RHSA-2016:0088High

Red Hat Security Advisory: qemu-kvm-rhev security update

Published
January 28, 2016
Last Modified
November 5, 2026

🔗 CVE IDs covered (2)

CVE-2016-1568 →CVE-2016-1714 →

📋 Description

CVE-2016-1568 — Qemu: ide: ahci use-after-free vulnerability in aio port commands CVE-2016-1714 — Qemu: nvram: OOB r/w access in processing firmware configurations

🎯 Affected products9

  • Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • libcacard-rhev-10:2.3.0-31.el7_2.7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • libcacard-tools-rhev-10:2.3.0-31.el7_2.7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • qemu-img-rhev-10:2.3.0-31.el7_2.7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • qemu-kvm-common-rhev-10:2.3.0-31.el7_2.7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • qemu-kvm-rhev-10:2.3.0-31.el7_2.7.src as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • qemu-kvm-rhev-10:2.3.0-31.el7_2.7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • qemu-kvm-rhev-debuginfo-10:2.3.0-31.el7_2.7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7
  • qemu-kvm-tools-rhev-10:2.3.0-31.el7_2.7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (5)