FEDORA-2016-a54261a145 — security update for xen

obsolete

xen-4.5.3-4.fc22

FEDORA-2016-a54261a145 created by myoung 8 years ago for Fedora 22

create link to /usr/bin/qemu-system-i386 from /usr/lib/xen/bin for back compatibility and for virt-manager, cleaner fix for XSA-179 on qemu-xen-traditional

qemu-kvm: Integer overflow in SDL when creating too wide screen QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks [XSA-179, CVE-2016-3710, CVE-2016-3712]

This update has been submitted for testing by myoung.

8 years ago

This update has obsoleted xen-4.5.3-3.fc22, and has inherited its bugs and notes.

8 years ago

This update has been pushed to testing.

8 years ago

filiperosset commented & provided feedback 8 years ago

karma

no regressions noted

This update has been obsoleted by xen-4.5.3-5.fc22.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

xen-4.5.3-4.fc22

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

BZ#1299745 /usr/lib/xen/bin/qemu-system-i386 missing

BZ#1318712 CVE-2016-3712 qemu-kvm: Out-of-bounds read when creating weird vga screen surface

BZ#1318727 qemu-kvm: Integer overflow in SDL when creating too wide screen

BZ#1330513 xen: qemu-kvm: Integer overflow in SDL when creating too wide screen [fedora-all]

BZ#1331401 CVE-2016-3710 qemu: incorrect banked access bounds checking in vga module

BZ#1334343 CVE-2016-3712 xen: qemu-kvm: Out-of-bounds read when creating weird vga screen surface [fedora-all]

BZ#1334346 CVE-2016-3710 xen: qemu: incorrect banked access bounds checking in vga module [fedora-all]

BZ#1334554 Provide back compat /usr/lib/xen/bin/qemu-system-i386

xen-4.5.3-4.fc22

Automated Test Results

None