Oracle alert ELSA-2012-0050 (qemu-kvm)

From:
    	     
 
Errata Announcements for Oracle Linux <el-errata@oracle.com> 
To:
    	     
 
el-errata@oss.oracle.com 
Subject:
    	     
 
[El-errata] ELSA-2012-0050 Important: Oracle Linux 6 qemu-kvm
 security, bug fix, and enhancement update 
Date:
    	     
 
Mon, 23 Jan 2012 16:32:18 -0800
Message-ID:
    	     
 
<4F1DFC12.9070708@oracle.com>
Archive-link:
    	     
 
Article, Thread
              
Oracle Linux Security Advisory ELSA-2012-0050

https://rhn.redhat.com/errata/RHSA-2012-0050.html

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
qemu-img-0.12.1.2-2.209.el6_2.4.x86_64.rpm
qemu-kvm-0.12.1.2-2.209.el6_2.4.x86_64.rpm
qemu-kvm-tools-0.12.1.2-2.209.el6_2.4.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/qemu-kvm-0.12.1.2...


Description of changes:

[qemu-kvm-0.12.1.2-2.209.el6_2.4]
- kvm-e1000-prevent-buffer-overflow-when-processing-legacy.patch [bz#772081]
- Resolves: bz#772081
   (EMBARGOED CVE-2012-0029 qemu-kvm: e1000: process_tx_desc legacy mode 
packets heap overflow [rhel-6.2.z])

[qemu-kvm-0.12.1.2-2.209.el6_2.3]
- kvm-Revert-virtio-blk-refuse-SG_IO-requests-with-scsi-of.patch [for 
bz#767721]
- kvm-virtio-blk-refuse-SG_IO-requests-with-scsi-off-v2.patch [bz#767721]
- CVE: CVE-2011-4127
- Resolves: bz#767721
   (qemu-kvm: virtio-blk: refuse SG_IO requests with scsi=off 
(CVE-2011-4127 mitigation) [rhel-6.2.z])

[qemu-kvm-0.12.1.2-2.209.el6_2.2]
- kvm-virtio-blk-refuse-SG_IO-requests-with-scsi-off.patch [bz#752375]
- CVE: CVE-2011-4127
- Resolves: bz#767721
   (EMBARGOED qemu-kvm: virtio-blk: refuse SG_IO requests with scsi=off 
(CVE-2011-4127 mitigation) [rhel-6.3])
- Resolves: bz#767906
   (qemu-kvm should be built with full relro and PIE support)


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
http://oss.oracle.com/mailman/listinfo/el-errata