Oval Definition:oval:org.opensuse.security:def:56761
Revision Date:2020-12-01Version:1
Title:Security update for qemu (Important)
Description:



This update for qemu fixes the following issues:

A new feature was added:

- Support EPYC vCPU type (bsc#1052825 fate#324038)

Also a mitigation for a security problem has been applied:

- CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to allow enabling/disabling branch prediction features in the Intel CPU. (bsc#1068032)

Family:unixClass:patch
Status:Reference(s):1001600
1002982
1013882
1014172
1030050
1045327
1052825
1057950
1068032
1101676
1101677
1101678
1103342
1112368
1112397
1112417
1112421
1112432
1116686
1118754
1120943
1132666
1133191
1133375
1136037
1136446
1137597
1160770
1162002
1166916
1170383
1171189
1171191
1171220
1171732
1171988
1172049
1172443
1172453
1172458
1172775
1172781
1172782
1172783
1172999
1174115
1174462
1174543
1174628
729190
932483
945484
945493
947458
948902
954256
957812
957813
957815
960414
961368
962313
965576
970632
974655
975865
980722
994989
CVE-2014-3618
CVE-2015-3194
CVE-2015-3195
CVE-2015-3196
CVE-2015-8325
CVE-2015-8370
CVE-2016-1908
CVE-2016-3115
CVE-2016-4912
CVE-2016-7567
CVE-2016-7969
CVE-2016-7970
CVE-2016-7971
CVE-2016-7972
CVE-2016-9042
CVE-2016-9843
CVE-2017-1000251
CVE-2017-15274
CVE-2017-5715
CVE-2017-6451
CVE-2017-6458
CVE-2017-6460
CVE-2017-6462
CVE-2017-6463
CVE-2017-6464
CVE-2018-20030
CVE-2018-3058
CVE-2018-3063
CVE-2018-3064
CVE-2018-3066
CVE-2018-3143
CVE-2018-3156
CVE-2018-3174
CVE-2018-3251
CVE-2018-3282
CVE-2019-11477
CVE-2019-11478
CVE-2019-11487
CVE-2019-20810
CVE-2019-20812
CVE-2019-2529
CVE-2019-2537
CVE-2019-3846
CVE-2019-9278
CVE-2019-9928
CVE-2020-0305
CVE-2020-10135
CVE-2020-10711
CVE-2020-10732
CVE-2020-10751
CVE-2020-10766
CVE-2020-10767
CVE-2020-10768
CVE-2020-10773
CVE-2020-12771
CVE-2020-13974
CVE-2020-14344
CVE-2020-14416
CVE-2020-7598
CVE-2020-8174
SUSE-SU-2015:2230-1
SUSE-SU-2016:1386-1
SUSE-SU-2016:2661-1
SUSE-SU-2016:3107-1
SUSE-SU-2017:1048-1
SUSE-SU-2017:2783-1
SUSE-SU-2018:0007-1
SUSE-SU-2019:1602-1
SUSE-SU-2019:2048-1
SUSE-SU-2020:0457-1
SUSE-SU-2020:1623-1
SUSE-SU-2020:2117-1
SUSE-SU-2020:2134-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • ImageMagick-7.0.7.29-lp150.1 is installed
  • OR libMagick++-7_Q16HDRI4-7.0.7.29-lp150.1 is installed
  • OR libMagickCore-7_Q16HDRI6-7.0.7.29-lp150.1 is installed
  • OR libMagickWand-7_Q16HDRI6-7.0.7.29-lp150.1 is installed
    • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • go1.11-1.11.13-lp151.2.9 is installed
  • OR go1.11-doc-1.11.13-lp151.2.9 is installed
  • OR go1.11-race-1.11.13-lp151.2.9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • qemu-2.9.1-6.9 is installed
  • OR qemu-block-curl-2.9.1-6.9 is installed
  • OR qemu-ipxe-1.0.0-6.9 is installed
  • OR qemu-kvm-2.9.1-6.9 is installed
  • OR qemu-seabios-1.10.2-6.9 is installed
  • OR qemu-sgabios-8-6.9 is installed
  • OR qemu-tools-2.9.1-6.9 is installed
  • OR qemu-vgabios-1.10.2-6.9 is installed
  • OR qemu-x86-2.9.1-6.9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • libopenssl1_0_0-1.0.1i-36 is installed
  • OR libopenssl1_0_0-32bit-1.0.1i-36 is installed
  • OR libopenssl1_0_0-hmac-1.0.1i-36 is installed
  • OR libopenssl1_0_0-hmac-32bit-1.0.1i-36 is installed
  • OR openssl-1.0.1i-36 is installed
