qemu-kvm-1.5.3-105.el7.7

エラータID: AXSA:2016-618:03

Release date: 
Friday, August 12, 2016 - 03:49
Subject: 
qemu-kvm-1.5.3-105.el7.7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

qemu-kvm is an open source virtualizer that provides hardware emulation for
the KVM hypervisor. qemu-kvm acts as a virtual machine monitor together with
the KVM kernel modules, and emulates the hardware for a full system such as
a PC and its assocated peripherals.

As qemu-kvm requires no host kernel patches to run, it is safe and easy to use.

Security issues fixed with this release:

CVE-2016-5126
Heap-based buffer overflow in the iscsi_aio_ioctl function in
block/iscsi.c in QEMU allows local guest OS users to cause a denial of
service (QEMU process crash) or possibly execute arbitrary code via a
crafted iSCSI asynchronous I/O ioctl call.
CVE-2016-5403
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local
guest OS administrators to cause a denial of service (memory
consumption and QEMU process crash) by submitting requests without
waiting for completion.

Solution: 

Update packages.

CVEs: 
CVE-2016-5126
Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
CVE-2016-5403
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
Additional Info: 

N/A

Download: 

SRPMS
  1. qemu-kvm-1.5.3-105.el7.7.src.rpm
    MD5: a0094b373dc4c1367243575c18710817
    SHA-256: 578181445b78a267b7f9fe79cfbdaf479b8d958192abd19605a6a8c1a0114eb5
    Size: 14.34 MB

Asianux Server 7 for x86_64
  1. libcacard-1.5.3-105.el7.7.x86_64.rpm
    MD5: c8146559546d027eb04ab7f00ffd8ef0
    SHA-256: a53816ec837a33b23a5c0967ecb967f349fbd1d090480f6b71febf79580e021a
    Size: 228.42 kB
  2. qemu-img-1.5.3-105.el7.7.x86_64.rpm
    MD5: 22ec8462749b16d75d623962536cc7bc
    SHA-256: a4b63513d2d79a3ad3b186af0579b311d4b300929d495f12fac7f2a2c4152d59
    Size: 658.02 kB
  3. qemu-kvm-1.5.3-105.el7.7.x86_64.rpm
    MD5: b13a72a4e5710031116b0d17f52840e8
    SHA-256: 5c5601047b4ec880c8bfcb60d1c2a5aba4e5a9093d96bd969122247c32892980
    Size: 1.85 MB
  4. qemu-kvm-common-1.5.3-105.el7.7.x86_64.rpm
    MD5: 9153ac252030de368b71fd1fdcf13905
    SHA-256: 86ccc6f79ebff5a5b2c5c67de3700092fabc66c1cf29a5becaaccacfb92df553
    Size: 390.94 kB
  5. qemu-kvm-tools-1.5.3-105.el7.7.x86_64.rpm
    MD5: 4846fec79195a1411b1956a01b801599
    SHA-256: 620b472ac8e5668ec67c30a83c16d0da8c787e4adec848c929d91d4ac2af1922
    Size: 189.27 kB
  6. libcacard-1.5.3-105.el7.7.i686.rpm
    MD5: ec278519d7e6eef85763feef60cccc51
    SHA-256: 31f9f06175196ac323be40875099ee35de80c867610f35b8ed274fec2a6d7252
    Size: 228.09 kB