Oval Definition:oval:org.opensuse.security:def:126378
Revision Date:2019-11-12Version:1
Title:Security update for qemu (Important)
Description:

This update for qemu fixes the following issues:

- Remove a backslash '\' escape character from 80-qemu-ga.rules (bsc#1153358) Unlike sles 15 or newer guests, The udev rule file of qemu guest agent in sles 12 sp4 or newer guest only needs one escape character.

- Fix use-after-free in slirp (CVE-2018-20126 bsc#1119991) - Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bsc#1146873) - Expose taa-no 'feature', indicating CPU does not have the TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506) - Expose pschange-mc-no 'feature', indicating CPU does not have the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP4

Family:unixClass:patch
Status:Reference(s):1119991
1146873
1152506
1153358
1155812
CVE-2018-12207
CVE-2018-20126
CVE-2019-11135
CVE-2019-12068
SUSE-SU-2019:2956-1
Platform(s):SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP4
Product(s):
Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND
  • qemu-2.11.2-5.23.2 is installed
  • OR qemu-arm-2.11.2-5.23.2 is installed
  • OR qemu-block-curl-2.11.2-5.23.2 is installed
  • OR qemu-block-iscsi-2.11.2-5.23.2 is installed
  • OR qemu-block-rbd-2.11.2-5.23.2 is installed
  • OR qemu-block-ssh-2.11.2-5.23.2 is installed
  • OR qemu-guest-agent-2.11.2-5.23.2 is installed
  • OR qemu-ipxe-1.0.0+-5.23.2 is installed
  • OR qemu-kvm-2.11.2-5.23.2 is installed
  • OR qemu-lang-2.11.2-5.23.2 is installed
  • OR qemu-ppc-2.11.2-5.23.2 is installed
  • OR qemu-s390-2.11.2-5.23.2 is installed
  • OR qemu-seabios-1.11.0-5.23.2 is installed
  • OR qemu-sgabios-8-5.23.2 is installed
  • OR qemu-tools-2.11.2-5.23.2 is installed
  • OR qemu-vgabios-1.11.0-5.23.2 is installed
  • OR qemu-x86-2.11.2-5.23.2 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • AND
  • qemu-2.11.2-5.23.2 is installed
  • OR qemu-arm-2.11.2-5.23.2 is installed
  • OR qemu-block-curl-2.11.2-5.23.2 is installed
  • OR qemu-block-iscsi-2.11.2-5.23.2 is installed
  • OR qemu-block-rbd-2.11.2-5.23.2 is installed
  • OR qemu-block-ssh-2.11.2-5.23.2 is installed
  • OR qemu-guest-agent-2.11.2-5.23.2 is installed
  • OR qemu-ipxe-1.0.0+-5.23.2 is installed
  • OR qemu-kvm-2.11.2-5.23.2 is installed
  • OR qemu-lang-2.11.2-5.23.2 is installed
  • OR qemu-ppc-2.11.2-5.23.2 is installed
  • OR qemu-s390-2.11.2-5.23.2 is installed
  • OR qemu-seabios-1.11.0-5.23.2 is installed
  • OR qemu-sgabios-8-5.23.2 is installed
  • OR qemu-tools-2.11.2-5.23.2 is installed
  • OR qemu-vgabios-1.11.0-5.23.2 is installed
  • OR qemu-x86-2.11.2-5.23.2 is installed
  • BACK