[El-errata] ELSA-2019-2607 Low: Oracle Linux 7 qemu-kvm security update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Wed Sep 4 22:18:42 PDT 2019
Oracle Linux Security Advisory ELSA-2019-2607
http://linux.oracle.com/errata/ELSA-2019-2607.html
The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:
x86_64:
qemu-img-1.5.3-167.el7_7.1.x86_64.rpm
qemu-kvm-1.5.3-167.el7_7.1.x86_64.rpm
qemu-kvm-common-1.5.3-167.el7_7.1.x86_64.rpm
qemu-kvm-tools-1.5.3-167.el7_7.1.x86_64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/qemu-kvm-1.5.3-167.el7_7.1.src.rpm
Description of changes:
[1.5.3-167.el7_7.1]
- kvm-qxl-check-release-info-object.patch [bz#1732337]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734748]
- Resolves: bz#1732337
(CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while
releasing spice resources [rhel-7] [rhel-7.7.z])
- Resolves: bz#1734748
(CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during
packet reassembly [rhel-7.7.z])
More information about the El-errata
mailing list