gpp_maybe Security update for qemu

SUSE-SLE-SAP-12-SP1-2019-471

This update for qemu fixes the following issues: Security issue fixed: - CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation (bsc#1123156). - CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks in usb-mtp (bsc#1119493). - CVE-2018-19489: Fixed a denial of service vulnerability in virtfs (bsc#1117275). - CVE-2018-19364: Fixed a use-after-free if the virtfs interface resulting in a denial of service (bsc#1116717).

• Release Date
  Apr 27 2019
• References
  Bugzilla: 1116717, 1123156, 1117275, 1119493
  CVEs: CVE-2018-16872, CVE-2019-6778, CVE-2018-19364, CVE-2018-19489
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.1 x86_64

• Packages
  qemu
  Universal CPU emulator

  2.3.1-33.20.1 lock rpm lock src

  qemu-block-curl
  Universal CPU emulator -- cURL block support

  2.3.1-33.20.1 lock rpm

  qemu-block-rbd
  Universal CPU emulator -- cURL block support

  2.3.1-33.20.1 lock rpm

  qemu-guest-agent
  Universal CPU emulator -- Guest agent

  2.3.1-33.20.1 lock rpm

  qemu-ipxe
  PXE ROMs for QEMU NICs

  1.0.0-33.20.1 lock rpm

  qemu-kvm
  Kernel-based Virtual Machine

  2.3.1-33.20.1 lock rpm

  qemu-lang
  Universal CPU emulator -- Translations

  2.3.1-33.20.1 lock rpm

  qemu-seabios
  X86 BIOS for QEMU

  1.8.1-33.20.1 lock rpm

  qemu-sgabios
  Serial Graphics Adapter BIOS for QEMU

  8-33.20.1 lock rpm

  qemu-tools
  Universal CPU emulator -- Tools

  2.3.1-33.20.1 lock rpm

  qemu-vgabios
  VGA BIOSes for QEMU

  1.8.1-33.20.1 lock rpm

  qemu-x86
  Universal CPU emulator -- x86

  2.3.1-33.20.1 lock rpm