Summary
[1.5.3-175.el7_9.1]
- Fixing release number for z-stream
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | qemu-img | 10:1.5.3-175.el7_9.1 |
| Oracle Linux · 7 | qemu-kvm | 10:1.5.3-175.el7_9.1 |
| Oracle Linux · 7 | qemu-kvm-common | 10:1.5.3-175.el7_9.1 |
| Oracle Linux · 7 | qemu-kvm-tools | 10:1.5.3-175.el7_9.1 |
Vulnerabilities 2
-
High 7.5
libslirp: use after free vulnerability cause a denial of service.
A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
-
Unscored —CVE-2020-14364 Public exploit
An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue …