Red Hat Security Advisory

RHSA-2019:2607

qemu-kvm security update

Released 2019-09-04 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-167.el7_7.1, qemu-kvm-10:1.5.3-167.el7_7.1, qemu-kvm-common-10:1.5.3-167.el7_7.1 +1
Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-167.el7_7.1, qemu-kvm-10:1.5.3-167.el7_7.1, qemu-kvm-common-10:1.5.3-167.el7_7.1 +1
Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-167.el7_7.1, qemu-kvm-10:1.5.3-167.el7_7.1, qemu-kvm-common-10:1.5.3-167.el7_7.1 +1
Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-167.el7_7.1, qemu-kvm-10:1.5.3-167.el7_7.1, qemu-kvm-common-10:1.5.3-167.el7_7.1 +1

TI-2019-09074 CVE-2019-12155 · GHSA-96vp-7vcr-rp4h

MEDIUM 41

interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05546 Published 2019-05-24 Partial fix CWE-476