ELSA-2019-2607 - qemu-kvm security update
| Type: | SECURITY |
| Severity: | LOW |
| Release Date: | 2019-09-04 |
Description
[1.5.3-167.el7_7.1]
- kvm-qxl-check-release-info-object.patch [bz#1732337]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734748]
- Resolves: bz#1732337
(CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7] [rhel-7.7.z])
- Resolves: bz#1734748
(CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.7.z])
Related CVEs
Updated Packages
| Release/Architecture | Filename | MD5sum | Superseded By Advisory |
|
| Oracle Linux 7 (x86_64) | qemu-kvm-1.5.3-167.el7_7.1.src.rpm | 3df4d10f5600e814f7950e304ad54686 | ELBA-2021-9161 |
| qemu-img-1.5.3-167.el7_7.1.x86_64.rpm | 023b4ddd13811f3b5a6e9d74afa56b82 | ELBA-2021-9161 |
| qemu-kvm-1.5.3-167.el7_7.1.x86_64.rpm | aac7ae18a83df5623d327cf85caf17a1 | ELBA-2021-9161 |
| qemu-kvm-common-1.5.3-167.el7_7.1.x86_64.rpm | 19e1b09e4a6605d5ee5b0005a5e27c95 | ELSA-2021-0347 |
| qemu-kvm-tools-1.5.3-167.el7_7.1.x86_64.rpm | 9061b6daf1e83e3c4e8e9005bee4167e | ELSA-2021-0347 |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team
