SUSE-SU-2016:0021-1
Security update for qemu
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update fixes the following security issues: - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. (bsc#957162 CVE-2015-7512) - Infinite loop in processing command block list. CVE-2015-8345 (bsc#956829): Also a non-security bug fixed: - Fix cases of wrong clock values in kvmclock timekeeping (bsc#947164 and bsc#953187)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12 | qemu, qemu-block-curl, qemu-block-rbd y 11 más | 2.0.2-48.12.1 y 3 más |
Mostrar las 14 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12 | qemu | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-block-curl | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-block-rbd | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-guest-agent | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-ipxe | 1.0.0-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-kvm | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-lang | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-ppc | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-s390 | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-seabios | 1.7.4-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-sgabios | 8-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-tools | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-vgabios | 1.7.4-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-x86 | 2.0.2-48.12.1 |
Referencias
- https://bugzilla.suse.com/947164
- https://bugzilla.suse.com/953187
- https://bugzilla.suse.com/956829
- https://bugzilla.suse.com/957162
- https://lists.suse.com/pipermail/sle-security-updates/2016-January/001778.html
- https://www.suse.com/security/cve/CVE-2015-7512/
- https://www.suse.com/security/cve/CVE-2015-8345/
- https://www.suse.com/support/security/rating/