qemu-kvm-0.12.1.2-2.491.AXS4.7

エラータID: AXSA:2017-1309:02

Release date: 
Wednesday, March 1, 2017 - 17:09
Subject: 
qemu-kvm-0.12.1.2-2.491.AXS4.7
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

KVM (for Kernel-based Virtual Machine) is a full virtualization solution
for Linux on x86 hardware.

Using KVM, one can run multiple virtual machines running unmodified Linux
or Windows images. Each virtual machine has private virtualized hardware:
a network card, disk, graphics adapter, etc.

Security issues fixed with this release:

CVE-2017-2620
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update package.

CVEs: 
CVE-2017-2620
Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.
Additional Info: 

N/A

Download: 

SRPMS
  1. qemu-kvm-0.12.1.2-2.491.AXS4.7.src.rpm
    MD5: d43a559e234c51e789cce0d41414fe13
    SHA-256: 355e0f654553f3d439b9dee76cb5107a099eedfbfc27dad45c0cabc504f51e4c
    Size: 10.78 MB

Asianux Server 4 for x86
  1. qemu-guest-agent-0.12.1.2-2.491.AXS4.7.i686.rpm
    MD5: d3eaa49442f6ec08c936755764759da4
    SHA-256: 5e1ca6c6b01f4c1253cdb86bc64a3768cf431c667673218b145c70bcbfc50a37
    Size: 503.81 kB

Asianux Server 4 for x86_64
  1. qemu-guest-agent-0.12.1.2-2.491.AXS4.7.x86_64.rpm
    MD5: 59d3db33f43f784a861a14c234e6992f
    SHA-256: 53f977837ba7237671c959a268bd7b96deadfaa0449332522ba601f20693eba9
    Size: 500.84 kB
  2. qemu-img-0.12.1.2-2.491.AXS4.7.x86_64.rpm
    MD5: 527aa600f25853f4bb2cb413afeca025
    SHA-256: fcd97e92033a4dcbc236079e48efe1cda914840a075b99133c63768ec15f6f9f
    Size: 838.67 kB
  3. qemu-kvm-0.12.1.2-2.491.AXS4.7.x86_64.rpm
    MD5: de62ced371df101cdfde20f52294ab28
    SHA-256: eb87b9d607331d5e5e5eedd6cee73a63e07ae3c60dd8fad4463a1dd58393fe8c
    Size: 1.61 MB
  4. qemu-kvm-tools-0.12.1.2-2.491.AXS4.7.x86_64.rpm
    MD5: 1f7342eec5ee4b7cbac6b932f0aedbd3
    SHA-256: e7b642e5b65d39a4814df7ee4103cf8098114c0d15332f152d6f0c38d826669e
    Size: 426.50 kB