Synopsis
Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
Type/Severity
Security Advisory: Moderate
Topic
An update for the virt:rhel and virt-devel:rhel modules is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.
The following packages have been upgraded to a later upstream version: hivex (1.3.18), libguestfs (1.40.2), libguestfs-winsupport (8.2), libvirt (6.0.0), libvirt-dbus (1.3.0), libvirt-python (6.0.0), nbdkit (1.16.2), perl-Sys-Virt (6.0.0), qemu-kvm (4.2.0), seabios (1.13.0), SLOF (20191022). (BZ#1810193, BZ#1844296)
Security Fix(es):
- libvirt: leak of /dev/mapper/control into QEMU guests (CVE-2020-14339)
- QEMU: Slirp: use-after-free during packet reassembly (CVE-2019-15890)
- libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent (CVE-2019-20485)
- QEMU: slirp: use-after-free in ip_reass() function in ip_input.c (CVE-2020-1983)
- libvirt: Potential denial of service via active pool without target path (CVE-2020-10703)
- libvirt: leak of sensitive cookie information via dumpxml (CVE-2020-14301)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.
Solution
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
Affected Products
-
Red Hat Enterprise Linux for x86_64 8 x86_64
-
Red Hat Enterprise Linux for IBM z Systems 8 s390x
-
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
-
Red Hat Enterprise Linux for ARM 64 8 aarch64
-
Red Hat CodeReady Linux Builder for x86_64 8 x86_64
-
Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
-
Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
-
Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x
Fixes
- BZ - 1518042 - Black txt window keeps after deleting description for a guest
- BZ - 1664324 - Failed to attach scsi controller with option "--config --live" when index attribute isn't specified in XML
- BZ - 1715039 - Set proper build flags for libvirt-python due to changes in distutils
- BZ - 1717394 - RFE: add cgroups v2 BPF devices support
- BZ - 1727865 - Initialization of cyrus-sasl library is not thread safe causing libvirt client crashes
- BZ - 1749716 - CVE-2019-15890 QEMU: Slirp: use-after-free during packet reassembly
- BZ - 1756946 - [zKVM] Re-enable KVM_CAP_S390_AIS for new machine types
- BZ - 1759849 - virsh domcapabilities incorrectly includes usb on s390x
- BZ - 1763191 - Silent failure adding ps2 input device on s390x
- BZ - 1790189 - libvirt should not use usb bus on s390x by default for devices declared via <input> tags
- BZ - 1805998 - [RFE] Pull Libvirt 5.6 dnsmasq feature into RHEL 8
- BZ - 1807057 - qcow2_alloc_cluster_abort() frees preallocated zero clusters
- BZ - 1809740 - CVE-2019-20485 libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent
- BZ - 1810193 - Upgrade components in virt:rhel module:stream for RHEL-8.3 release
- BZ - 1811539 - The virt-diff command doesn't work on windows 2019 image
- BZ - 1816650 - CVE-2020-10703 libvirt: Potential denial of service via active pool without target path
- BZ - 1828681 - Unable to initialize gcrypt will prevent qemu related commands from running
- BZ - 1829825 - CVE-2020-1983 QEMU: slirp: use-after-free in ip_reass() function in ip_input.c
- BZ - 1844296 - Final backport of RHEL AV 8.2.1 fixes in to RHEL-8.3.0
- BZ - 1845459 - RHEL-8 Backport nodedev race condition fix
- BZ - 1848640 - CVE-2020-14301 libvirt: leak of sensitive cookie information via dumpxml
- BZ - 1849997 - virt-v2v contains broken rhev-apt
- BZ - 1854380 - Virt-v2v cannot convert guest from ESXI7.0 server without vddk
- BZ - 1857779 - QEMU command 'transaction': Bitmap already exists: libvirt-tmp-activewrite
- BZ - 1860069 - CVE-2020-14339 libvirt: leak of /dev/mapper/control into QEMU guests
- BZ - 1867847 - [ppc] virt module 7629: /usr/libexec/qemu-kvm: undefined symbol: fdt_check_full, version LIBFDT_1.2
CVEs
References
Vulmon