Status of KVM vulnerabilities

Hi, all.

Recently Debian has published the DSA-2010-1 [1] where the following vulnerabilities are fixed:

* CVE-2010-0298 & CVE-2010-0306 (Gleb Natapov)
* CVE-2010-0309 (Marcelo Tosatti)
* CVE-2010-0419 (Paolo Bonzini)

I'm using Linux 2.6.32.3 with qemu-kvm-0.12.1.2 and I would like to know if it is necessary to update kvm-kmod or qemu-kvm, if some of these versions presents this vulnerability and some new version already exists and fix it.

Thanks in advance for your replies.

Regards,
Daniel

[1] http://seclists.org/bugtraq/2010/Mar/98

Fingerprint: BFB3 08D6 B4D1 31B2 72B9  29CE 6696 BF1B 14E6 1D37
Powered by Debian GNU/Linux Lenny - Linux user #188.598