qemu: CVE-2018-15746

[l2dy]

http://www.openwall.com/lists/oss-security/2018/08/28/6

An issue was found in the way QEMU implements Seccomp sandboxing. In that, all QEMU threads are not bound by the sandbox. A guest user/process maybe be able to use this flaw to crash a guest resulting in DoS.

Upstream patch:

-> https://lists.gnu.org/archive/html/qemu-devel/2018-08/msg04892.html

Reference:

-> https://lists.gnu.org/archive/html/qemu-devel/2018-08/msg02289.html

Architectural progress

• [x] AMD64 (amd64)
• [x] AArch64 (arm64)
• [x] ARMv7 (armel)
• [x] PowerPC 64-bit BE (ppc64)
• [x] PowerPC 32-bit BE (powerpc)

[MingcongBai]

Fixed with https://github.com/AOSC-Dev/aosc-os-abbs/commit/87486a0ca9ffff998267b4b8ccb16e2d5983649f. Closing.

[l2dy]

Use AOSA-2018-0389.