ELSA-2020-1403

ELSA-2020-1403 - qemu-kvm security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2020-04-09

Description

[0.12.1.2-2.506.el6_10.7]
- kvm-slirp-disable-tcp_emu.patch [bz#1791680]
- kvm-slirp-add-slirp_fmt-helpers.patch [bz#1798966]
- kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798966]
- Resolves: bz#1791680
(QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-6])
- Resolves: bz#1798966
(CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-6.10.z])

Related CVEs

CVE-2020-8608

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	qemu-kvm-0.12.1.2-2.506.el6_10.7.src.rpm	920dae69c41b7047ac66e1bfcafef7da0fef4408ba9f33c02f6513d89c453d6b	ELSA-2020-4056	ol6_i386_latest
	qemu-kvm-0.12.1.2-2.506.el6_10.7.src.rpm	920dae69c41b7047ac66e1bfcafef7da0fef4408ba9f33c02f6513d89c453d6b	ELSA-2020-4056	ol6_u10_i386_patch
	qemu-guest-agent-0.12.1.2-2.506.el6_10.7.i686.rpm	fb0943a78803506dea738cf0eae9edcaede15f5e3f8f935398c72b3348b36c81	ELSA-2020-4056	ol6_i386_latest
	qemu-guest-agent-0.12.1.2-2.506.el6_10.7.i686.rpm	fb0943a78803506dea738cf0eae9edcaede15f5e3f8f935398c72b3348b36c81	ELSA-2020-4056	ol6_u10_i386_patch
Oracle Linux 6 (x86_64)	qemu-kvm-0.12.1.2-2.506.el6_10.7.src.rpm	920dae69c41b7047ac66e1bfcafef7da0fef4408ba9f33c02f6513d89c453d6b	ELSA-2020-4056	ol6_u10_x86_64_patch
	qemu-kvm-0.12.1.2-2.506.el6_10.7.src.rpm	920dae69c41b7047ac66e1bfcafef7da0fef4408ba9f33c02f6513d89c453d6b	ELSA-2020-4056	ol6_x86_64_latest
	qemu-guest-agent-0.12.1.2-2.506.el6_10.7.x86_64.rpm	1461ef1e031ce9a26e5cfa62f1e73668637433aecd51cfd99e6234e2a13ffb45	ELSA-2020-4056	ol6_u10_x86_64_patch
	qemu-guest-agent-0.12.1.2-2.506.el6_10.7.x86_64.rpm	1461ef1e031ce9a26e5cfa62f1e73668637433aecd51cfd99e6234e2a13ffb45	ELSA-2020-4056	ol6_x86_64_latest
	qemu-img-0.12.1.2-2.506.el6_10.7.x86_64.rpm	17015527555bc23d554965d644b14999bbba5c5d9a464534e9b18ca1781659d7	ELSA-2020-4056	ol6_u10_x86_64_patch
	qemu-img-0.12.1.2-2.506.el6_10.7.x86_64.rpm	17015527555bc23d554965d644b14999bbba5c5d9a464534e9b18ca1781659d7	ELSA-2020-4056	ol6_x86_64_latest
	qemu-kvm-0.12.1.2-2.506.el6_10.7.x86_64.rpm	5ae899f413f947f2a36941f0770e364109890c8284ba6f8540028e6adb1d6168	ELSA-2020-4056	ol6_u10_x86_64_patch
	qemu-kvm-0.12.1.2-2.506.el6_10.7.x86_64.rpm	5ae899f413f947f2a36941f0770e364109890c8284ba6f8540028e6adb1d6168	ELSA-2020-4056	ol6_x86_64_latest
	qemu-kvm-tools-0.12.1.2-2.506.el6_10.7.x86_64.rpm	ca01ab4e56bae0b756e94c17b057c1ec0784450b430f573233d1569ec3843509	ELSA-2020-4056	ol6_u10_x86_64_patch
	qemu-kvm-tools-0.12.1.2-2.506.el6_10.7.x86_64.rpm	ca01ab4e56bae0b756e94c17b057c1ec0784450b430f573233d1569ec3843509	ELSA-2020-4056	ol6_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team