qemu-kvm-0.12.1.2-2.491.AXS4.1

エラータID: AXSA:2016-444:02

Release date: 
Thursday, May 19, 2016 - 15:19
Subject: 
qemu-kvm-0.12.1.2-2.491.AXS4.1
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

KVM (for Kernel-based Virtual Machine) is a full virtualization solution
for Linux on x86 hardware.

Using KVM, one can run multiple virtual machines running unmodified Linux
or Windows images. Each virtual machine has private virtualized hardware:
a network card, disk, graphics adapter, etc.

Security issues fixed with this release:

CVE-2016-3710
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

CVEs: 
CVE-2016-3710
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.
Additional Info: 

N/A

Download: 

SRPMS
  1. qemu-kvm-0.12.1.2-2.491.AXS4.1.src.rpm
    MD5: 20d61ba7d5960c7f4fb9a0b4c12e530d
    SHA-256: b179b48d20549859872a6532a5e37d5374943347d526ac2fa14cd68a845a7553
    Size: 10.80 MB

Asianux Server 4 for x86
  1. qemu-guest-agent-0.12.1.2-2.491.AXS4.1.i686.rpm
    MD5: 8b6936fc754cbe65bdbe22e9318dea53
    SHA-256: 686389bedf20c9f36bd401beb978bf172701f3beb9aa1df4d80663fe01b9d53b
    Size: 500.90 kB

Asianux Server 4 for x86_64
  1. qemu-guest-agent-0.12.1.2-2.491.AXS4.1.x86_64.rpm
    MD5: 4036852db8f95ad11e0862be4976eb53
    SHA-256: f68a2e97b75ae8c95593914afd23e4300f61367dcae888a60e8a11717cc0a500
    Size: 497.93 kB
  2. qemu-img-0.12.1.2-2.491.AXS4.1.x86_64.rpm
    MD5: fca44cd992b99491932470ba34e195a0
    SHA-256: 3298162c260bc10d511b76f303260a769e75c30aa686666b473db6c68d2257a5
    Size: 835.76 kB
  3. qemu-kvm-0.12.1.2-2.491.AXS4.1.x86_64.rpm
    MD5: 43f47e9d666369a3be70ac20d8fd1928
    SHA-256: e739a78b884061f7f4ccf3d220cd396d4529a7d810ee74cb802a2cc2d095aae9
    Size: 1.61 MB
  4. qemu-kvm-tools-0.12.1.2-2.491.AXS4.1.x86_64.rpm
    MD5: 6f4f89a6c96daed87d5eeb4b707f2b0d
    SHA-256: 6b95d1d43ff42bd8a2c961524a835c5e1e84b0b8788fdd3f6bcb025600273b2d
    Size: 423.59 kB