ELSA-2014-0743

ELSA-2014-0743 - qemu-kvm security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2014-06-10

Description

[0.12.1.2-2.415.el6_5.10]
- kvm-virtio-out-of-bounds-buffer-write-on-invalid-state-l.patch [bz#1095692]
- kvm-usb-sanity-check-setup_index-setup_len-in-post_load.patch [bz#1095743]
- kvm-usb-sanity-check-setup_index-setup_len-in-post_load-2.patch [bz#1095743]
- kvm-virtio-scsi-fix-buffer-overrun-on-invalid-state-load.patch [bz#1095739]
- kvm-virtio-avoid-buffer-overrun-on-incoming-migration.patch [bz#1095735]
- kvm-virtio-validate-num_sg-when-mapping.patch [bz#1095763 bz#1096124]
- kvm-virtio-allow-mapping-up-to-max-queue-size.patch [bz#1095763 bz#1096124]
- kvm-enable-PCI-multiple-segments-for-pass-through-device.patch [bz#1099941]
- kvm-virtio-net-fix-buffer-overflow-on-invalid-state-load.patch [bz#1095675]
- kvm-virtio-validate-config_len-on-load.patch [bz#1095779]
- kvm-usb-fix-up-post-load-checks.patch [bz#1096825]
- kvm-CPU-hotplug-use-apic_id_for_cpu-round-2-RHEL-6-only.patch [bz#1100575]
- Resolves: bz#1095675
()
- Resolves: bz#1095692
()
- Resolves: bz#1095735
()
- Resolves: bz#1095739
()
- Resolves: bz#1095743
()
- Resolves: bz#1095763
()
- Resolves: bz#1095779
()
- Resolves: bz#1096124
()
- Resolves: bz#1096825
()
- Resolves: bz#1099941
()
- Resolves: bz#1100575
(Some vCPU topologies not accepted by libvirt)

[0.12.1.2-2.415.el6_5.9]
- kvm-ide-Correct-improper-smart-self-test-counter-reset-i.patch [bz#1087978]
- Resolves: bz#1087978
(CVE-2014-2894 qemu-kvm: QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART [rhel-6.5.z])

Related CVEs

CVE-2013-4148

CVE-2014-3461

CVE-2013-4535

CVE-2014-0182

CVE-2013-4542

CVE-2014-2894

CVE-2013-4536

CVE-2013-4151

CVE-2013-4541

CVE-2013-6399

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	qemu-kvm-0.12.1.2-2.415.el6_5.10.src.rpm	e8f3f7059a15fa040b933069ad5e742f16b3f61bc9372cbcd2e9d62ae46c637c	ELSA-2020-4056	ol6_i386_latest_archive
	qemu-kvm-0.12.1.2-2.415.el6_5.10.src.rpm	e8f3f7059a15fa040b933069ad5e742f16b3f61bc9372cbcd2e9d62ae46c637c	ELSA-2020-4056	ol6_u5_i386_patch
	qemu-guest-agent-0.12.1.2-2.415.el6_5.10.i686.rpm	6c243df7f94995f3555f8a446397faa38cf21dc76e0dace47a04309f39e7f54f	ELSA-2020-4056	ol6_i386_latest_archive
	qemu-guest-agent-0.12.1.2-2.415.el6_5.10.i686.rpm	6c243df7f94995f3555f8a446397faa38cf21dc76e0dace47a04309f39e7f54f	ELSA-2020-4056	ol6_u5_i386_patch
Oracle Linux 6 (x86_64)	qemu-kvm-0.12.1.2-2.415.el6_5.10.src.rpm	e8f3f7059a15fa040b933069ad5e742f16b3f61bc9372cbcd2e9d62ae46c637c	ELSA-2020-4056	ol6_u5_x86_64_patch
	qemu-kvm-0.12.1.2-2.415.el6_5.10.src.rpm	e8f3f7059a15fa040b933069ad5e742f16b3f61bc9372cbcd2e9d62ae46c637c	ELSA-2020-4056	ol6_x86_64_latest_archive
	qemu-guest-agent-0.12.1.2-2.415.el6_5.10.x86_64.rpm	c7513e0b0b47969b3e29b24620406663e53fcc756a1ad31c9669a55b9e5af3bb	ELSA-2020-4056	ol6_u5_x86_64_patch
	qemu-guest-agent-0.12.1.2-2.415.el6_5.10.x86_64.rpm	c7513e0b0b47969b3e29b24620406663e53fcc756a1ad31c9669a55b9e5af3bb	ELSA-2020-4056	ol6_x86_64_latest_archive
	qemu-img-0.12.1.2-2.415.el6_5.10.x86_64.rpm	0065c8877781f25164b1076844640ffcf407f295ddc609039356a01ee6b29bfe	ELSA-2020-4056	ol6_u5_x86_64_patch
	qemu-img-0.12.1.2-2.415.el6_5.10.x86_64.rpm	0065c8877781f25164b1076844640ffcf407f295ddc609039356a01ee6b29bfe	ELSA-2020-4056	ol6_x86_64_latest_archive
	qemu-kvm-0.12.1.2-2.415.el6_5.10.x86_64.rpm	7b1a51c81e7bd692fab4088eb3e9a61f0b3e16a76bb708ba71efdba3dcbc0639	ELSA-2020-4056	ol6_u5_x86_64_patch
	qemu-kvm-0.12.1.2-2.415.el6_5.10.x86_64.rpm	7b1a51c81e7bd692fab4088eb3e9a61f0b3e16a76bb708ba71efdba3dcbc0639	ELSA-2020-4056	ol6_x86_64_latest_archive
	qemu-kvm-tools-0.12.1.2-2.415.el6_5.10.x86_64.rpm	ceef9d4d4c0b81fee0b8561ff5e75a0ee00e6be61670832385120be459a2fec7	ELSA-2020-4056	ol6_u5_x86_64_patch
	qemu-kvm-tools-0.12.1.2-2.415.el6_5.10.x86_64.rpm	ceef9d4d4c0b81fee0b8561ff5e75a0ee00e6be61670832385120be459a2fec7	ELSA-2020-4056	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team