gpp_maybe Security update for qemu

SUSE-SLE-Module-Basesystem-15-2019-2954

This update for qemu fixes the following issues: - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15 - Fix use-after-free in slirp (CVE-2018-20126 bsc#1119991) - Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bsc#1146873) - Expose taa-no "feature", indicating CPU does not have the TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506) - Expose pschange-mc-no "feature", indicating CPU does not have the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812)

• Release Date
  Nov 12 2019
• References
  Bugzilla: 1152506, 1146873, 1155812, 1119991
  CVEs: CVE-2019-11135, CVE-2018-20126, CVE-2018-12207, CVE-2019-12068
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15 s390x

• Packages
  qemu
  Machine emulator and virtualizer

  2.11.2-9.33.1 lock src

  qemu-tools
  Tools for QEMU

  2.11.2-9.33.1 lock rpm

Basesystem Module 15 aarch64

• Packages
  qemu
  Machine emulator and virtualizer

  2.11.2-9.33.1 lock src

  qemu-tools
  Tools for QEMU

  2.11.2-9.33.1 lock rpm

Basesystem Module 15 ppc64le

• Packages
  qemu
  Machine emulator and virtualizer

  2.11.2-9.33.1 lock src

  qemu-tools
  Tools for QEMU

  2.11.2-9.33.1 lock rpm

Basesystem Module 15 x86_64

• Packages
  qemu
  Machine emulator and virtualizer

  2.11.2-9.33.1 lock src

  qemu-tools
  Tools for QEMU

  2.11.2-9.33.1 lock rpm