Summary
[1.5.3-175.el7_9.3]
- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
(qemu-kvm FTBFS on rhel7.9)
[1.5.3-175.el7_9.2]
- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
(CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
(CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | qemu-img | 10:1.5.3-175.el7_9.3 |
| Oracle Linux · 7 | qemu-kvm | 10:1.5.3-175.el7_9.3 |
| Oracle Linux · 7 | qemu-kvm-common | 10:1.5.3-175.el7_9.3 |
| Oracle Linux · 7 | qemu-kvm-tools | 10:1.5.3-175.el7_9.3 |
Vulnerabilities 2
-
Unscored —
rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which al…
-
Unscored —
In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e a…