ELSA-2018-1416

ELSA-2018-1416 - qemu-kvm security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2018-05-14

Description

[1.5.3-156.el7_5.1]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
(CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])

Related CVEs

CVE-2018-7858

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	qemu-kvm-1.5.3-156.el7_5.1.src.rpm	0393cd05fcd66361ad0dc853d54d0b1522a9c4de1987b8f4c0ccf6bb98300e79	ELBA-2024-12732	ol7_x86_64_latest
	qemu-kvm-1.5.3-156.el7_5.1.src.rpm	0393cd05fcd66361ad0dc853d54d0b1522a9c4de1987b8f4c0ccf6bb98300e79	ELBA-2024-12732	ol7_x86_64_u5_patch
	qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	e13e35b7b1161f5345bced5e9be99684d1b2ec429bbf3db0f97d71add4aa5dbb	ELBA-2024-12732	ol7_x86_64_latest
	qemu-img-1.5.3-156.el7_5.1.x86_64.rpm	e13e35b7b1161f5345bced5e9be99684d1b2ec429bbf3db0f97d71add4aa5dbb	ELBA-2024-12732	ol7_x86_64_u5_patch
	qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	56d9c777f8cb90fea96a11d98054506c63f23012c462cb1d6bae7145a6f546fa	ELBA-2024-12732	ol7_x86_64_latest
	qemu-kvm-1.5.3-156.el7_5.1.x86_64.rpm	56d9c777f8cb90fea96a11d98054506c63f23012c462cb1d6bae7145a6f546fa	ELBA-2024-12732	ol7_x86_64_u5_patch
	qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	0b949b7cc71d76927ba7d0092ac2181fa3af42bcdb81cada47c4c2fba147cb28	ELBA-2022-4639	ol7_x86_64_latest
	qemu-kvm-common-1.5.3-156.el7_5.1.x86_64.rpm	0b949b7cc71d76927ba7d0092ac2181fa3af42bcdb81cada47c4c2fba147cb28	ELBA-2022-4639	ol7_x86_64_u5_patch
	qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	890bc5949a5676ee76d1bd5e8a0be9497b4d6170d25753021ff8771b582f41cf	ELBA-2022-4639	ol7_x86_64_latest
	qemu-kvm-tools-1.5.3-156.el7_5.1.x86_64.rpm	890bc5949a5676ee76d1bd5e8a0be9497b4d6170d25753021ff8771b582f41cf	ELBA-2022-4639	ol7_x86_64_u5_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team