qemu-kvm-0.12.1.2-2.479.AXS4.4
エラータID: AXSA:2016-047:01
Release date:
Friday, January 29, 2016 - 00:59
Subject:
qemu-kvm-0.12.1.2-2.479.AXS4.4
Affected Channels:
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity:
High
Description:
KVM (for Kernel-based Virtual Machine) is a full virtualization solution
for Linux on x86 hardware.
Using KVM, one can run multiple virtual machines running unmodified Linux
or Windows images. Each virtual machine has private virtualized hardware:
a network card, disk, graphics adapter, etc.
Security issues fixed with this release:
CVE-2016-1714
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
Solution:
Update packages.
CVEs:
CVE-2016-1714
The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.
The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.
Additional Info:
N/A
Download:
SRPMS
- qemu-kvm-0.12.1.2-2.479.AXS4.4.src.rpm
MD5: d5a84329da634614fadad488e1ddeb40
SHA-256: 54e8a5b4c04671d83257aecbd8bf8c9f5129c8587870ccd247e5263e78bb26ee
Size: 10.74 MB
Asianux Server 4 for x86
- qemu-guest-agent-0.12.1.2-2.479.AXS4.4.i686.rpm
MD5: 14451c378b95055aef4895e9f32e1cb3
SHA-256: 30396bfdd1386addfe3e55dae8fb624d0259a6c0f9ca0de7a8024ac528d7d5f5
Size: 494.54 kB
Asianux Server 4 for x86_64
- qemu-guest-agent-0.12.1.2-2.479.AXS4.4.x86_64.rpm
MD5: fa2d457d45ffc75a765b5d1a169ae238
SHA-256: 8e19853b6f18060018c2ee4d04c0e022ba7f591423ef06849b276b84c3a94b42
Size: 491.60 kB - qemu-img-0.12.1.2-2.479.AXS4.4.x86_64.rpm
MD5: 33a5092a423a39a8677b6c60d8747aad
SHA-256: 5ff5ff14176d6fb088f14038f3fe2f98ae40dd090ced33ca00b03b90b04ca6c6
Size: 830.30 kB - qemu-kvm-0.12.1.2-2.479.AXS4.4.x86_64.rpm
MD5: 1e14fc7445aa29b2549e8b09f40a0658
SHA-256: 9d73dcffe255ebcd4d271f4c5ef1252ee9d3d82c861acc4b78fda8be56308733
Size: 1.60 MB - qemu-kvm-tools-0.12.1.2-2.479.AXS4.4.x86_64.rpm
MD5: b4cc71ab4cddf872f23669cd191e0369
SHA-256: 5bf857e7b4de015855d84b8f5cc62f37e2955f66fd8c4b8d3c5a25f50ec01b42
Size: 418.39 kB