SUSE-SU-2016:0021-1
Security update for qemu
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update fixes the following security issues: - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. (bsc#957162 CVE-2015-7512) - Infinite loop in processing command block list. CVE-2015-8345 (bsc#956829): Also a non-security bug fixed: - Fix cases of wrong clock values in kvmclock timekeeping (bsc#947164 and bsc#953187)
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12 | qemu, qemu-block-curl, qemu-block-rbd und 11 weitere | 2.0.2-48.12.1 und 3 weitere |
Alle 14 Einträge aus 1 Quelle zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 12 | qemu | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-block-curl | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-block-rbd | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-guest-agent | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-ipxe | 1.0.0-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-kvm | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-lang | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-ppc | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-s390 | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-seabios | 1.7.4-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-sgabios | 8-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-tools | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-vgabios | 1.7.4-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-x86 | 2.0.2-48.12.1 |
Referenzen
- https://bugzilla.suse.com/947164
- https://bugzilla.suse.com/953187
- https://bugzilla.suse.com/956829
- https://bugzilla.suse.com/957162
- https://lists.suse.com/pipermail/sle-security-updates/2016-January/001778.html
- https://www.suse.com/security/cve/CVE-2015-7512/
- https://www.suse.com/security/cve/CVE-2015-8345/
- https://www.suse.com/support/security/rating/