Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Oracle Linux 6 ELSA-2016-0997 Important: QEMU Access Control Issues

oracle
Calendar Grey May 17, 2016
Scroller Oracle
Oracle Linux 6 has been updated with critical patches addressing vulnerabilities in the QEMU application. Discover further details in this announcement.
The following updated rpms for Oracle Linux 6 have been uploaded to the Unbreakable Linux Network:

Summary

[0.12.1.2-2.491.el6_8.1] - kvm-Add-vga.h-unmodified-from-Linux.patch [bz#1331407] - kvm-vga.h-remove-unused-stuff-and-reformat.patch [bz#1331407] - kvm-vga-use-constants-from-vga.h.patch [bz#1331407] - kvm-vga-Remove-some-should-be-done-in-BIOS-comments.patch [bz#1331407] - kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1331407] - kvm-vga-add-vbe_enabled-helper.patch [bz#1331407] - kvm-vga-factor-out-vga-register-setup.patch [bz#1331407] - kvm-vga-update-vga-register-setup-on-vbe-changes.patch [bz#1331407] - kvm-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch [bz#1331407] - Resolves: bz#1331407 (EMBARGOED CVE-2016-3710 qemu-kvm: qemu: incorrect banked access bounds checking in vga module [rhel-6.8.z]) [0.12.1.2-2.491.el6] - Revert "warning when CPU threads>1 for non-Intel CPUs" fix [0.12.1.2-2.490.el6] - kvm-qemu-ga-implement-win32-guest-set-user-password.patch [bz#1174181] - kvm-util-add-base64-decoding-function.patch [bz#1174181] - kvm-qga...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory software update access control QEMU Oracle Linux

SRPMs

https://oss.oracle.com:443/ol6/SRPMS-updates/qemu-kvm-0.12.1.2-2.491.el6_8.1.src.rpm

x86_64

qemu-guest-agent-0.12.1.2-2.491.el6_8.1.x86_64.rpm qemu-img-0.12.1.2-2.491.el6_8.1.x86_64.rpm qemu-kvm-0.12.1.2-2.491.el6_8.1.x86_64.rpm qemu-kvm-tools-0.12.1.2-2.491.el6_8.1.x86_64.rpm

aarch64

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory software update access control QEMU Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.