ELSA-2017-0352

ELSA-2017-0352 - qemu-kvm security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2017-03-01

Description

[0.12.1.2-2.491.el6_8.7]
- kvm-cirrus-fix-patterncopy-checks.patch [bz#1420486 bz#1420488]
- kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420486 bz#1420488]
- kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420486 bz#1420488]
- Resolves: bz#1420486
(EMBARGOED CVE-2017-2620 qemu-kvm: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.8.z])
- Resolves: bz#1420488
(EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.8.z])

Related CVEs

CVE-2017-2620

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	qemu-kvm-0.12.1.2-2.491.el6_8.7.src.rpm	04c534d0f1158f951cabe9b34ac993c72c062d01c04765de22f82bee0741e92d	ELSA-2020-4056	ol6_i386_latest_archive
	qemu-kvm-0.12.1.2-2.491.el6_8.7.src.rpm	04c534d0f1158f951cabe9b34ac993c72c062d01c04765de22f82bee0741e92d	ELSA-2020-4056	ol6_u8_i386_patch
	qemu-guest-agent-0.12.1.2-2.491.el6_8.7.i686.rpm	5c02db21f8176eabc63329e46fdb342c8e119a619bfc32d7b1143cbd2ffb21c0	ELSA-2020-4056	ol6_i386_latest_archive
	qemu-guest-agent-0.12.1.2-2.491.el6_8.7.i686.rpm	5c02db21f8176eabc63329e46fdb342c8e119a619bfc32d7b1143cbd2ffb21c0	ELSA-2020-4056	ol6_u8_i386_patch
Oracle Linux 6 (x86_64)	qemu-kvm-0.12.1.2-2.491.el6_8.7.src.rpm	04c534d0f1158f951cabe9b34ac993c72c062d01c04765de22f82bee0741e92d	ELSA-2020-4056	ol6_u8_x86_64_patch
	qemu-kvm-0.12.1.2-2.491.el6_8.7.src.rpm	04c534d0f1158f951cabe9b34ac993c72c062d01c04765de22f82bee0741e92d	ELSA-2020-4056	ol6_x86_64_latest_archive
	qemu-guest-agent-0.12.1.2-2.491.el6_8.7.x86_64.rpm	d42b4120bf08a2f9e48ce71fe65e1d13ce4365bed3f583aa59a05f1c9d696f11	ELSA-2020-4056	ol6_u8_x86_64_patch
	qemu-guest-agent-0.12.1.2-2.491.el6_8.7.x86_64.rpm	d42b4120bf08a2f9e48ce71fe65e1d13ce4365bed3f583aa59a05f1c9d696f11	ELSA-2020-4056	ol6_x86_64_latest_archive
	qemu-img-0.12.1.2-2.491.el6_8.7.x86_64.rpm	b4c8f6c05cc25b262373c08cc6fa71471719e70b3eddc85d22357e319b87b9d0	ELSA-2020-4056	ol6_u8_x86_64_patch
	qemu-img-0.12.1.2-2.491.el6_8.7.x86_64.rpm	b4c8f6c05cc25b262373c08cc6fa71471719e70b3eddc85d22357e319b87b9d0	ELSA-2020-4056	ol6_x86_64_latest_archive
	qemu-kvm-0.12.1.2-2.491.el6_8.7.x86_64.rpm	6d6325a91cb7c5e0ef1a75ce6ef25d19d4d3abb51e11790385883441dca181d0	ELSA-2020-4056	ol6_u8_x86_64_patch
	qemu-kvm-0.12.1.2-2.491.el6_8.7.x86_64.rpm	6d6325a91cb7c5e0ef1a75ce6ef25d19d4d3abb51e11790385883441dca181d0	ELSA-2020-4056	ol6_x86_64_latest_archive
	qemu-kvm-tools-0.12.1.2-2.491.el6_8.7.x86_64.rpm	1ea3241f39ccbd86acd3aec24eeefb9b8424b15248712dd5b4f11ae325fceb21	ELSA-2020-4056	ol6_u8_x86_64_patch
	qemu-kvm-tools-0.12.1.2-2.491.el6_8.7.x86_64.rpm	1ea3241f39ccbd86acd3aec24eeefb9b8424b15248712dd5b4f11ae325fceb21	ELSA-2020-4056	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team