Bug 1712670 (CVE-2019-12155)
Summary: | CVE-2019-12155 QEMU: qxl: null pointer dereference while releasing spice resources | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Prasad Pandit <ppandit> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED ERRATA | QA Contact: | |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | unspecified | CC: | ailan, amit, areis, berrange, cfergeau, dbecker, drjones, dwmw2, imammedo, itamar, jen, jferlan, jforbes, jjoyce, jschluet, kbasil, knoel, lhh, lpeer, m.a.young, mburns, mkenneth, mrezanin, mst, pbonzini, rbalakri, ribarry, rjones, rkrcmar, robinlee.sysu, sclewis, slinaber, virt-maint, virt-maint, vkuznets, xen-maint |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2019-09-04 13:07:24 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 1712703, 1712704, 1712705, 1712708, 1712709, 1712710, 1712711, 1712712, 1712713, 1712717, 1712727, 1712728, 1732337, 1732338 | ||
Bug Blocks: | 1696613 |
Description
Prasad Pandit
2019-05-22 05:36:14 UTC
Acknowledgments: Name: Sergej Schumilo (Ruhr University Bochum), Cornelius Aschermann (Ruhr University Bochum), Simon Wrner (Ruhr University Bochum) Created qemu tracking bugs for this issue: Affects: fedora-all [bug 1712727] This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2019:2607 https://access.redhat.com/errata/RHSA-2019:2607 This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2019-12155 This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Via RHSA-2019:2892 https://access.redhat.com/errata/RHSA-2019:2892 This issue has been addressed in the following products: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 Red Hat Virtualization Engine 4.3 Via RHSA-2019:3179 https://access.redhat.com/errata/RHSA-2019:3179 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2019:3345 https://access.redhat.com/errata/RHSA-2019:3345 This issue has been addressed in the following products: Red Hat OpenStack Platform 14.0 (Rocky) Via RHSA-2019:3742 https://access.redhat.com/errata/RHSA-2019:3742 This issue has been addressed in the following products: Red Hat OpenStack Platform 13.0 (Queens) Via RHSA-2019:3787 https://access.redhat.com/errata/RHSA-2019:3787 This issue has been addressed in the following products: Red Hat OpenStack Platform 10.0 (Newton) Via RHSA-2019:4344 https://access.redhat.com/errata/RHSA-2019:4344 This issue has been addressed in the following products: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 Red Hat Virtualization Engine 4.3 Via RHSA-2020:1216 https://access.redhat.com/errata/RHSA-2020:1216 |