ELSA-2017-3368

ELSA-2017-3368 - qemu-kvm security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2017-11-30

Description

[1.5.3-141.el7_4.4]
- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501120]
- Resolves: bz#1501120
(CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])

[1.5.3-141.el7_4.3]
- kvm-bswap.h-Remove-cpu_to_32wu.patch [bz#1501294]
- kvm-hw-use-ld_p-st_p-instead-of-ld_raw-st_raw.patch [bz#1501294]
- kvm-vga-Start-cutting-out-non-32bpp-conversion-support.patch [bz#1501294]
- kvm-vga-Remove-remainder-of-old-conversion-cruft.patch [bz#1501294]
- kvm-vga-Separate-LE-and-BE-conversion-functions.patch [bz#1501294]
- kvm-vga-Rename-vga_template.h-to-vga-helpers.h.patch [bz#1501294]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501294]
- kvm-vga-drop-line_offset-variable.patch [bz#1501294]
- kvm-vga-Add-mechanism-to-force-the-use-of-a-shadow-surfa.patch [bz#1501294]
- kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501294]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501294]
- Resolves: bz#1501294
(CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in mode4and5 write functions [rhel-7.4.z])

Related CVEs

CVE-2017-15289

CVE-2017-14167

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	qemu-kvm-1.5.3-141.el7_4.4.src.rpm	70cbbf2d10200980bc8b073a0fcba5ab4fcfb99cd13cf561cf02349e8915efcb	ELBA-2024-12732	ol7_x86_64_latest_archive
	qemu-kvm-1.5.3-141.el7_4.4.src.rpm	70cbbf2d10200980bc8b073a0fcba5ab4fcfb99cd13cf561cf02349e8915efcb	ELBA-2024-12732	ol7_x86_64_u4_patch
	qemu-img-1.5.3-141.el7_4.4.x86_64.rpm	6cfcf0360bc377c409c66d1a008acb8aa38e9c846da6de325d70db13ab3b7605	ELBA-2024-12732	ol7_x86_64_latest_archive
	qemu-img-1.5.3-141.el7_4.4.x86_64.rpm	6cfcf0360bc377c409c66d1a008acb8aa38e9c846da6de325d70db13ab3b7605	ELBA-2024-12732	ol7_x86_64_u4_patch
	qemu-kvm-1.5.3-141.el7_4.4.x86_64.rpm	69fd8e4dca756a91c2f99f735c8d87b06f5eab491f4ffd7f78ff80d489216ebd	ELBA-2024-12732	ol7_x86_64_latest_archive
	qemu-kvm-1.5.3-141.el7_4.4.x86_64.rpm	69fd8e4dca756a91c2f99f735c8d87b06f5eab491f4ffd7f78ff80d489216ebd	ELBA-2024-12732	ol7_x86_64_u4_patch
	qemu-kvm-common-1.5.3-141.el7_4.4.x86_64.rpm	0746a48458a42428eecf02999d2bad34c7f43f0f19984310dfe4f9ed568ed636	ELBA-2022-4639	ol7_x86_64_latest_archive
	qemu-kvm-common-1.5.3-141.el7_4.4.x86_64.rpm	0746a48458a42428eecf02999d2bad34c7f43f0f19984310dfe4f9ed568ed636	ELBA-2022-4639	ol7_x86_64_u4_patch
	qemu-kvm-tools-1.5.3-141.el7_4.4.x86_64.rpm	a20438668d579ebca304b0803eeded75af2a03d22233a79cac9f66001bcbe64b	ELBA-2022-4639	ol7_x86_64_latest_archive
	qemu-kvm-tools-1.5.3-141.el7_4.4.x86_64.rpm	a20438668d579ebca304b0803eeded75af2a03d22233a79cac9f66001bcbe64b	ELBA-2022-4639	ol7_x86_64_u4_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team