ALT Linux Team

Branch p8 update on 2016-09-10

2016-09-10

ALT-BU-2016-2982-1

Branch p8 update bulletin.

ALT-PU-2016-1959-1

Package NetworkManager updated to version 1.4.0-alt2 for branch p8 in task 169284.

Closed bugs

Bug #32467

соединение в беспроводной сетью не устанавливается (сбрасывается)

ALT-PU-2016-1960-1

Package firefox-gost updated to version 45.3.0-alt1 for branch p8 in task 169269.

Closed vulnerabilities

MFSA 2016-63

No data currently available.

MFSA 2016-64

No data currently available.

MFSA 2016-65

No data currently available.

MFSA 2016-67

No data currently available.

MFSA 2016-70

No data currently available.

MFSA 2016-72

No data currently available.

MFSA 2016-73

No data currently available.

MFSA 2016-76

No data currently available.

MFSA 2016-77

No data currently available.

MFSA 2016-78

No data currently available.

MFSA 2016-79

No data currently available.

MFSA 2016-80

No data currently available.

ALT-PU-2016-1961-1

Package qemu updated to version 2.6.1-alt1 for branch p8 in task 169228.

Closed vulnerabilities

Published: 2016-09-07
Modified: 2021-03-23

BDU:2016-02055

Уязвимость эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (4.9) Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
References:
Published: 2016-09-07
Modified: 2021-03-23

BDU:2016-02072

Уязвимость эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании

Severity: LOW (1.5) Vector: AV:L/AC:M/Au:S/C:N/I:N/A:P
References:
Published: 2016-05-20
Modified: 2025-04-12

CVE-2016-4439

The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.

Severity: MEDIUM (4.6) Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Severity: MEDIUM (6.7) Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2016-05-20
Modified: 2025-04-12

CVE-2016-4441

The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.

Severity: LOW (2.1) Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Severity: MEDIUM (6.0) Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
References:
Published: 2016-06-01
Modified: 2025-04-12

CVE-2016-4453

The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.

Severity: MEDIUM (4.9) Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Severity: MEDIUM (4.4) Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2016-06-01
Modified: 2025-04-12

CVE-2016-4454

The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.

Severity: LOW (3.6) Vector: AV:L/AC:L/Au:N/C:P/I:N/A:P
Severity: MEDIUM (6.0) Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
References:
Published: 2016-09-02
Modified: 2025-04-12

CVE-2016-4952

QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.

Severity: LOW (1.9) Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P
Severity: MEDIUM (6.0) Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
References:
Published: 2016-08-02
Modified: 2025-04-12

CVE-2016-5403

The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.

Severity: MEDIUM (4.9) Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top