shield
Security update for qemu
SUSE-SLE-SERVER-12-SP1-2018-1801
This update for qemu fixes the following issues: These security issues were fixed: - CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket causing DoS (bsc#1098735) - CVE-2018-11806: Prevent heap-based buffer overflow via incoming fragmented datagrams (bsc#1096223) With this release the mitigations for Spectre v4 are moved the the patches from upstream (CVE-2018-3639, bsc#1092885). This non-security was fixed: - Fix VirtQueue error for virtio-balloon during live migration (bsc#1020928).
-
Release DateAug 30 2018
-
References
-
Typesecurity
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Server LTSS 12.1 s390x
-
Packagesqemu
Universal CPU emulatorqemu-block-curl2.3.1-33.12.1 lock rpm lock src
Universal CPU emulator -- cURL block supportqemu-guest-agent2.3.1-33.12.1 lock rpm
Universal CPU emulator -- Guest agentqemu-kvm2.3.1-33.12.1 lock rpm
Kernel-based Virtual Machineqemu-lang2.3.1-33.12.1 lock rpm
Universal CPU emulator -- Translationsqemu-s3902.3.1-33.12.1 lock rpm
Universal CPU emulator -- S/390qemu-tools2.3.1-33.12.1 lock rpm
Universal CPU emulator -- Tools2.3.1-33.12.1 lock rpm
SUSE Linux Enterprise Server LTSS 12.1 x86_64
-
Packagesqemu
Universal CPU emulatorqemu-block-curl2.3.1-33.12.1 lock rpm lock src
Universal CPU emulator -- cURL block supportqemu-block-rbd2.3.1-33.12.1 lock rpm
Universal CPU emulator -- cURL block supportqemu-guest-agent2.3.1-33.12.1 lock rpm
Universal CPU emulator -- Guest agentqemu-ipxe2.3.1-33.12.1 lock rpm
PXE ROMs for QEMU NICsqemu-kvm1.0.0-33.12.1 lock rpm
Kernel-based Virtual Machineqemu-lang2.3.1-33.12.1 lock rpm
Universal CPU emulator -- Translationsqemu-seabios2.3.1-33.12.1 lock rpm
X86 BIOS for QEMUqemu-sgabios1.8.1-33.12.1 lock rpm
Serial Graphics Adapter BIOS for QEMUqemu-tools8-33.12.1 lock rpm
Universal CPU emulator -- Toolsqemu-vgabios2.3.1-33.12.1 lock rpm
VGA BIOSes for QEMUqemu-x861.8.1-33.12.1 lock rpm
Universal CPU emulator -- x862.3.1-33.12.1 lock rpm