Skip to content
OpenAdvisories
High ELSA-2017-1430 2 CVEs

Important: qemu-kvm security and bug fix update (Oracle Linux 7)

Published Jun 13, 2017 · Updated Jun 13, 2017

Summary

[1.5.3-126.el7_3.9]
- kvm-spice-fix-spice_chr_add_watch-pre-condition.patch [bz#1452332]
- Resolves: bz#1452332
(RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)

[1.5.3-126.el7_3.8]
- kvm-char-change-qemu_chr_fe_add_watch-to-return-unsigned.patch [bz#1452332]
- Resolves: bz#1452332
(RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)

[1.5.3-126.el7_3.7]
- kvm-char-serial-cosmetic-fixes.patch [bz#1452332]
- kvm-char-serial-Use-generic-Fifo8.patch [bz#1452332]
- kvm-char-serial-serial_ioport_write-Factor-out-common-co.patch [bz#1452332]
- kvm-char-serial-fix-copy-paste-error-fifo8_is_full-vs-em.patch [bz#1452332]
- kvm-char-serial-Fix-emptyness-check.patch [bz#1452332]
- kvm-char-serial-Fix-emptyness-handling.patch [bz#1452332]
- kvm-serial-poll-the-serial-console-with-G_IO_HUP.patch [bz#1452332]
- kvm-serial-change-retry-logic-to-avoid-concurrency.patch [bz#1452332]
- kvm-qemu-char-ignore-flow-control-if-a-PTY-s-slave-is-no.patch [bz#1452332]
- kvm-serial-check-if-backed-by-a-physical-serial-port-at-.patch [bz#1452332]
- kvm-serial-reset-thri_pending-on-IER-writes-with-THRI-0.patch [bz#1452332]
- kvm-serial-clean-up-THRE-TEMT-handling.patch [bz#1452332]
- kvm-serial-update-LSR-on-enabling-disabling-FIFOs.patch [bz#1452332]
- kvm-serial-only-resample-THR-interrupt-on-rising-edge-of.patch [bz#1452332]
- kvm-serial-make-tsr_retry-unsigned.patch [bz#1452332]
- kvm-serial-simplify-tsr_retry-reset.patch [bz#1452332]
- kvm-serial-separate-serial_xmit-and-serial_watch_cb.patch [bz#1452332]
- kvm-serial-remove-watch-on-reset.patch [bz#1452332]
- Resolves: bz#1452332
(RHEL 7.2 based VM (Virtual Machine) hung for several hours apparently waiting for lock held by main_loop)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 qemu-img 10:1.5.3-126.el7_3.9
Oracle Linux · 7 qemu-kvm 10:1.5.3-126.el7_3.9
Oracle Linux · 7 qemu-kvm-common 10:1.5.3-126.el7_3.9
Oracle Linux · 7 qemu-kvm-tools 10:1.5.3-126.el7_3.9

Vulnerabilities 2

  • Unscored —

    hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of se…

  • Unscored —

    Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest…