Oval Definition:	oval:org.opensuse.security:def:105345
Revision Date: 2019-08-21 Version: 1 Title: Security update for qemu (Important) Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2019-14378: Security fix for heap overflow in ip_reass on big packet input (bsc#1143794). - CVE-2019-12155: Security fix for null pointer dereference while releasing spice resources (bsc#1135902). - CVE-2019-13164: Security fix for qemu-bridge-helper ACL can be bypassed when names are too long (bsc#1140402). - CVE-2019-5008: Fix DoS (NULL pointer dereference) in sparc64 virtual machine possible through guest device driver (bsc#1133031). Bug fixes and enhancements: - Upstream tweaked SnowRidge-Server vcpu model to now be simply Snowridge (jsc#SLE-4883) - Add SnowRidge-Server vcpu model (jsc#SLE-4883) - Add in documentation about md-clear feature (bsc#1138534) - Fix SEV issue where older machine type is not processed correctly (bsc#1144087) - Fix case of a bad pointer in Xen PV usb support code (bsc#1128106) - Further refine arch-capabilities handling to help with security and performance in Intel hosts (bsc#1134883, bsc#1135210) (fate#327764) - Add support for one more security/performance related vcpu feature (bsc#1136778) (fate#327796) - Ignore csske for expanding the cpu model (bsc#1136540) Family: unix Class: patch Status: Reference(s): 1128106 1133031 1134883 1135210 1135902 1136540 1136778 1138534 1140402 1143794 1144087 CVE-2019-12155 CVE-2019-13164 CVE-2019-14378 CVE-2019-5008 SUSE-SU-2019:2192-1 Platform(s): SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Storage 6 SUSE Manager Proxy 4.0 SUSE Manager Server 4.0 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information qemu-3.1.1-9.3.3 is installed OR qemu-arm-3.1.1-9.3.3 is installed OR qemu-audio-alsa-3.1.1-9.3.3 is installed OR qemu-audio-oss-3.1.1-9.3.3 is installed OR qemu-audio-pa-3.1.1-9.3.3 is installed OR qemu-block-curl-3.1.1-9.3.3 is installed OR qemu-block-iscsi-3.1.1-9.3.3 is installed OR qemu-block-rbd-3.1.1-9.3.3 is installed OR qemu-block-ssh-3.1.1-9.3.3 is installed OR qemu-guest-agent-3.1.1-9.3.3 is installed OR qemu-ipxe-1.0.0+-9.3.3 is installed OR qemu-kvm-3.1.1-9.3.3 is installed OR qemu-lang-3.1.1-9.3.3 is installed OR qemu-ppc-3.1.1-9.3.3 is installed OR qemu-s390-3.1.1-9.3.3 is installed OR qemu-seabios-1.12.0-9.3.3 is installed OR qemu-sgabios-8-9.3.3 is installed OR qemu-ui-curses-3.1.1-9.3.3 is installed OR qemu-ui-gtk-3.1.1-9.3.3 is installed OR qemu-vgabios-1.12.0-9.3.3 is installed OR qemu-x86-3.1.1-9.3.3 is installed
BACK