stable

qemu-2.7.1-2.fc25

FEDORA-2017-b953d4d3a4 created by crobinso 8 years ago for Fedora 25
  • CVE-2016-6836: vmxnet: Information leakage in vmxnet3_complete_packet (bz #1366370)
  • CVE-2016-7909: pcnet: Infinite loop in pcnet_rdra_addr (bz #1381196)
  • CVE-2016-7994: virtio-gpu: memory leak in resource_create_2d (bz #1382667)
  • CVE-2016-8577: 9pfs: host memory leakage in v9fs_read (bz #1383286)
  • CVE-2016-8578: 9pfs: potential NULL dereferencein 9pfs routines (bz #1383292)
  • CVE-2016-8668: OOB buffer access in rocker switch emulation (bz #1384898)
  • CVE-2016-8669: divide by zero error in serial_update_parameters (bz #1384911)
  • CVE-2016-8909: intel-hda: infinite loop in dma buffer stream (bz #1388053)
  • Infinite loop vulnerability in a9_gtimer_update (bz #1388300)
  • CVE-2016-9101: eepro100: memory leakage at device unplug (bz #1389539)
  • CVE-2016-9103: 9pfs: information leakage via xattr (bz #1389643)
  • CVE-2016-9102: 9pfs: memory leakage when creating extended attribute (bz #1389551)
  • CVE-2016-9104: 9pfs: integer overflow leading to OOB access (bz #1389687)
  • CVE-2016-9105: 9pfs: memory leakage in v9fs_link (bz #1389704)
  • CVE-2016-9106: 9pfs: memory leakage in v9fs_write (bz #1389713)
  • CVE-2016-9381: xen: incautious about shared ring processing (bz #1397385)
  • CVE-2016-9921: Divide by zero vulnerability in cirrus_do_copy (bz #1399054)
  • CVE-2016-9776: infinite loop while receiving data in mcf_fec_receive (bz #1400830)
  • CVE-2016-9845: information leakage in virgl_cmd_get_capset_info (bz #1402247)
  • CVE-2016-9846: virtio-gpu: memory leakage while updating cursor data (bz #1402258)
  • CVE-2016-9907: usbredir: memory leakage when destroying redirector (bz #1402266)
  • CVE-2016-9911: usb: ehci: memory leakage in ehci_init_transfer (bz #1402273)
  • CVE-2016-9913: 9pfs: memory leakage via proxy/handle callbacks (bz #1402277)
  • CVE-2016-10028: virtio-gpu-3d: OOB access while reading virgl capabilities (bz #1406368)
  • CVE-2016-9908: virtio-gpu: information leakage in virgl_cmd_get_capset (bz #1402263)
  • CVE-2016-9912: virtio-gpu: memory leakage when destroying gpu resource (bz #1402285)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-b953d4d3a4

This update has been submitted for testing by crobinso.

8 years ago
User Icon dhgutteridge commented & provided feedback 8 years ago
karma

No regressions noted.

This update has been pushed to testing.

8 years ago
User Icon cserpentis commented & provided feedback 8 years ago
karma

works for me

This update has been submitted for stable by bodhi.

8 years ago
User Icon besser82 commented & provided feedback 8 years ago
karma

Works great! LGTM! =)

