critique
SUSE-SU-2016:0459-1
Security update for qemu
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update fixes the following security issues: - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. (bsc#957162 CVE-2015-7512) - Infinite loop in processing command block list. CVE-2015-8345 (bsc#956829): This update also fixes a non-security bug: - Due to space restrictions in limited bios data areas, don't create mptable if vcpu count is 'high' (ie more than ~19). (bsc#954864) (No supported guests are negatively impacted by this change, which is taken from upstream seabios)
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 12.1 | qemu, qemu-block-curl, qemu-block-rbd et 11 autres | 2.3.1-7.7 et 3 autres |
Afficher les 14 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 12.1 | qemu | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-block-curl | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-block-rbd | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-guest-agent | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-ipxe | 1.0.0-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-kvm | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-lang | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-ppc | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-s390 | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-seabios | 1.8.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-sgabios | 8-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-tools | 2.3.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-vgabios | 1.8.1-7.7 |
| SUSE Linux Enterprise 12.1 | qemu-x86 | 2.3.1-7.7 |
Références
- https://bugzilla.suse.com/954864
- https://bugzilla.suse.com/956829
- https://bugzilla.suse.com/957162
- https://lists.suse.com/pipermail/sle-security-updates/2016-February/001881.html
- https://www.suse.com/security/cve/CVE-2015-7512/
- https://www.suse.com/security/cve/CVE-2015-8345/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2016/suse-su-20160459-1/