Oracle alert ELSA-2021-0347 (qemu-kvm)

From:
             
 
Errata Announcements for Oracle Linux <el-errata@oss.oracle.com>
To:
             
 
el-errata@oss.oracle.com
Subject:
             
 
[El-errata] ELSA-2021-0347 Moderate: Oracle Linux 7 qemu-kvm security and bug fix update
Date:
             
 
Wed, 03 Feb 2021 08:29:18 -0800
Message-ID:
             
 
<54fc2353-c4fa-089b-761d-e5896406e5b2@oracle.com>
Oracle Linux Security Advisory ELSA-2021-0347

http://linux.oracle.com/errata/ELSA-2021-0347.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
qemu-img-1.5.3-175.el7_9.3.x86_64.rpm
qemu-kvm-1.5.3-175.el7_9.3.x86_64.rpm
qemu-kvm-common-1.5.3-175.el7_9.3.x86_64.rpm
qemu-kvm-tools-1.5.3-175.el7_9.3.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/qemu-kvm-1.5.3-17...



Description of changes:

[1.5.3-175.el7_9.3]
- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
   (qemu-kvm FTBFS on rhel7.9)

[1.5.3-175.el7_9.2]
- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch 
[bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
   (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading 
registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
   (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in 
net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata