Skip to content
OpenAdvisories
High ELSA-2015-0349 4 CVEs

Important: qemu-kvm security, bug fix, and enhancement update (Oracle Linux 7)

Published Mar 11, 2015 · Updated Mar 11, 2015

Summary

[1.5.3-86.el7]
- kvm-vfio-pci-Fix-interrupt-disabling.patch [bz#1180942]
- kvm-cirrus-fix-blit-region-check.patch [bz#1169456]
- kvm-cirrus-don-t-overflow-CirrusVGAState-cirrus_bltbuf.patch [bz#1169456]
- Resolves: bz#1169456
(CVE-2014-8106 qemu-kvm: qemu: cirrus: insufficient blit region checks [rhel-7.1])
- Resolves: bz#1180942
(qemu core dumped when unhotplug gpu card assigned to guest)

[1.5.3-85.el7]
- kvm-block-delete-cow-block-driver.patch [bz#1175325]
- Resolves: bz#1175325
(Delete cow block driver)

[1.5.3-84.el7]
- kvm-qemu-iotests-Test-case-for-backing-file-deletion.patch [bz#1002493]
- kvm-qemu-iotests-Add-sample-image-and-test-for-VMDK-vers.patch [bz#1134237]
- kvm-vmdk-Check-VMFS-extent-line-field-number.patch [bz#1134237]
- kvm-qemu-iotests-Introduce-_unsupported_imgopts.patch [bz#1002493]
- kvm-qemu-iotests-Add-_unsupported_imgopts-for-vmdk-subfo.patch [bz#1002493]
- kvm-vmdk-Fix-big-flat-extent-IO.patch [bz#1134241]
- kvm-vmdk-Check-for-overhead-when-opening.patch [bz#1134251]
- kvm-block-vmdk-add-basic-.bdrv_check-support.patch [bz#1134251]
- kvm-qemu-iotest-Make-077-raw-only.patch [bz#1134237]
- kvm-qemu-iotests-Don-t-run-005-on-vmdk-split-formats.patch [bz#1002493]
- kvm-vmdk-extract-vmdk_read_desc.patch [bz#1134251]
- kvm-vmdk-push-vmdk_read_desc-up-to-caller.patch [bz#1134251]
- kvm-vmdk-do-not-try-opening-a-file-as-both-image-and-des.patch [bz#1134251]
- kvm-vmdk-correctly-propagate-errors.patch [bz#1134251]
- kvm-block-vmdk-do-not-report-file-offset-for-compressed-.patch [bz#1134251]
- kvm-vmdk-Fix-d-and-lld-to-PRI-in-format-strings.patch [bz#1134251]
- kvm-vmdk-Fix-x-to-PRIx32-in-format-strings-for-cid.patch [bz#1134251]
- kvm-qemu-img-Convert-by-cluster-size-if-target-is-compre.patch [bz#1134283]
- kvm-vmdk-Implement-.bdrv_write_compressed.patch [bz#1134283]
- kvm-vmdk-Implement-.bdrv_get_info.patch [bz#1134283]
- kvm-qemu-iotests-Test-converting-to-streamOptimized-from.patch [bz#1134283]
- kvm-vmdk-Fix-local_err-in-vmdk_create.patch [bz#1134283]
- kvm-fpu-softfloat-drop-INLINE-macro.patch [bz#1002493]
- kvm-block-New-bdrv_nb_sectors.patch [bz#1002493]
- kvm-vmdk-Optimize-cluster-allocation.patch [bz#1002493]
- kvm-vmdk-Handle-failure-for-potentially-large-allocation.patch [bz#1002493]
- kvm-vmdk-Use-bdrv_nb_sectors-where-sectors-not-bytes-are.patch [bz#1002493]
- kvm-vmdk-fix-vmdk_parse_extents-extent_file-leaks.patch [bz#1002493]
- kvm-vmdk-fix-buf-leak-in-vmdk_parse_extents.patch [bz#1002493]
- kvm-vmdk-Fix-integer-overflow-in-offset-calculation.patch [bz#1002493]
- kvm-migration-fix-parameter-validation-on-ram-load-CVE-2.patch [bz#1163078]
- Resolves: bz#1002493
(qemu-img convert rate about 100k/second from qcow2/raw to vmdk format on nfs system file)
- Resolves: bz#1134237
(Opening malformed VMDK description file should fail)
- Resolves: bz#1134241
(QEMU fails to correctly read/write on VMDK with big flat extent)
- Resolves: bz#1134251
(Opening an obviously truncated VMDK image should fail)
- Resolves: bz#1134283
(qemu-img convert from ISO to streamOptimized fails)
- Resolves: bz#1163078
(CVE-2014-7840 qemu-kvm: qemu: insufficient parameter validation during ram load [rhel-7.1])

