Summary
[1.5.3-105.el7_2.4]
- kvm-vga-Remove-some-should-be-done-in-BIOS-comments.patch [bz#1331412]
- kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1331412]
- kvm-vga-add-vbe_enabled-helper.patch [bz#1331412]
- kvm-vga-factor-out-vga-register-setup.patch [bz#1331412]
- kvm-vga-update-vga-register-setup-on-vbe-changes.patch [bz#1331412]
- kvm-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch [bz#1331412]
- Resolves: bz#1331412
(EMBARGOED CVE-2016-3710 qemu-kvm: qemu: incorrect banked access bounds checking in vga module [rhel-7.2.z])
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libcacard | 10:1.5.3-105.el7_2.4 |
| Oracle Linux · 7 | libcacard-devel | 10:1.5.3-105.el7_2.4 |
| Oracle Linux · 7 | libcacard-tools | 10:1.5.3-105.el7_2.4 |
| Oracle Linux · 7 | qemu-img | 10:1.5.3-105.el7_2.4 |
| Oracle Linux · 7 | qemu-kvm | 10:1.5.3-105.el7_2.4 |
| Oracle Linux · 7 | qemu-kvm-common | 10:1.5.3-105.el7_2.4 |
| Oracle Linux · 7 | qemu-kvm-tools | 10:1.5.3-105.el7_2.4 |
Vulnerabilities 1
-
Unscored —
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest O…