-kvm is now available for Red Hat Enterprise Linux 6

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

Summary

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.
Security Fix(es):
* An integer overflow flaw and an out-of-bounds read flaw were found in the way QEMU's VGA emulator set certain VGA registers while in VBE mode. A privileged guest user could use this flaw to crash the QEMU process instance. (CVE-2016-3712)
Red Hat would like to thank Zuozhi Fzz (Alibaba Inc.) for reporting this issue.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 6.9 Release Notes and Red Hat Enterprise Linux 6.9 Technical Notes linked from the References section.

Topics%20covered

Topics Covered

security advisory security update Red Hat bug fix moderate severity qemu-kvm kernel virtualization

References

https://access.redhat.com/security/cve/CVE-2016-3712 https://access.redhat.com/security/updates/classification/#moderate

Package List

Red Hat Enterprise Linux Desktop (v. 6):
Source: qemu-kvm-0.12.1.2-2.503.el6.src.rpm
i386: qemu-guest-agent-0.12.1.2-2.503.el6.i686.rpm qemu-kvm-debuginfo-0.12.1.2-2.503.el6.i686.rpm
x86_64: qemu-guest-agent-0.12.1.2-2.503.el6.x86_64.rpm qemu-img-0.12.1.2-2.503.el6.x86_64.rpm qemu-kvm-0.12.1.2-2.503.el6.x86_64.rpm qemu-kvm-debuginfo-0.12.1.2-2.503.el6.x86_64.rpm qemu-kvm-tools-0.12.1.2-2.503.el6.x86_64.rpm
Red Hat Enterprise Linux HPC Node (v. 6):
Source: qemu-kvm-0.12.1.2-2.503.el6.src.rpm
x86_64: qemu-guest-agent-0.12.1.2-2.503.el6.x86_64.rpm qemu-img-0.12.1.2-2.503.el6.x86_64.rpm qemu-kvm-0.12.1.2-2.503.el6.x86_64.rpm qemu-kvm-debuginfo-0.12.1.2-2.503.el6.x86_64.rpm qemu-kvm-tools-0.12.1.2-2.503.el6.x86_64.rpm
Red Hat Enterprise Linux Server (v. 6):
Source: qemu-kvm-0.12.1.2-2.503.el6.src.rpm
i386: qemu-guest-agent-0.12.1.2-2.503.el6.i686.rpm qemu-kvm-debuginfo-0.12.1.2-2.503.el6.i686.rpm
ppc64: qemu-guest-agent-0.12.1.2-2.503.el6.ppc64.rpm qemu-kvm-debuginfo-0.12.1.2-2.503.el6.ppc64.rpm
x86_64: qemu-guest-agent-0.12.1.2-2.503.el6.x86_64.rpm qemu-img-0.12.1.2-2.503.el6.x86_64.rpm qemu-kvm-0.12.1.2-2.503.el6.x86_64.rpm qemu-kvm-debuginfo-0.12.1.2-2.503.el6.x86_64.rpm qemu-kvm-tools-0.12.1.2-2.503.el6.x86_64.rpm
Red Hat Enterprise Linux Workstation (v. 6):
Source:

Read the Full Advisory


Severity
important
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2017:0621-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2017:0621.html
Issue date: 2017-03-21

Topic

An update for qemu-kvm is now available for Red Hat Enterprise Linux 6.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Topics%20covered

Topics Covered

security advisory security update Red Hat bug fix moderate severity qemu-kvm kernel virtualization

Relevant Releases Architectures

Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64

Red Hat Enterprise Linux HPC Node (v. 6) - x86_64

Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, x86_64

Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64

Bugs Fixed

876993 - qemu-kvm: vm's become non-responsive during migrate disk load from 2 domains to a 3ed

1281713 - system_reset should clear pending request for error (IDE)

1292678 - Qemu should report error when cmdline set threads=2 in amd host

1294941 - QEMU crash on snapshot revert when using Cirrus

1297653 - "qemu-img convert" can't create a fully allocated image passed a "-S 0" option

1300626 - e1000/rtl8139: qemu mac address can not be changed via set the hardware address in guest

1318712 - CVE-2016-3712 qemu-kvm: Out-of-bounds read when creating weird vga screen surface

1320066 - Qemu should not report error when cmdline set threads=2 in Intel host

1333697 - qemu-kvm: /builddir/build/BUILD/qemu-kvm-0.12.1.2/hw/virtio-scsi.c:724: virtio_scsi_push_event: Assertion `event == 0' failed

1346981 - Regression from CVE-2016-3712: windows installer fails to start [rhel-6.9]

1356924 - rtl8139 driver hangs in widows guests

1361490 - system_reset should clear pending request for error (virtio-blk)

1392287 - Core dump occurs when query qtree after migration with "-vga cirrus"

1392520 - [RHEL6.9] KVM guest shuts itself down after 128th reboot

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.