  • OR openssl-doc-1.0.1i-36 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_69-60_64_29-default-8-4 is installed
  • OR kgraft-patch-3_12_69-60_64_29-xen-8-4 is installed
  • OR kgraft-patch-SLE12-SP1_Update_12-8-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • grub2-2.02~beta2-104 is installed
  • OR grub2-arm64-efi-2.02~beta2-104 is installed
  • OR grub2-i386-pc-2.02~beta2-104 is installed
  • OR grub2-powerpc-ieee1275-2.02~beta2-104 is installed
  • OR grub2-s390x-emu-2.02~beta2-104 is installed
  • OR grub2-snapper-plugin-2.02~beta2-104 is installed
  • OR grub2-systemd-sleep-plugin-2.02~beta2-104 is installed
  • OR grub2-x86_64-efi-2.02~beta2-104 is installed
  • OR grub2-x86_64-xen-2.02~beta2-104 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • qemu-2.6.2-41.43 is installed
  • OR qemu-block-curl-2.6.2-41.43 is installed
  • OR qemu-block-rbd-2.6.2-41.43 is installed
  • OR qemu-block-ssh-2.6.2-41.43 is installed
  • OR qemu-guest-agent-2.6.2-41.43 is installed
  • OR qemu-ipxe-1.0.0-41.43 is installed
  • OR qemu-kvm-2.6.2-41.43 is installed
  • OR qemu-lang-2.6.2-41.43 is installed
  • OR qemu-seabios-1.9.1-41.43 is installed
  • OR qemu-sgabios-8-41.43 is installed
  • OR qemu-tools-2.6.2-41.43 is installed
  • OR qemu-vgabios-1.9.1-41.43 is installed
  • OR qemu-x86-2.6.2-41.43 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • libsnmp30-5.7.3-6.3 is installed
  • OR libsnmp30-32bit-5.7.3-6.3 is installed
  • OR net-snmp-5.7.3-6.3 is installed
  • OR perl-SNMP-5.7.3-6.3 is installed
  • OR snmp-mibs-5.7.3-6.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • libdcerpc-atsvc0-4.2.4-28.29 is installed
  • OR samba-4.2.4-28.29 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • grub2-2.02-2 is installed
  • OR grub2-arm64-efi-2.02-2 is installed
  • OR grub2-i386-pc-2.02-2 is installed
  • OR grub2-powerpc-ieee1275-2.02-2 is installed
  • OR grub2-s390x-emu-2.02-2 is installed
  • OR grub2-snapper-plugin-2.02-2 is installed
  • OR grub2-systemd-sleep-plugin-2.02-2 is installed
  • OR grub2-x86_64-efi-2.02-2 is installed
  • OR grub2-x86_64-xen-2.02-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • java-1_8_0-openjdk-1.8.0.252-27.45 is installed
  • OR java-1_8_0-openjdk-demo-1.8.0.252-27.45 is installed
  • OR java-1_8_0-openjdk-devel-1.8.0.252-27.45 is installed
  • OR java-1_8_0-openjdk-headless-1.8.0.252-27.45 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • kgraft-patch-4_4_178-94_91-default-6-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_25-6-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND squid-3.5.21-26.20 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • libgoa-1_0-0-3.20.5-9 is installed
  • OR libgoa-backend-1_0-1-3.20.5-9 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • libmysqlclient18-10.0.38-29.27 is installed
  • OR libmysqlclient18-32bit-10.0.38-29.27 is installed
  • OR mariadb-10.0.38-29.27 is installed
  • OR mariadb-client-10.0.38-29.27 is installed
  • OR mariadb-errormessages-10.0.38-29.27 is installed
  • OR mariadb-tools-10.0.38-29.27 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • evince-3.20.2-6.27 is installed
  • OR evince-browser-plugin-3.20.2-6.27 is installed
  • OR evince-lang-3.20.2-6.27 is installed
  • OR evince-plugin-djvudocument-3.20.2-6.27 is installed
