Summary
[1.5.3-105.el7_2.7]
- kvm-block-iscsi-avoid-potential-overflow-of-acb-task-cdb.patch [bz#1358996]
- Resolves: bz#1358996
(CVE-2016-5126 qemu-kvm: Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl [rhel-7.2.z])
[1.5.3-105.el7_2.6]
- kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359728]
- Resolves: bz#1359728
(EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-7.2.z])
[1.5.3-105.el7_2.5]
- kvm-vga-add-sr_vbe-register-set.patch [bz#1347527]
- Resolves: bz#1347527
(Regression from CVE-2016-3712: windows installer fails to start)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libcacard | 10:1.5.3-105.el7_2.7 |
| Oracle Linux · 7 | libcacard-devel | 10:1.5.3-105.el7_2.7 |
| Oracle Linux · 7 | libcacard-tools | 10:1.5.3-105.el7_2.7 |
| Oracle Linux · 7 | qemu-img | 10:1.5.3-105.el7_2.7 |
| Oracle Linux · 7 | qemu-kvm | 10:1.5.3-105.el7_2.7 |
| Oracle Linux · 7 | qemu-kvm-common | 10:1.5.3-105.el7_2.7 |
| Oracle Linux · 7 | qemu-kvm-tools | 10:1.5.3-105.el7_2.7 |
Vulnerabilities 2
-
Unscored —
Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to caus…
-
Unscored —
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of serv…