qemu-kvm-1.5.3-105.el7.3

エラータID: AXSA:2016-049:01

Release date: 
Friday, January 29, 2016 - 10:25
Subject: 
qemu-kvm-1.5.3-105.el7.3
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

qemu-kvm is an open source virtualizer that provides hardware emulation for
the KVM hypervisor. qemu-kvm acts as a virtual machine monitor together with
the KVM kernel modules, and emulates the hardware for a full system such as
a PC and its assocated peripherals.

As qemu-kvm requires no host kernel patches to run, it is safe and easy to use.

Security issues fixed with this release:

CVE-2016-1714
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Fixed bugs:

* Incorrect handling of the last sector of an image file could trigger an assertion failure in qemu-img. This update changes the handling of the last sector, and no assertion failure occurs.

Solution: 

Update packages.

CVEs: 
CVE-2016-1714
The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.
Additional Info: 

N/A

Download: 

SRPMS
  1. qemu-kvm-1.5.3-105.el7.3.src.rpm
    MD5: 887cb2144f70034763deaac3579c47f8
    SHA-256: 2a4baec5b2c332a6b6efd7617e10d5bf5f902e5d506ab296733936df825e3c67
    Size: 14.33 MB

Asianux Server 7 for x86_64
  1. libcacard-1.5.3-105.el7.3.x86_64.rpm
    MD5: 2533e3e5a13b3d03dbff0afd2c2e4bba
    SHA-256: 73279c2f3cced5cbb58d06ea9bc03f4e5e8ab23dd48f7b42062a4e86b7d6c467
    Size: 227.08 kB
  2. qemu-img-1.5.3-105.el7.3.x86_64.rpm
    MD5: 44c488b26b01dd4386dbb3a43ace3594
    SHA-256: 782d33b01e5b8adb41ea8f9c8d8def38c70f3df0288d3981bbb0216137ab5ebb
    Size: 656.22 kB
  3. qemu-kvm-1.5.3-105.el7.3.x86_64.rpm
    MD5: 7b7d91fbf6b4c73755109772e2c9e7f0
    SHA-256: ce5ad334a7b1a28863bdf7ca2462d9261f9cb3f4ba2c59afed2c58cc85a13375
    Size: 1.85 MB
  4. qemu-kvm-common-1.5.3-105.el7.3.x86_64.rpm
    MD5: 1a39223d1a41ef8b2b0b55e904e10844
    SHA-256: 561ff8db95784aa26a97514a561e7acea49baebb22ec8dfb8dd82700b136a8fe
    Size: 389.63 kB
  5. qemu-kvm-tools-1.5.3-105.el7.3.x86_64.rpm
    MD5: dc4fa6409281d58c98250b6bd8161768
    SHA-256: fcd8629ffb529b433304ae64d04cb0676904aca713c4f83fdeb2468db6ed46f6
    Size: 187.93 kB
  6. libcacard-1.5.3-105.el7.3.i686.rpm
    MD5: 6753cf0f99c7d69682b610a5efb15685
    SHA-256: bbd2a8d7b26932ab24a6ee3dd3101d2284006905483df0f3c0e14386fd7ffab3
    Size: 226.76 kB