ELSA-2020-0775

ELSA-2020-0775 - qemu-kvm security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2020-03-10

Description

[0.12.1.2-2.506.el6_10.6]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734747]
- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749731]
- kvm-tcp_emu-Fix-oob-access.patch [bz#1791558]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791558]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791558]
- Resolves: bz#1734747
(CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-6.10.z])
- Resolves: bz#1749731
(CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-6])
- Resolves: bz#1791558
(CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-6.10.z])

Related CVEs

CVE-2020-7039

CVE-2019-14378

CVE-2019-15890

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	qemu-kvm-0.12.1.2-2.506.el6_10.6.src.rpm	e1f8398a1d3298bdcaac339f4156e2b29c676d2fc9f1a8795222c1e04b7c2bb3	ELSA-2020-4056	ol6_i386_latest
	qemu-kvm-0.12.1.2-2.506.el6_10.6.src.rpm	e1f8398a1d3298bdcaac339f4156e2b29c676d2fc9f1a8795222c1e04b7c2bb3	ELSA-2020-4056	ol6_u10_i386_patch
	qemu-guest-agent-0.12.1.2-2.506.el6_10.6.i686.rpm	f922e63e3081d58099b1056b289960318c22f6c097ab9bae278d29b7f8c8b39d	ELSA-2020-4056	ol6_i386_latest
	qemu-guest-agent-0.12.1.2-2.506.el6_10.6.i686.rpm	f922e63e3081d58099b1056b289960318c22f6c097ab9bae278d29b7f8c8b39d	ELSA-2020-4056	ol6_u10_i386_patch
Oracle Linux 6 (x86_64)	qemu-kvm-0.12.1.2-2.506.el6_10.6.src.rpm	e1f8398a1d3298bdcaac339f4156e2b29c676d2fc9f1a8795222c1e04b7c2bb3	ELSA-2020-4056	ol6_u10_x86_64_patch
	qemu-kvm-0.12.1.2-2.506.el6_10.6.src.rpm	e1f8398a1d3298bdcaac339f4156e2b29c676d2fc9f1a8795222c1e04b7c2bb3	ELSA-2020-4056	ol6_x86_64_latest
	qemu-guest-agent-0.12.1.2-2.506.el6_10.6.x86_64.rpm	7dd5c9d275f4ee2af3dc20879325b2fe63cd9ec22fd6d42a825e8e235b475064	ELSA-2020-4056	ol6_u10_x86_64_patch
	qemu-guest-agent-0.12.1.2-2.506.el6_10.6.x86_64.rpm	7dd5c9d275f4ee2af3dc20879325b2fe63cd9ec22fd6d42a825e8e235b475064	ELSA-2020-4056	ol6_x86_64_latest
	qemu-img-0.12.1.2-2.506.el6_10.6.x86_64.rpm	47cad606acc14ff3d85d5071e6dfc1237e4d1e9ac34410feadc4478cf769574a	ELSA-2020-4056	ol6_u10_x86_64_patch
	qemu-img-0.12.1.2-2.506.el6_10.6.x86_64.rpm	47cad606acc14ff3d85d5071e6dfc1237e4d1e9ac34410feadc4478cf769574a	ELSA-2020-4056	ol6_x86_64_latest
	qemu-kvm-0.12.1.2-2.506.el6_10.6.x86_64.rpm	a6b9a09aec41cd6f21f162933df675cb8462598549f53f870a044f51dfc13dcc	ELSA-2020-4056	ol6_u10_x86_64_patch
	qemu-kvm-0.12.1.2-2.506.el6_10.6.x86_64.rpm	a6b9a09aec41cd6f21f162933df675cb8462598549f53f870a044f51dfc13dcc	ELSA-2020-4056	ol6_x86_64_latest
	qemu-kvm-tools-0.12.1.2-2.506.el6_10.6.x86_64.rpm	6b3b870464e90af9c86e2e208d669a0601691ece465a7227e1950373d63d3bf7	ELSA-2020-4056	ol6_u10_x86_64_patch
	qemu-kvm-tools-0.12.1.2-2.506.el6_10.6.x86_64.rpm	6b3b870464e90af9c86e2e208d669a0601691ece465a7227e1950373d63d3bf7	ELSA-2020-4056	ol6_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team