Test ID:	1.3.6.1.4.1.25623.1.0.123274
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2014-1669)
Summary:	The remote host is missing an update for the 'qemu-kvm' package(s) announced via the ELSA-2014-1669 advisory.
Description:	Summary: The remote host is missing an update for the 'qemu-kvm' package(s) announced via the ELSA-2014-1669 advisory. Vulnerability Insight: [1.5.3-60.el7_0.10] - kvm-block-add-helper-function-to-determine-if-a-BDS-is-i.patch [bz#1122925] - kvm-block-extend-block-commit-to-accept-a-string-for-the.patch [bz#1122925] - kvm-block-add-backing-file-option-to-block-stream.patch [bz#1122925] - kvm-block-add-__com.redhat_change-backing-file-qmp-comma.patch [bz#1122925] - Resolves: bz#1122925 (Maintain relative path to backing file image during live merge (block-commit)) [1.5.3-60.el7_0.9] - kvm-scsi-disk-fix-bug-in-scsi_block_new_request-introduc.patch [bz#1141189] - Resolves: bz#1141189 (bug in scsi_block_new_request() function introduced by upstream commit 137745c5c60f083ec982fe9e861e8c16ebca1ba8) [1.5.3-60.el7_0.8] - kvm-vmstate_xhci_event-fix-unterminated-field-list.patch [bz#1145055] - kvm-vmstate_xhci_event-bug-compat-with-RHEL-7.0-RHEL-onl.patch [bz#1145055] - kvm-vbe-make-bochs-dispi-interface-return-the-correct-me.patch [bz#1139117] - kvm-vbe-rework-sanity-checks.patch [bz#1139117] - kvm-spice-display-add-display-channel-id-to-the-debug-me.patch [bz#1139117] - kvm-spice-make-sure-we-don-t-overflow-ssd-buf.patch [bz#1139117] - Resolves: bz#1139117 (CVE-2014-3615 qemu-kvm: Qemu: crash when guest sets high resolution [rhel-7.0.z]) - Resolves: bz#1145055 (vmstate_xhci_event: fix unterminated field list [rhel-7.0.z]) Affected Software/OS: 'qemu-kvm' package(s) on Oracle Linux 7. Solution: Please install the updated package(s). CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3615 BugTraq ID: 69654 http://www.securityfocus.com/bid/69654 Debian Security Information: DSA-3044 (Google Search) http://www.debian.org/security/2014/dsa-3044 RedHat Security Advisories: RHSA-2014:1669 http://rhn.redhat.com/errata/RHSA-2014-1669.html RedHat Security Advisories: RHSA-2014:1670 http://rhn.redhat.com/errata/RHSA-2014-1670.html RedHat Security Advisories: RHSA-2014:1941 http://rhn.redhat.com/errata/RHSA-2014-1941.html http://secunia.com/advisories/61829 SuSE Security Announcement: openSUSE-SU-2015:0732 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html http://www.ubuntu.com/usn/USN-2409-1
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.