qemu-kvm-0.12.1.2-2.506.6.0.2.AXS4

エラータID: AXSA:2021-1436:02

Release date: 
Tuesday, February 9, 2021 - 17:00
Subject: 
qemu-kvm-0.12.1.2-2.506.6.0.2.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

QEMU: loader: OOB access while loading registered ROM may lead to code execution (CVE-2020-13765)
QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c (CVE-2020-16092)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

qemu-kvm FTBFS.

Additional info:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13765
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16092

Solution: 

Update packages.

Download: 

SRPMS
  1. qemu-kvm-0.12.1.2-2.506.6.0.2.AXS4.src.rpm
    MD5: 82fcb4fa77994bbb890c4e40ab299fc5
    SHA-256: a9701562a1c4abf1f7fea5b352ad99eac5b777ae4f1725c1c6b8613fd7d0c720
    Size: 10.92 MB

Asianux Server 4 for x86
  1. qemu-guest-agent-0.12.1.2-2.506.6.0.2.AXS4.i686.rpm
    MD5: 1f1dd2a2525c642136fe56d9439d1265
    SHA-256: 5afe58d7aaec746bc76d6713dbbf13e017c63753171a5ea87bee695dd28a98dd
    Size: 514.41 kB

Asianux Server 4 for x86_64
  1. qemu-guest-agent-0.12.1.2-2.506.6.0.2.AXS4.x86_64.rpm
    MD5: 4b85a2068672eb6377759e6e7ccf8997
    SHA-256: 6b1e2f8c0816d5b520b62815970471ce5d82acc7b51d2b3624265d4ed62be1aa
    Size: 511.46 kB
  2. qemu-img-0.12.1.2-2.506.6.0.2.AXS4.x86_64.rpm
    MD5: db4432c76ef5f79e745641f0aff83d62
    SHA-256: 0e5181a779d6fb39391258d3b6f01d4e811d8bb29561283f933bad6c196b4b86
    Size: 849.81 kB
  3. qemu-kvm-0.12.1.2-2.506.6.0.2.AXS4.x86_64.rpm
    MD5: 5feb9899d27c6c916f8448f1858155b4
    SHA-256: 5d1c19837cf33af375b93e7d2cb225201de769f974488fb04da35a2c9b959dc0
    Size: 1.63 MB
  4. qemu-kvm-tools-0.12.1.2-2.506.6.0.2.AXS4.x86_64.rpm
    MD5: 6d57607c2c0bbb20f5e5d83a38390b68
    SHA-256: 9bed72a55f18c419afbda602953601fdc69f0bd09d7074116da3dddd0b26abd5
    Size: 437.11 kB