Red Hat Security AdvisoryRHSA-2015:1507
qemu-kvm security and bug fix update
Released 2015-07-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libcacard-10:1.5.3-86.el7_1.5, qemu-img-10:1.5.3-86.el7_1.5, qemu-kvm-10:1.5.3-86.el7_1.5 +2
- Red Hat Enterprise Linux Client Optional (v. 7) libcacard-devel-10:1.5.3-86.el7_1.5, libcacard-tools-10:1.5.3-86.el7_1.5
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcacard-10:1.5.3-86.el7_1.5, libcacard-devel-10:1.5.3-86.el7_1.5, libcacard-tools-10:1.5.3-86.el7_1.5 +4
- Red Hat Enterprise Linux Server (v. 7) libcacard-10:1.5.3-86.el7_1.5, qemu-img-10:1.5.3-86.el7_1.5, qemu-kvm-10:1.5.3-86.el7_1.5 +2
- Red Hat Enterprise Linux Server Optional (v. 7) libcacard-10:1.5.3-86.el7_1.5, libcacard-10:1.5.3-86.el7_1.5.ppc, libcacard-devel-10:1.5.3-86.el7_1.5 +2
- Red Hat Enterprise Linux Workstation (v. 7) libcacard-10:1.5.3-86.el7_1.5, qemu-img-10:1.5.3-86.el7_1.5, qemu-kvm-10:1.5.3-86.el7_1.5 +2
- Red Hat Enterprise Linux Workstation Optional (v. 7) libcacard-devel-10:1.5.3-86.el7_1.5, libcacard-tools-10:1.5.3-86.el7_1.5
Fixes 2 records
Priority LOW 34
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host O…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.01594 · Published 2015-08-31 · Partial fix CWE-119
Priority LOW 33
Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAP…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.0063 · Published 2015-08-12 · Partial fix CWE-119
