qemu-kvm-1.5.3-126.el7

エラータID: AXSA:2016-1109:04

Release date: 
Tuesday, November 29, 2016 - 08:18
Subject: 
qemu-kvm-1.5.3-126.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

qemu-kvm is an open source virtualizer that provides hardware emulation for
the KVM hypervisor. qemu-kvm acts as a virtual machine monitor together with
the KVM kernel modules, and emulates the hardware for a full system such as
a PC and its assocated peripherals.

As qemu-kvm requires no host kernel patches to run, it is safe and easy to use.

Security issues fixed with this release:

CVE-2016-1981
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-3712
Integer overflow in the VGA module in QEMU allows local guest OS users
to cause a denial of service (out-of-bounds read and QEMU process
crash) by editing VGA registers in VBE mode.

Additional Changes:

Solution: 

Update packages.

CVEs: 
CVE-2016-1981
QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.
CVE-2016-3712
Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.
Additional Info: 

N/A

Download: 

SRPMS
  1. qemu-kvm-1.5.3-126.el7.src.rpm
    MD5: 28df6de601672f831062c621e01aa4b2
    SHA-256: ef9a1d5efd085137860dccc30bb93d416d7d77621801e973092de74e23e9602e
    Size: 14.48 MB

Asianux Server 7 for x86_64
  1. qemu-img-1.5.3-126.el7.x86_64.rpm
    MD5: 32a40f745dc88ea1ffb54c83192a999c
    SHA-256: 0f13878a3b892ac651c0b20894db8d185e8c099bdb72d581500e0cf400dabe97
    Size: 667.96 kB
  2. qemu-kvm-1.5.3-126.el7.x86_64.rpm
    MD5: bd6be51bed7dba019a44c7b667b3213e
    SHA-256: 4e5af2883de949aec0b15baca9b9f6fdd2f29ba1983644a6a8bb5ef8e73bf743
    Size: 1.87 MB
  3. qemu-kvm-common-1.5.3-126.el7.x86_64.rpm
    MD5: f9f3583fa736ccb859ba542510b800d8
    SHA-256: 6293da55addc037ebb5f10225e800654df935e4b12197c8686546ca7e532e6d1
    Size: 401.96 kB
  4. qemu-kvm-tools-1.5.3-126.el7.x86_64.rpm
    MD5: faa8e245d734c78047a96ff226533908
    SHA-256: 9ae86c15f73bfdd0959bb24905614835a81e6ad51c6a9984539271ca6e9a637b
    Size: 199.95 kB