stable

xen-4.7.0-7.fc25

FEDORA-2016-7b6fbff620 created by myoung 7 years ago for Fedora 25

several qemu security fixes

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-7b6fbff620

This update has been submitted for testing by myoung.

7 years ago

This update has been pushed to testing.

7 years ago
User Icon kuosmanen commented & provided feedback 7 years ago
karma

no regression

User Icon adamwill commented & provided feedback 7 years ago

zoiks. that's a lot of CVEs. is there value in making this a freeze exception for F25, since freeze is in ~6 hours?

User Icon myoung commented & provided feedback 7 years ago

It looks worse than it is as a lot of the qemu fixes aren't reached in the Fedora build.

User Icon besser82 commented & provided feedback 7 years ago
karma

Works great! LGTM! =)

This update has been submitted for stable by bodhi.

7 years ago
User Icon cserpentis commented & provided feedback 7 years ago
karma

works for me

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata
Type
security
Karma
3
Signed
Content Type
RPM
Test Gating
Builds
1
xen-4.7.0-7.fc25
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
7 years ago
in testing
7 years ago
in stable
7 years ago
BZ#1327626 Qemu: timer: a9gtimer: Infinite loop unfolds when updating a9gtimer
0
0
BZ#1333425 CVE-2016-8576 Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch
0
0
BZ#1382323 CVE-2016-8576 xen: Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch [fedora-all]
0
0
BZ#1383287 CVE-2016-8577 xen: Qemu: 9pfs: host memory leakage in v9fs_read [fedora-all]
0
0
BZ#1383291 CVE-2016-8578 Qemu: 9pfs: potential NULL dereferencein 9pfs routines
0
0
BZ#1383293 CVE-2016-8578 xen: Qemu: 9pfs: potential NULL dereferencein 9pfs routines [fedora-all]
0
0
BZ#1384909 CVE-2016-8669 Qemu: char: divide by zero error in serial_update_parameters
0
0
BZ#1384910 CVE-2016-8669 xen: Qemu: char: divide by zero error in serial_update_parameters [fedora-all]
0
0
BZ#1388046 CVE-2016-8910 Qemu: net: rtl8139: infinite loop while transmit in C+ mode
0
0
BZ#1388048 CVE-2016-8910 xen: Qemu: net: rtl8139: infinite loop while transmit in C+ mode [fedora-all]
0
0
BZ#1388301 xen: qemu-kvm: Infinite loop vulnerability in a9_gtimer_update() [fedora-all]
0
0
BZ#1389550 CVE-2016-9102 Qemu: 9pfs: memory leakage when creating extended attribute
0
0
BZ#1389552 CVE-2016-9102 xen: Qemu: 9pfs: memory leakage when creating extended attribute [fedora-all]
0
0
BZ#1389642 CVE-2016-9103 Qemu: 9pfs: information leakage via xattr
0
0
BZ#1389644 CVE-2016-9103 xen: Qemu: 9pfs: information leakage via xattr [fedora-all]
0
0
BZ#1389686 CVE-2016-9104 Qemu: 9pfs: integer overflow leading to OOB access
0
0
BZ#1389689 CVE-2016-9104 xen: Qemu: 9pfs: integer overflow leading to OOB access [fedora-all]
0
0
BZ#1389702 CVE-2016-9105 Qemu: 9pfs: memory leakage in v9fs_link
0
0
BZ#1389705 CVE-2016-9105 xen: Qemu: 9pfs: memory leakage in v9fs_link [fedora-all]
0
0
BZ#1389712 CVE-2016-9106 Qemu: 9pfs: memory leakage in v9fs_write
0
0
BZ#1389714 CVE-2016-9106 xen: Qemu: 9pfs: memory leakage in v9fs_write [fedora-all]
0
0
xen-4.7.0-7.fc25

Automated Test Results

Copyright © 2007-2024 Red Hat, Inc. and others.

Running bodhi-server 8.1.1 on bodhi-web-161-qgrd5.

bodhi is Free Software. Please file issues if you have any problems. Read the documentation.

• Composes • Legal • Privacy policy •