ELSA-2015-1507

ELSA-2015-1507 - qemu-kvm security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2015-07-27

Description

[1.5.3-86.el7_1.5]
- kvm-i8254-fix-out-of-bounds-memory-access-in-pit_ioport_.patch [bz#1243726]
- Resolves: bz#1243726
(CVE-2015-3214 qemu-kvm: qemu: i8254: out-of-bounds memory access in pit_ioport_read function [rhel-7.1.z])

[1.5.3-86.el7_1.4]
- kvm-ide-Check-array-bounds-before-writing-to-io_buffer-C.patch [bz#1243689]
- kvm-ide-atapi-Fix-START-STOP-UNIT-command-completion.patch [bz#1243689]
- kvm-ide-Clear-DRQ-after-handling-all-expected-accesses.patch [bz#1243689]
- Resolves: bz#1243689
(EMBARGOED CVE-2015-5154 qemu-kvm: qemu: ide: atapi: heap overflow during I/O buffer memory access [rhel-7.1.z])

[1.5.3-86.el7_1.3]
- kvm-atomics-add-explicit-compiler-fence-in-__atomic-memo.patch [bz#1233643]
- Resolves: bz#1233643
([abrt] qemu-kvm: bdrv_error_action(): qemu-kvm killed by SIGABRT)

Related CVEs

CVE-2015-5154

CVE-2015-3214

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	qemu-kvm-1.5.3-86.el7_1.5.src.rpm	2746952f5c8a12c41914c54cc87739a54792633bfe68cd50bf7f74b8126d424e	ELBA-2024-12732	ol7_x86_64_latest_archive
	qemu-kvm-1.5.3-86.el7_1.5.src.rpm	2746952f5c8a12c41914c54cc87739a54792633bfe68cd50bf7f74b8126d424e	ELBA-2024-12732	ol7_x86_64_optional_archive
	qemu-kvm-1.5.3-86.el7_1.5.src.rpm	2746952f5c8a12c41914c54cc87739a54792633bfe68cd50bf7f74b8126d424e	ELBA-2024-12732	ol7_x86_64_u1_patch
	libcacard-1.5.3-86.el7_1.5.i686.rpm	6fa8230be5e69ec26c1419267d3f9403a2e18452939f3dc2d6865260707f66c4	ELEA-2020-1159	ol7_x86_64_latest_archive
	libcacard-1.5.3-86.el7_1.5.i686.rpm	6fa8230be5e69ec26c1419267d3f9403a2e18452939f3dc2d6865260707f66c4	ELEA-2020-1159	ol7_x86_64_u1_patch
	libcacard-1.5.3-86.el7_1.5.x86_64.rpm	50fe54dae574b94d7b70a8072797174a631139e55fb424a40b1bffc269ad245a	ELEA-2020-1159	ol7_x86_64_latest_archive
	libcacard-1.5.3-86.el7_1.5.x86_64.rpm	50fe54dae574b94d7b70a8072797174a631139e55fb424a40b1bffc269ad245a	ELEA-2020-1159	ol7_x86_64_u1_patch
	libcacard-devel-1.5.3-86.el7_1.5.i686.rpm	5a2fbabe01000ade3c9695e1c4d18aefb59ba07cb26a32fa6cf3232b2b4e7265	ELEA-2020-1159	ol7_x86_64_optional_archive
	libcacard-devel-1.5.3-86.el7_1.5.x86_64.rpm	b6c5716f70aabdb3697dd410647ea4279687393947be1c4cdff3bc6e5e098087	ELEA-2020-1159	ol7_x86_64_optional_archive
	libcacard-tools-1.5.3-86.el7_1.5.x86_64.rpm	0d42ad306696784cc7dc8cac079ac96c6e9b63f903ad28337652ba7b4684f345	ELEA-2020-1159	ol7_x86_64_optional_archive
	qemu-img-1.5.3-86.el7_1.5.x86_64.rpm	f01d804dc9aaf9b9b5b0f0a520b589311d053d93553f33e566552b74007dea0e	ELBA-2024-12732	ol7_x86_64_latest_archive
	qemu-img-1.5.3-86.el7_1.5.x86_64.rpm	f01d804dc9aaf9b9b5b0f0a520b589311d053d93553f33e566552b74007dea0e	ELBA-2024-12732	ol7_x86_64_u1_patch
	qemu-kvm-1.5.3-86.el7_1.5.x86_64.rpm	6fc792ad521b7f9bb066f5e7ddaa6a2eae4b48f484337ad0642ce215676e7ee0	ELBA-2024-12732	ol7_x86_64_latest_archive
	qemu-kvm-1.5.3-86.el7_1.5.x86_64.rpm	6fc792ad521b7f9bb066f5e7ddaa6a2eae4b48f484337ad0642ce215676e7ee0	ELBA-2024-12732	ol7_x86_64_u1_patch
	qemu-kvm-common-1.5.3-86.el7_1.5.x86_64.rpm	63c02bc9c6d57b8e98bdb7c41df1e30045093f35127c6d887d823b7d7b1719ad	ELBA-2022-4639	ol7_x86_64_latest_archive
	qemu-kvm-common-1.5.3-86.el7_1.5.x86_64.rpm	63c02bc9c6d57b8e98bdb7c41df1e30045093f35127c6d887d823b7d7b1719ad	ELBA-2022-4639	ol7_x86_64_u1_patch
	qemu-kvm-tools-1.5.3-86.el7_1.5.x86_64.rpm	ce5d62187af48d8ba9c17c0a866a415c4aab29dae48c222ae382a2b7f9f7f623	ELBA-2022-4639	ol7_x86_64_latest_archive
	qemu-kvm-tools-1.5.3-86.el7_1.5.x86_64.rpm	ce5d62187af48d8ba9c17c0a866a415c4aab29dae48c222ae382a2b7f9f7f623	ELBA-2022-4639	ol7_x86_64_u1_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team