Skip to content
OpenAdvisories
Medium ELSA-2015-1943 1 CVE

Moderate: qemu-kvm security update (Oracle Linux 7)

Published Oct 27, 2015 · Updated Oct 27, 2015

Ecosystem: Oracle Linux

Summary

[1.5.3-86.el7_1.8]
- kvm-qtest-ide-test-disable-flush-test.patch [bz#1273098]
- Resolves: bz#1273098
(qemu-kvm build failure race condition in tests/ide-test)

[1.5.3-86.el7_1.7]
- kvm-CVE-2015-1779-incrementally-decode-websocket-frames.patch [bz#1205050]
- kvm-CVE-2015-1779-limit-size-of-HTTP-headers-from-websoc.patch [bz#1205050]
- Resolves: bz#1205050
(CVE-2015-1779 qemu-kvm: qemu: vnc: insufficient resource limiting in VNC websockets decoder [rhel-7.1.z])

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 libcacard 10:1.5.3-86.el7_1.8
Oracle Linux · 7 libcacard-devel 10:1.5.3-86.el7_1.8
Oracle Linux · 7 libcacard-tools 10:1.5.3-86.el7_1.8
Oracle Linux · 7 qemu-img 10:1.5.3-86.el7_1.8
Oracle Linux · 7 qemu-kvm 10:1.5.3-86.el7_1.8
Oracle Linux · 7 qemu-kvm-common 10:1.5.3-86.el7_1.8
Oracle Linux · 7 qemu-kvm-tools 10:1.5.3-86.el7_1.8

Vulnerabilities 1

  • Unscored —
    CVE-2015-1779

    The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumptio…

    qemu qemu Debian Ubuntu