Red Hat Security AdvisoryRHSA-2014:0704
qemu-kvm security and bug fix update
Released 2014-06-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libcacard-10:1.5.3-60.el7_0.2, qemu-guest-agent-10:1.5.3-60.el7_0.2, qemu-img-10:1.5.3-60.el7_0.2 +3
- Red Hat Enterprise Linux Client Optional (v. 7) libcacard-devel-10:1.5.3-60.el7_0.2, libcacard-tools-10:1.5.3-60.el7_0.2
- Red Hat Enterprise Linux ComputeNode (v. 7) qemu-guest-agent-10:1.5.3-60.el7_0.2, qemu-kvm-10:1.5.3-60.el7_0.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcacard-10:1.5.3-60.el7_0.2, libcacard-devel-10:1.5.3-60.el7_0.2, libcacard-tools-10:1.5.3-60.el7_0.2 +4
- Red Hat Enterprise Linux Server (v. 7) libcacard-10:1.5.3-60.el7_0.2, qemu-guest-agent-10:1.5.3-60.el7_0.2, qemu-img-10:1.5.3-60.el7_0.2 +3
- Red Hat Enterprise Linux Server Optional (v. 7) libcacard-devel-10:1.5.3-60.el7_0.2, libcacard-tools-10:1.5.3-60.el7_0.2
- Red Hat Enterprise Linux Workstation (v. 7) libcacard-10:1.5.3-60.el7_0.2, qemu-guest-agent-10:1.5.3-60.el7_0.2, qemu-img-10:1.5.3-60.el7_0.2 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) libcacard-devel-10:1.5.3-60.el7_0.2, libcacard-tools-10:1.5.3-60.el7_0.2
Fixes 1 record
Priority LOW 32
Off-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before 2.0 allows local users to have unspecified impact via a SMART EXECUTE OFFLINE command that triggers a buffer underflow and…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00383 · Published 2014-04-23 · Partial fix CWE-189
