ELSA-2016-1585

ELSA-2016-1585 - qemu-kvm security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2016-08-09

Description

[0.12.1.2-2.491.el6_8.3]
- kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359724]
- Resolves: bz#1359724
(EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-6.8.z])

[0.12.1.2-2.491.el6_8.2]
- kvm-vga-add-sr_vbe-register-set.patch [bz#1347192]
- Resolves: bz#1347192
(Regression from CVE-2016-3712: windows installer fails to start)

[0.12.1.2-2.491.el6_8.1]
- kvm-Add-vga.h-unmodified-from-Linux.patch [bz#1331407]
- kvm-vga.h-remove-unused-stuff-and-reformat.patch [bz#1331407]
- kvm-vga-use-constants-from-vga.h.patch [bz#1331407]
- kvm-vga-Remove-some-should-be-done-in-BIOS-comments.patch [bz#1331407]
- kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1331407]
- kvm-vga-add-vbe_enabled-helper.patch [bz#1331407]
- kvm-vga-factor-out-vga-register-setup.patch [bz#1331407]
- kvm-vga-update-vga-register-setup-on-vbe-changes.patch [bz#1331407]
- kvm-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch [bz#1331407]
- Resolves: bz#1331407
(EMBARGOED CVE-2016-3710 qemu-kvm: qemu: incorrect banked access bounds checking in vga module [rhel-6.8.z])

Related CVEs

CVE-2016-5403

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	qemu-kvm-0.12.1.2-2.491.el6_8.3.src.rpm	047c820e092b2112b5beb7c72d6a958cf11bbeaeed2e8b9a312f56a7b009b1b0	ELSA-2020-4056	ol6_i386_latest_archive
	qemu-kvm-0.12.1.2-2.491.el6_8.3.src.rpm	047c820e092b2112b5beb7c72d6a958cf11bbeaeed2e8b9a312f56a7b009b1b0	ELSA-2020-4056	ol6_u8_i386_patch
	qemu-guest-agent-0.12.1.2-2.491.el6_8.3.i686.rpm	d75685b153f0c9fe2ee263d30c68c321ae00df539ae2a2edeaa000f6b0026a5e	ELSA-2020-4056	ol6_i386_latest_archive
	qemu-guest-agent-0.12.1.2-2.491.el6_8.3.i686.rpm	d75685b153f0c9fe2ee263d30c68c321ae00df539ae2a2edeaa000f6b0026a5e	ELSA-2020-4056	ol6_u8_i386_patch
Oracle Linux 6 (x86_64)	qemu-kvm-0.12.1.2-2.491.el6_8.3.src.rpm	047c820e092b2112b5beb7c72d6a958cf11bbeaeed2e8b9a312f56a7b009b1b0	ELSA-2020-4056	ol6_u8_x86_64_patch
	qemu-kvm-0.12.1.2-2.491.el6_8.3.src.rpm	047c820e092b2112b5beb7c72d6a958cf11bbeaeed2e8b9a312f56a7b009b1b0	ELSA-2020-4056	ol6_x86_64_latest_archive
	qemu-guest-agent-0.12.1.2-2.491.el6_8.3.x86_64.rpm	157f05bc23dc210ddadac5e47a1ce05fbf223a50827531ce332932b86097f720	ELSA-2020-4056	ol6_u8_x86_64_patch
	qemu-guest-agent-0.12.1.2-2.491.el6_8.3.x86_64.rpm	157f05bc23dc210ddadac5e47a1ce05fbf223a50827531ce332932b86097f720	ELSA-2020-4056	ol6_x86_64_latest_archive
	qemu-img-0.12.1.2-2.491.el6_8.3.x86_64.rpm	14ba2e4fb2e2fa9f32d1e751b895075a74cecdd10884cf27044cf117220c230a	ELSA-2020-4056	ol6_u8_x86_64_patch
	qemu-img-0.12.1.2-2.491.el6_8.3.x86_64.rpm	14ba2e4fb2e2fa9f32d1e751b895075a74cecdd10884cf27044cf117220c230a	ELSA-2020-4056	ol6_x86_64_latest_archive
	qemu-kvm-0.12.1.2-2.491.el6_8.3.x86_64.rpm	170d8f8bee3a867ae4556c947acd6e582fdc489808b926feb4c315a151dc1787	ELSA-2020-4056	ol6_u8_x86_64_patch
	qemu-kvm-0.12.1.2-2.491.el6_8.3.x86_64.rpm	170d8f8bee3a867ae4556c947acd6e582fdc489808b926feb4c315a151dc1787	ELSA-2020-4056	ol6_x86_64_latest_archive
	qemu-kvm-tools-0.12.1.2-2.491.el6_8.3.x86_64.rpm	016009bc9103ba10840f514bdb68b4cec5f32f51f2e5e924bedc413018035936	ELSA-2020-4056	ol6_u8_x86_64_patch
	qemu-kvm-tools-0.12.1.2-2.491.el6_8.3.x86_64.rpm	016009bc9103ba10840f514bdb68b4cec5f32f51f2e5e924bedc413018035936	ELSA-2020-4056	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team