ELSA-2016-1606

ELSA-2016-1606 - qemu-kvm security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2016-08-11

Description

[1.5.3-105.el7_2.7]
- kvm-block-iscsi-avoid-potential-overflow-of-acb-task-cdb.patch [bz#1358996]
- Resolves: bz#1358996
(CVE-2016-5126 qemu-kvm: Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl [rhel-7.2.z])

[1.5.3-105.el7_2.6]
- kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359728]
- Resolves: bz#1359728
(EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-7.2.z])

[1.5.3-105.el7_2.5]
- kvm-vga-add-sr_vbe-register-set.patch [bz#1347527]
- Resolves: bz#1347527
(Regression from CVE-2016-3712: windows installer fails to start)

Related CVEs

CVE-2016-5403

CVE-2016-5126

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	qemu-kvm-1.5.3-105.el7_2.7.src.rpm	34960fae272703460051dc54e155853018174aa18333788c31824fa1d7e7176e	ELBA-2024-12732	ol7_x86_64_latest_archive
	qemu-kvm-1.5.3-105.el7_2.7.src.rpm	34960fae272703460051dc54e155853018174aa18333788c31824fa1d7e7176e	ELBA-2024-12732	ol7_x86_64_optional_archive
	qemu-kvm-1.5.3-105.el7_2.7.src.rpm	34960fae272703460051dc54e155853018174aa18333788c31824fa1d7e7176e	ELBA-2024-12732	ol7_x86_64_u2_patch
	libcacard-1.5.3-105.el7_2.7.i686.rpm	dd1557451c5aab21418f0dc7eaf2faaa823b152f4591cc77e4b5c63fb8e1cbc4	ELEA-2020-1159	ol7_x86_64_latest_archive
	libcacard-1.5.3-105.el7_2.7.i686.rpm	dd1557451c5aab21418f0dc7eaf2faaa823b152f4591cc77e4b5c63fb8e1cbc4	ELEA-2020-1159	ol7_x86_64_u2_patch
	libcacard-1.5.3-105.el7_2.7.x86_64.rpm	ba5bba129e03379b53fdc2bf82deb06c747ad3a4b4d40dfc94ee97fe9cd774f7	ELEA-2020-1159	ol7_x86_64_latest_archive
	libcacard-1.5.3-105.el7_2.7.x86_64.rpm	ba5bba129e03379b53fdc2bf82deb06c747ad3a4b4d40dfc94ee97fe9cd774f7	ELEA-2020-1159	ol7_x86_64_u2_patch
	libcacard-devel-1.5.3-105.el7_2.7.i686.rpm	a2d103e463bb91303ed9ed78cb3092f872b8d9d8a6a203c912380f3436e9bf38	ELEA-2020-1159	ol7_x86_64_optional_archive
	libcacard-devel-1.5.3-105.el7_2.7.x86_64.rpm	ad0100385d408f518099a8e0113dad1e783ab0db29f53fe2b7c83261e0fa3499	ELEA-2020-1159	ol7_x86_64_optional_archive
	libcacard-tools-1.5.3-105.el7_2.7.x86_64.rpm	251a9998e56fa5f4a8c4b4c4601b7989a440077355761c9fb65deca27393044b	ELEA-2020-1159	ol7_x86_64_optional_archive
	qemu-img-1.5.3-105.el7_2.7.x86_64.rpm	7c550095456ebbd3c5ed6cc1f2e91f7e137ab2a56e774f175d5152e3bca35c4c	ELBA-2024-12732	ol7_x86_64_latest_archive
	qemu-img-1.5.3-105.el7_2.7.x86_64.rpm	7c550095456ebbd3c5ed6cc1f2e91f7e137ab2a56e774f175d5152e3bca35c4c	ELBA-2024-12732	ol7_x86_64_u2_patch
	qemu-kvm-1.5.3-105.el7_2.7.x86_64.rpm	2e01edbb98afc8680b914a010ae632f8c1676167b414a4dd5d8d4aa4f376fe77	ELBA-2024-12732	ol7_x86_64_latest_archive
	qemu-kvm-1.5.3-105.el7_2.7.x86_64.rpm	2e01edbb98afc8680b914a010ae632f8c1676167b414a4dd5d8d4aa4f376fe77	ELBA-2024-12732	ol7_x86_64_u2_patch
	qemu-kvm-common-1.5.3-105.el7_2.7.x86_64.rpm	a5438134b1f5d94e76dbc8f9ea975363953dc5ec6d0d4becb898ce78435a5a25	ELBA-2022-4639	ol7_x86_64_latest_archive
	qemu-kvm-common-1.5.3-105.el7_2.7.x86_64.rpm	a5438134b1f5d94e76dbc8f9ea975363953dc5ec6d0d4becb898ce78435a5a25	ELBA-2022-4639	ol7_x86_64_u2_patch
	qemu-kvm-tools-1.5.3-105.el7_2.7.x86_64.rpm	34327890cb0240b5fe8529fb5a1ad5da840e53e82bb987f6358b55933be0640f	ELBA-2022-4639	ol7_x86_64_latest_archive
	qemu-kvm-tools-1.5.3-105.el7_2.7.x86_64.rpm	34327890cb0240b5fe8529fb5a1ad5da840e53e82bb987f6358b55933be0640f	ELBA-2022-4639	ol7_x86_64_u2_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team