Skip to content
OpenAdvisories
Unscored RHSA-2020:3906 2 CVEs

Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client qemu-img 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm-common 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm-debuginfo 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::client qemu-kvm-tools 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-img 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm-common 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm-debuginfo 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode qemu-kvm-tools 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-img 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-common 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-debuginfo 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::server qemu-kvm-tools 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-img 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm-common 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm-debuginfo 10:1.5.3-175.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation qemu-kvm-tools 10:1.5.3-175.el7

Vulnerabilities 2

  • Unscored —
    CVE-2018-15746

    qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishan…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2019-20382

    QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz …

    qemu qemu Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1615637
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1791679
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1802215
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1810390
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3906.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-15746
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-15746
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-15746
  • report
    https://access.redhat.com/security/cve/CVE-2019-20382
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-20382
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-20382
  • article
    https://www.openwall.com/lists/oss-security/2020/03/05/1