  • OR evince-plugin-dvidocument-3.20.2-6.27 is installed
  • OR evince-plugin-pdfdocument-3.20.2-6.27 is installed
  • OR evince-plugin-psdocument-3.20.2-6.27 is installed
  • OR evince-plugin-tiffdocument-3.20.2-6.27 is installed
  • OR evince-plugin-xpsdocument-3.20.2-6.27 is installed
  • OR libevdocument3-4-3.20.2-6.27 is installed
  • OR libevview3-3-3.20.2-6.27 is installed
  • OR nautilus-evince-3.20.2-6.27 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 9 is installed
  • AND Package Information
  • ansible1-1.9.6-9.3 is installed
  • OR ardana-ansible-9.0+git.1568385829.54601ac-3.10 is installed
  • OR ardana-cluster-9.0+git.1568150980.027f167-3.10 is installed
  • OR ardana-db-9.0+git.1568382922.6f2cea4-3.10 is installed
  • OR ardana-extensions-nsx-9.0+git.1568830037.2eea267-11 is installed
  • OR ardana-glance-9.0+git.1567000146.4569d10-3.10 is installed
  • OR ardana-input-model-9.0+git.1566409257.eec6360-3.10 is installed
  • OR ardana-installer-ui-9.0+git.1569535129.ca87ef0-3.10 is installed
  • OR ardana-manila-9.0+git.1568835830.10c9689-3.6 is installed
  • OR ardana-monasca-9.0+git.1567695427.5974ab2-3.10 is installed
  • OR ardana-neutron-9.0+git.1568817582.a4813e2-3.10 is installed
  • OR ardana-nova-9.0+git.1567630824.aa6dc2d-3.10 is installed
  • OR ardana-octavia-9.0+git.1568362662.7fba216-3.10 is installed
  • OR ardana-opsconsole-ui-9.0+git.1566593422.813e56c-4.10 is installed
  • OR ardana-osconfig-9.0+git.1567630791.5ca70a6-3.10 is installed
  • OR ardana-service-9.0+git.1569439941.6800991-3.10 is installed
  • OR ardana-tls-9.0+git.1569257240.456c4fc-3.6 is installed
  • OR grafana-6.2.5-3.6 is installed
  • OR grafana-monasca-ui-drilldown-1.14.1~dev9-3.6 is installed
  • OR novnc-1.1.0-3.3 is installed
  • OR openstack-cinder-13.0.7~dev16-3.10 is installed
  • OR openstack-cinder-api-13.0.7~dev16-3.10 is installed
  • OR openstack-cinder-backup-13.0.7~dev16-3.10 is installed
  • OR openstack-cinder-scheduler-13.0.7~dev16-3.10 is installed
  • OR openstack-cinder-volume-13.0.7~dev16-3.10 is installed
  • OR openstack-dashboard-14.0.4~dev11-3.6 is installed
  • OR openstack-designate-7.0.1~dev22-3.10 is installed
  • OR openstack-designate-agent-7.0.1~dev22-3.10 is installed
  • OR openstack-designate-api-7.0.1~dev22-3.10 is installed
  • OR openstack-designate-central-7.0.1~dev22-3.10 is installed
  • OR openstack-designate-producer-7.0.1~dev22-3.10 is installed
  • OR openstack-designate-sink-7.0.1~dev22-3.10 is installed
  • OR openstack-designate-worker-7.0.1~dev22-3.10 is installed
  • OR openstack-glance-17.0.1~dev30-3.3 is installed
  • OR openstack-glance-api-17.0.1~dev30-3.3 is installed
  • OR openstack-heat-11.0.3~dev23-3.10 is installed
  • OR openstack-heat-api-11.0.3~dev23-3.10 is installed
  • OR openstack-heat-api-cfn-11.0.3~dev23-3.10 is installed
  • OR openstack-heat-engine-11.0.3~dev23-3.10 is installed
  • OR openstack-heat-plugin-heat_docker-11.0.3~dev23-3.10 is installed
  • OR openstack-horizon-plugin-heat-ui-1.4.1~dev4-4.6 is installed
  • OR openstack-horizon-plugin-monasca-ui-1.14.1~dev9-3.6 is installed
  • OR openstack-ironic-11.1.4~dev15-3.10 is installed
  • OR openstack-ironic-api-11.1.4~dev15-3.10 is installed
  • OR openstack-ironic-conductor-11.1.4~dev15-3.10 is installed
