Synopsis: Moderate: qemu-kvm security update Advisory ID: SLSA-2015:1833-1 Issue Date: 2015-09-22 CVE Numbers: CVE-2015-5165 -- An information leak flaw was found in the way QEMU's RTL8139 emulation implementation processed network packets under RTL8139 controller's C+ mode of operation. An unprivileged guest user could use this flaw to read up to 65 KB of uninitialized QEMU heap memory. (CVE-2015-5165) After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect. -- SL6 x86_64 qemu-guest-agent-0.12.1.2-2.479.el6_7.1.x86_64.rpm qemu-img-0.12.1.2-2.479.el6_7.1.x86_64.rpm qemu-kvm-0.12.1.2-2.479.el6_7.1.x86_64.rpm qemu-kvm-debuginfo-0.12.1.2-2.479.el6_7.1.x86_64.rpm qemu-kvm-tools-0.12.1.2-2.479.el6_7.1.x86_64.rpm i386 qemu-guest-agent-0.12.1.2-2.479.el6_7.1.i686.rpm qemu-kvm-debuginfo-0.12.1.2-2.479.el6_7.1.i686.rpm - Scientific Linux Development Team