[El-errata] ELSA-2016-1585 Moderate: Oracle Linux 6 qemu-kvm security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2016-1585

http://linux.oracle.com/errata/ELSA-2016-1585.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

i386:
qemu-guest-agent-0.12.1.2-2.491.el6_8.3.i686.rpm

x86_64:
qemu-guest-agent-0.12.1.2-2.491.el6_8.3.x86_64.rpm
qemu-img-0.12.1.2-2.491.el6_8.3.x86_64.rpm
qemu-kvm-0.12.1.2-2.491.el6_8.3.x86_64.rpm
qemu-kvm-tools-0.12.1.2-2.491.el6_8.3.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/qemu-kvm-0.12.1.2-2.491.el6_8.3.src.rpm



Description of changes:

[0.12.1.2-2.491.el6_8.3]
- kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359724]
- Resolves: bz#1359724
   (EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory 
allocation on host via guest leading to DoS [rhel-6.8.z])

[0.12.1.2-2.491.el6_8.2]
- kvm-vga-add-sr_vbe-register-set.patch [bz#1347192]
- Resolves: bz#1347192
   (Regression from CVE-2016-3712: windows installer fails to start)

[0.12.1.2-2.491.el6_8.1]
- kvm-Add-vga.h-unmodified-from-Linux.patch [bz#1331407]
- kvm-vga.h-remove-unused-stuff-and-reformat.patch [bz#1331407]
- kvm-vga-use-constants-from-vga.h.patch [bz#1331407]
- kvm-vga-Remove-some-should-be-done-in-BIOS-comments.patch [bz#1331407]
- kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1331407]
- kvm-vga-add-vbe_enabled-helper.patch [bz#1331407]
- kvm-vga-factor-out-vga-register-setup.patch [bz#1331407]
- kvm-vga-update-vga-register-setup-on-vbe-changes.patch [bz#1331407]
- kvm-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch 
[bz#1331407]
- Resolves: bz#1331407
   (EMBARGOED CVE-2016-3710 qemu-kvm: qemu: incorrect banked access 
bounds checking in vga module [rhel-6.8.z])