FEDORA-2016-f13ea849c5 — security update for qemu

stable

qemu-2.6.0-3.fc24

FEDORA-2016-f13ea849c5 created by crobinso 8 years ago for Fedora 24

CVE-2016-4020: memory leak in kvmvapic.c (bz #1326904)
CVE-2016-4439: scsi: esb: OOB write #1 (bz #1337503)
CVE-2016-4441: scsi: esb: OOB write #2 (bz #1337506)
Fix regression installing windows 7 with qxl/vga (bz #1339267)
Fix crash with aarch64 gic-version=host and accel=tcg (bz #1339977)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-f13ea849c5

This update has been submitted for testing by crobinso.

8 years ago

This update has been pushed to testing.

8 years ago

This update has been pushed to testing.

8 years ago

besser82 commented & provided feedback 8 years ago

karma

Works great! LGTM! =)

cpatrick08 commented & provided feedback 8 years ago

karma

works great

This update has been submitted for stable by bodhi.

8 years ago

cserpentis commented & provided feedback 8 years ago

karma

works for me

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

qemu-2.6.0-3.fc24

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

BZ#1313686 CVE-2016-4020 Qemu: i386: leakage of stack memory to guest in kvmvapic.c

BZ#1326904 CVE-2016-4020 qemu: qemu-kvm: Leakage of stack memory to guest in kvmvapic.c [fedora-all]

BZ#1337502 CVE-2016-4439 Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write

BZ#1337503 CVE-2016-4439 Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write [fedora-all]

BZ#1337505 CVE-2016-4441 Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd

BZ#1337506 CVE-2016-4441 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in get_cmd [fedora-all]

qemu-2.6.0-3.fc24

Automated Test Results

None