Synopsis
The remote OracleVM host is missing a security update.
Description
The remote OracleVM system is missing necessary patches to address critical security updates :
- kvm-cirrus-fix-patterncopy-checks.patch [bz#1420486 bz#1420488]
- kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil .patch
- kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput .patch
- Resolves: bz#1420486 (EMBARGOED CVE-2017-2620 qemu-kvm:
Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.8.z])
- Resolves: bz#1420488 (EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.8.z])
Solution
Update the affected qemu-img package.