crítica
SUSE-SU-2016:0459-1
Security update for qemu
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update fixes the following security issues: - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. (bsc#957162 CVE-2015-7512) - Infinite loop in processing command block list. CVE-2015-8345 (bsc#956829): This update also fixes a non-security bug: - Due to space restrictions in limited bios data areas, don't create mptable if vcpu count is 'high' (ie more than ~19). (bsc#954864) (No supported guests are negatively impacted by this change, which is taken from upstream seabios)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.1 | qemu, qemu-block-curl, qemu-block-rbd y 11 más | 2.3.1-7.7 y 3 más |
Mostrar las 14 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.1 | qemu | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-block-curl | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-block-rbd | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-guest-agent | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-ipxe | 1.0.0-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-kvm | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-lang | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-ppc | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-s390 | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-seabios | 1.8.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-sgabios | 8-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-tools | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-vgabios | 1.8.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-x86 | 2.3.1-7.7 |
Referencias
- https://bugzilla.suse.com/954864
- https://bugzilla.suse.com/956829
- https://bugzilla.suse.com/957162
- https://lists.suse.com/pipermail/sle-security-updates/2016-February/001881.html
- https://www.suse.com/security/cve/CVE-2015-7512/
- https://www.suse.com/security/cve/CVE-2015-8345/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2016/suse-su-20160459-1/