[1.5.3-83.el7]
- kvm-xhci-add-sanity-checks-to-xhci_lookup_uport.patch [bz#1074219]
- kvm-Revert-Build-ceph-rbd-only-for-rhev.patch [bz#1140742]
- kvm-Revert-rbd-Only-look-for-qemu-specific-copy-of-librb.patch [bz#1140742]
- kvm-Revert-rbd-link-and-load-librbd-dynamically.patch [bz#1140742]
- kvm-spec-Enable-rbd-driver-add-dependency.patch [bz#1140742]
- Resolves: bz#1074219
(qemu core dump when install a RHEL.7 guest(xhci) with migration)
- Resolves: bz#1140742
(Enable native support for Ceph)

[1.5.3-82.el7]
- kvm-hw-pci-fixed-error-flow-in-pci_qdev_init.patch [bz#1046007]
- kvm-hw-pci-fixed-hotplug-crash-when-using-rombar-0-with-.patch [bz#1046007]
- Resolves: bz#1046007
(qemu-kvm aborted when hot plug PCI device to guest with romfile and rombar=0)

[1.5.3-81.el7]
- kvm-migration-static-variables-will-not-be-reset-at-seco.patch [bz#1071776]
- kvm-vfio-pci-Add-debug-config-options-to-disable-MSI-X-K.patch [bz#1098976]
- kvm-vfio-correct-debug-macro-typo.patch [bz#1098976]
- kvm-vfio-pci-Fix-MSI-X-debug-code.patch [bz#1098976]
- kvm-vfio-pci-Fix-MSI-X-masking-performance.patch [bz#1098976]
- kvm-vfio-Fix-MSI-X-vector-expansion.patch [bz#1098976]
- kvm-vfio-Don-t-cache-MSIMessage.patch [bz#1098976]
- Resolves: bz#1071776
(Migration 'expected downtime' does not refresh after reset to a new value)
- Resolves: bz#1098976
(2x RHEL 5.10 VM running on RHEL 7 KVM have low TCP_STREAM throughput)

[1.5.3-80.el7]
- kvm-dump-RHEL-specific-fix-for-CPUState-bug-introduced-b.patch [bz#1161563]
- kvm-dump-guest-memory-Check-for-the-correct-return-value.patch [bz#1157798]
- kvm-dump-const-qualify-the-buf-of-WriteCoreDumpFunction.patch [bz#1157798]
- kvm-dump-add-argument-to-write_elfxx_notes.patch [bz#1157798]
- kvm-dump-add-API-to-write-header-of-flatten-format.patch [bz#1157798]
- kvm-dump-add-API-to-write-vmcore.patch [bz#1157798]
- kvm-dump-add-API-to-write-elf-notes-to-buffer.patch [bz#1157798]
- kvm-dump-add-support-for-lzo-snappy.patch [bz#1157798]
- kvm-RPM-spec-build-qemu-kvm-with-lzo-and-snappy-enabled-.patch [bz#1157798]
- kvm-dump-add-members-to-DumpState-and-init-some-of-them.patch [bz#1157798]
- kvm-dump-add-API-to-write-dump-header.patch [bz#1157798]
- kvm-dump-add-API-to-write-dump_bitmap.patch [bz#1157798]
- kvm-dump-add-APIs-to-operate-DataCache.patch [bz#1157798]
- kvm-dump-add-API-to-write-dump-pages.patch [bz#1157798]
- kvm-dump-Drop-qmp_dump_guest_memory-stub-and-build-for-a.patch [bz#1157798]
- kvm-dump-make-kdump-compressed-format-available-for-dump.patch [bz#1157798]
- kvm-Define-the-architecture-for-compressed-dump-format.patch [bz#1157798]
- kvm-dump-add-query-dump-guest-memory-capability-command.patch [bz#1157798]
- kvm-dump-Drop-pointless-error_is_set-DumpState-member-er.patch [bz#1157798]
- kvm-dump-fill-in-the-flat-header-signature-more-pleasing.patch [

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 libcacard 10:1.5.3-86.el7
Oracle Linux · 7 libcacard-devel 10:1.5.3-86.el7
Oracle Linux · 7 libcacard-tools 10:1.5.3-86.el7
Oracle Linux · 7 qemu-img 10:1.5.3-86.el7
Oracle Linux · 7 qemu-kvm 10:1.5.3-86.el7
Oracle Linux · 7 qemu-kvm-common 10:1.5.3-86.el7
Oracle Linux · 7 qemu-kvm-tools 10:1.5.3-86.el7

Vulnerabilities 4

  • Unscored —

    The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer…

  • Unscored —

    The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a sm…

  • Unscored —

    The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers…

  • Unscored —

    Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest…