SUSE-SU-2016:0021-1
Security update for qemu
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update fixes the following security issues: - Enforce receive packet size, thus eliminating buffer overflow and potential security issue. (bsc#957162 CVE-2015-7512) - Infinite loop in processing command block list. CVE-2015-8345 (bsc#956829): Also a non-security bug fixed: - Fix cases of wrong clock values in kvmclock timekeeping (bsc#947164 and bsc#953187)
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12 | qemu, qemu-block-curl, qemu-block-rbd ve 11 tane daha | 2.0.2-48.12.1 ve 3 tane daha |
1 kaynaktaki 14 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| SUSE Linux Enterprise 12 | qemu | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-block-curl | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-block-rbd | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-guest-agent | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-ipxe | 1.0.0-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-kvm | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-lang | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-ppc | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-s390 | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-seabios | 1.7.4-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-sgabios | 8-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-tools | 2.0.2-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-vgabios | 1.7.4-48.12.1 |
| SUSE Linux Enterprise 12 | qemu-x86 | 2.0.2-48.12.1 |
Referanslar
- https://bugzilla.suse.com/947164
- https://bugzilla.suse.com/953187
- https://bugzilla.suse.com/956829
- https://bugzilla.suse.com/957162
- https://lists.suse.com/pipermail/sle-security-updates/2016-January/001778.html
- https://www.suse.com/security/cve/CVE-2015-7512/
- https://www.suse.com/security/cve/CVE-2015-8345/
- https://www.suse.com/support/security/rating/