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata
Type
security
Karma
3
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
8 years ago
in testing
8 years ago
in stable
8 years ago
BZ#1329538 CVE-2016-7909 Qemu: net: pcnet: infinite loop in pcnet_rdra_addr()
0
0
BZ#1334398 CVE-2016-9921 CVE-2016-9922 Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy
0
0
BZ#1366369 CVE-2016-6836 Qemu: net: vmxnet: Information leakage in vmxnet3_complete_packet
0
0
BZ#1366370 Qemu: net: vmxnet: Information leakage in vmxnet3_complete_packet [fedora-all]
0
0
BZ#1381196 CVE-2016-7909 qemu: qemu-kvm: Infinite loop vulnerability in pcnet_rdra_addr() [fedora-all]
0
0
BZ#1382666 CVE-2016-7994 Qemu: virtio-gpu: memory leak in virtio_gpu_resource_create_2d
0
0
BZ#1382667 CVE-2016-7994 Qemu: virtio-gpu: memory leak in virtio_gpu_resource_create_2d [fedora-all]
0
0
BZ#1383285 CVE-2016-8577 Qemu: 9pfs: host memory leakage in v9fs_read
0
0
BZ#1383286 CVE-2016-8577 Qemu: 9pfs: host memory leakage in v9fs_read [fedora-all]
0
0
BZ#1383291 CVE-2016-8578 Qemu: 9pfs: potential NULL dereferencein 9pfs routines
0
0
BZ#1383292 CVE-2016-8578 Qemu: 9pfs: potential NULL dereferencein 9pfs routines [fedora-all]
0
0
BZ#1384896 CVE-2016-8668 Qemu: net: OOB buffer access in rocker switch emulation
0
0
BZ#1384898 CVE-2016-8668 Qemu: net: OOB buffer access in rocker switch emulation [fedora-all]
0
0
BZ#1384909 CVE-2016-8669 Qemu: char: divide by zero error in serial_update_parameters
0
0
BZ#1384911 CVE-2016-8669 Qemu: char: divide by zero error in serial_update_parameters [fedora-all]
0
0
BZ#1388052 CVE-2016-8909 Qemu: audio: intel-hda: infinite loop in processing dma buffer stream
0
0
BZ#1388053 CVE-2016-8909 Qemu: audio: intel-hda: infinite loop in processing dma buffer stream [fedora-all]
0
0
BZ#1389538 CVE-2016-9101 Qemu: net: eepro100 memory leakage at device unplug
0
0
BZ#1389539 CVE-2016-9101 Qemu: net: eepro100 memory leakage at device unplug [fedora-all]
0
0
BZ#1389550 CVE-2016-9102 Qemu: 9pfs: memory leakage when creating extended attribute
0
0
BZ#1389551 CVE-2016-9102 Qemu: 9pfs: memory leakage when creating extended attribute [fedora-all]
0
0
BZ#1389642 CVE-2016-9103 Qemu: 9pfs: information leakage via xattr
0
0
BZ#1389643 CVE-2016-9103 Qemu: 9pfs: information leakage via xattr [fedora-all]
0
0
BZ#1389686 CVE-2016-9104 Qemu: 9pfs: integer overflow leading to OOB access
0
0
BZ#1389687 CVE-2016-9104 Qemu: 9pfs: integer overflow leading to OOB access [fedora-all]
0
0
BZ#1389702 CVE-2016-9105 Qemu: 9pfs: memory leakage in v9fs_link
0
0
BZ#1389704 CVE-2016-9105 Qemu: 9pfs: memory leakage in v9fs_link [fedora-all]
0
0
BZ#1389712 CVE-2016-9106 Qemu: 9pfs: memory leakage in v9fs_write
0
0
BZ#1389713 CVE-2016-9106 Qemu: 9pfs: memory leakage in v9fs_write [fedora-all]
0
0
BZ#1392938 CVE-2016-9381 xsa197 xen: qemu incautious about shared ring processing (XSA-197)
0
0
BZ#1397385 CVE-2016-9381 qemu: xsa197 xen: qemu incautious about shared ring processing (XSA-197) [fedora-all]
0
0
BZ#1399054 CVE-2016-9921 CVE-2016-9922 qemu: Divide by zero vulnerability in cirrus_do_copy [fedora-all]
0
0
BZ#1400829 CVE-2016-9776 Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive
0
0
BZ#1400830 CVE-2016-9776 Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive [fedora-all]
0
0
BZ#1402245 CVE-2016-9845 Qemu: display: virtio-gpu-3d: information leakage in virgl_cmd_get_capset_info
0
0
BZ#1402247 CVE-2016-9845 Qemu: display: virtio-gpu-3d: information leakage in virgl_cmd_get_capset_info [fedora-all]
0
0
BZ#1402255 CVE-2016-9846 Qemu: display: virtio-gpu: memory leakage while updating cursor data
0
0
BZ#1402258 CVE-2016-9846 Qemu: display: virtio-gpu: memory leakage while updating cursor data [fedora-all]
0
0
BZ#1402262 CVE-2016-9908 Qemu: display: virtio-gpu: information leakage in virgl_cmd_get_capset
0
0
BZ#1402263 CVE-2016-9908 Qemu: display: virtio-gpu: information leakage in virgl_cmd_get_capset [fedora-all]
0
0
BZ#1402265 CVE-2016-9907 Qemu: usb: redirector: memory leakage when destroying redirector
0
0
BZ#1402266 CVE-2016-9907 Qemu: usb: redirector: memory leakage when destroying redirector [fedora-all]
0
0
BZ#1402272 CVE-2016-9911 Qemu: usb: ehci: memory leakage in ehci_init_transfer
0
0
BZ#1402273 CVE-2016-9911 Qemu: usb: ehci: memory leakage in ehci_init_transfer [fedora-all]
0
0
BZ#1402276 CVE-2016-9913 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 Qemu: 9pfs: memory leakage via proxy/handle callbacks
0
0
BZ#1402277 CVE-2016-9913 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 Qemu: 9pfs: memory leakage via proxy/handle callbacks [fedora-all]
0
0
BZ#1402284 CVE-2016-9912 Qemu: display: virtio-gpu: memory leakage when destroying gpu resource
0
0
BZ#1402285 CVE-2016-9912 Qemu: display: virtio-gpu: memory leakage when destroying gpu resource [fedora-all]
0
0
BZ#1406367 CVE-2016-10028 Qemu: display: virtio-gpu-3d: OOB access while reading virgl capabilities
0
0
BZ#1406368 CVE-2016-10028 Qemu: display: virtio-gpu-3d: OOB access while reading virgl capabilities [fedora-all]
0
0

Automated Test Results