shield Security update for kvm

slessp4-kvm-13771

This update for kvm fixes the following security issues: - CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket causing DoS (bsc#1098735) - CVE-2018-11806: Prevent heap-based buffer overflow via incoming fragmented datagrams (bsc#1096223) With this release the mitigations for Spectre v4 are moved the the patches from upstream (CVE-2018-3639, bsc#1092885).

• Release Date
  Sep 7 2018
• References
  Bugzilla: 1098735, 1096223, 1092885
  CVEs: CVE-2018-11806, CVE-2018-3639, CVE-2018-12617
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  kvm
  Kernel-based Virtual Machine

  1.4.2-60.15.2 lock rpm lock src

SUSE Linux Enterprise Server 11.4 i586

• Packages
  kvm
  Kernel-based Virtual Machine

  1.4.2-60.15.2 lock rpm lock src

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  kvm
  Kernel-based Virtual Machine

  1.4.2-60.15.2 lock rpm lock src