< back to search

gpp_maybe Security update for qemu
SUSE-SLE-SERVER-12-SP3-2017-1810

This update for qemu to version 2.9.1 fixes several issues. It also announces that the qed storage format will be no longer supported in SLE 15 (fate#324200). These security issues were fixed: - CVE-2017-15268: Qemu allowed remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c (bsc#1062942) - CVE-2017-15289: The mode4and5 write functions allowed local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation (bsc#1063122) - CVE-2017-15038: Race condition in the v9fs_xattrwalk function local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes (bsc#1062069) - CVE-2017-10911: The make_response function in the Linux kernel allowed guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures (bsc#1057378) - CVE-2017-12809: The IDE disk and CD/DVD-ROM Emulator support allowed local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive (bsc#1054724) - CVE-2017-14167: Integer overflow in the load_multiboot function allowed local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write (bsc#1057585) - CVE-2017-13672: The VGA display emulator support allowed local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update (bsc#1056334) - CVE-2017-13711: Use-after-free vulnerability allowed attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets (bsc#1056291). These non-security issues were fixed: - Fixed not being able to build from rpm sources due to undefined macro (bsc#1057966) - Fiedx package build failure against new glibc (bsc#1055587)

cloud_download Downloads

SUSE Linux Enterprise Server 12.3 x86_64
  • Packages
    qemu
    Universal CPU emulator
    2.9.1-6.6.3 lock rpm lock src
    qemu-block-curl
    Universal CPU emulator -- cURL block support
    2.9.1-6.6.3 lock rpm
    qemu-block-iscsi
    Universal CPU emulator -- iSCSI block support
    2.9.1-6.6.3 lock rpm
    qemu-block-rbd
    Universal CPU emulator -- Ceph (rbd) block support
    2.9.1-6.6.3 lock rpm
    qemu-block-ssh
    Universal CPU emulator -- SSH block support
    2.9.1-6.6.3 lock rpm
    qemu-guest-agent
    Universal CPU emulator -- Guest agent
    2.9.1-6.6.3 lock rpm
    qemu-ipxe
    PXE ROMs for QEMU NICs
    1.0.0-6.6.3 lock rpm
    qemu-kvm
    Kernel-based Virtual Machine
    2.9.1-6.6.3 lock rpm
    qemu-lang
    Universal CPU emulator -- Translations
    2.9.1-6.6.3 lock rpm
    qemu-seabios
    X86 BIOS for QEMU
    1.10.2-6.6.3 lock rpm
    qemu-sgabios
    Serial Graphics Adapter BIOS for QEMU
    8-6.6.3 lock rpm
    qemu-tools
    Universal CPU emulator -- Tools
    2.9.1-6.6.3 lock rpm
    qemu-vgabios
    VGA BIOSes for QEMU
    1.10.2-6.6.3 lock rpm
    qemu-x86
    Universal CPU emulator -- x86
    2.9.1-6.6.3 lock rpm
SUSE Linux Enterprise Server 12.3 aarch64
  • Packages
    qemu
    Universal CPU emulator
    2.9.1-6.6.3 lock rpm lock src
    qemu-arm
    Universal CPU emulator -- ARM
    2.9.1-6.6.3 lock rpm
    qemu-block-curl
    Universal CPU emulator -- cURL block support
    2.9.1-6.6.3 lock rpm
    qemu-block-iscsi
    Universal CPU emulator -- iSCSI block support
    2.9.1-6.6.3 lock rpm
    qemu-block-rbd
    Universal CPU emulator -- Ceph (rbd) block support
    2.9.1-6.6.3 lock rpm
    qemu-block-ssh
    Universal CPU emulator -- SSH block support
    2.9.1-6.6.3 lock rpm
    qemu-guest-agent
    Universal CPU emulator -- Guest agent
    2.9.1-6.6.3 lock rpm
    qemu-ipxe
    PXE ROMs for QEMU NICs
    1.0.0-6.6.3 lock rpm
    qemu-lang
    Universal CPU emulator -- Translations
    2.9.1-6.6.3 lock rpm
    qemu-tools
    Universal CPU emulator -- Tools
    2.9.1-6.6.3 lock rpm
    qemu-vgabios
    VGA BIOSes for QEMU
    1.10.2-6.6.3 lock rpm
SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le
  • Packages
    qemu
    Universal CPU emulator
    2.9.1-6.6.3 lock rpm lock src
    qemu-block-curl
    Universal CPU emulator -- cURL block support
    2.9.1-6.6.3 lock rpm
    qemu-block-iscsi
    Universal CPU emulator -- iSCSI block support
    2.9.1-6.6.3 lock rpm
    qemu-block-ssh
    Universal CPU emulator -- SSH block support
    2.9.1-6.6.3 lock rpm
    qemu-guest-agent
    Universal CPU emulator -- Guest agent
    2.9.1-6.6.3 lock rpm
    qemu-ipxe
    PXE ROMs for QEMU NICs
    1.0.0-6.6.3 lock rpm
    qemu-lang
    Universal CPU emulator -- Translations
    2.9.1-6.6.3 lock rpm
    qemu-ppc
    Universal CPU emulator -- Power Architecture
    2.9.1-6.6.3 lock rpm
    qemu-tools
    Universal CPU emulator -- Tools
    2.9.1-6.6.3 lock rpm
    qemu-vgabios
    VGA BIOSes for QEMU
    1.10.2-6.6.3 lock rpm
SUSE Linux Enterprise Server 12.3 s390x
  • Packages
    qemu
    Universal CPU emulator
    2.9.1-6.6.3 lock rpm lock src
    qemu-block-curl
    Universal CPU emulator -- cURL block support
    2.9.1-6.6.3 lock rpm
    qemu-block-iscsi
    Universal CPU emulator -- iSCSI block support
    2.9.1-6.6.3 lock rpm
    qemu-block-ssh
    Universal CPU emulator -- SSH block support
    2.9.1-6.6.3 lock rpm
    qemu-guest-agent
    Universal CPU emulator -- Guest agent
    2.9.1-6.6.3 lock rpm
    qemu-kvm
    Kernel-based Virtual Machine
    2.9.1-6.6.3 lock rpm
    qemu-lang
    Universal CPU emulator -- Translations
    2.9.1-6.6.3 lock rpm
    qemu-s390
    Universal CPU emulator -- S/390
    2.9.1-6.6.3 lock rpm
    qemu-tools
    Universal CPU emulator -- Tools
    2.9.1-6.6.3 lock rpm