  • OR openstack-ironic-python-agent-3.3.3~dev5-3.10 is installed
  • OR openstack-keystone-14.1.1~dev16-3.10 is installed
  • OR openstack-manila-7.3.1~dev6-4.10 is installed
  • OR openstack-manila-api-7.3.1~dev6-4.10 is installed
  • OR openstack-manila-data-7.3.1~dev6-4.10 is installed
  • OR openstack-manila-scheduler-7.3.1~dev6-4.10 is installed
  • OR openstack-manila-share-7.3.1~dev6-4.10 is installed
  • OR openstack-neutron-13.0.5~dev50-3.10 is installed
  • OR openstack-neutron-dhcp-agent-13.0.5~dev50-3.10 is installed
  • OR openstack-neutron-gbp-5.0.1~dev472-3.10 is installed
  • OR openstack-neutron-ha-tool-13.0.5~dev50-3.10 is installed
  • OR openstack-neutron-l3-agent-13.0.5~dev50-3.10 is installed
  • OR openstack-neutron-linuxbridge-agent-13.0.5~dev50-3.10 is installed
  • OR openstack-neutron-macvtap-agent-13.0.5~dev50-3.10 is installed
  • OR openstack-neutron-metadata-agent-13.0.5~dev50-3.10 is installed
  • OR openstack-neutron-metering-agent-13.0.5~dev50-3.10 is installed
  • OR openstack-neutron-openvswitch-agent-13.0.5~dev50-3.10 is installed
  • OR openstack-neutron-server-13.0.5~dev50-3.10 is installed
  • OR openstack-nova-18.2.3~dev22-3.10 is installed
  • OR openstack-nova-api-18.2.3~dev22-3.10 is installed
  • OR openstack-nova-cells-18.2.3~dev22-3.10 is installed
  • OR openstack-nova-compute-18.2.3~dev22-3.10 is installed
  • OR openstack-nova-conductor-18.2.3~dev22-3.10 is installed
  • OR openstack-nova-console-18.2.3~dev22-3.10 is installed
  • OR openstack-nova-novncproxy-18.2.3~dev22-3.10 is installed
  • OR openstack-nova-placement-api-18.2.3~dev22-3.10 is installed
  • OR openstack-nova-scheduler-18.2.3~dev22-3.10 is installed
  • OR openstack-nova-serialproxy-18.2.3~dev22-3.10 is installed
  • OR openstack-nova-vncproxy-18.2.3~dev22-3.10 is installed
  • OR openstack-octavia-3.1.2~dev45-3.10 is installed
  • OR openstack-octavia-amphora-agent-3.1.2~dev45-3.10 is installed
  • OR openstack-octavia-api-3.1.2~dev45-3.10 is installed
  • OR openstack-octavia-health-manager-3.1.2~dev45-3.10 is installed
  • OR openstack-octavia-housekeeping-3.1.2~dev45-3.10 is installed
  • OR openstack-octavia-worker-3.1.2~dev45-3.10 is installed
  • OR openstack-sahara-9.0.2~dev12-3.3 is installed
  • OR openstack-sahara-api-9.0.2~dev12-3.3 is installed
  • OR openstack-sahara-engine-9.0.2~dev12-3.3 is installed
  • OR openstack-tempest-19.0.0-15 is installed
  • OR openstack-tempest-test-19.0.0-15 is installed
  • OR openstack-watcher-1.12.1~dev19-4.3 is installed
  • OR openstack-watcher-doc-1.12.1~dev19-4.3 is installed
  • OR python-ardana-configurationprocessor-9.0+git.1568955483.5f039e4-3.11 is installed
  • OR python-cinder-13.0.7~dev16-3.10 is installed
  • OR python-cinder-tempest-plugin-0.1.0-11 is installed
  • OR python-designate-7.0.1~dev22-3.10 is installed
  • OR python-glance-17.0.1~dev30-3.3 is installed
  • OR python-heat-11.0.3~dev23-3.10 is installed
  • OR python-horizon-14.0.4~dev11-3.6 is installed
  • OR python-horizon-plugin-heat-ui-1.4.1~dev4-4.6 is installed
  • OR python-horizon-plugin-monasca-ui-1.14.1~dev9-3.6 is installed
  • OR python-ironic-11.1.4~dev15-3.10 is installed
  • OR python-keystone-14.1.1~dev16-3.10 is installed
  • OR python-manila-7.3.1~dev6-4.10 is installed
  • OR python-neutron-13.0.5~dev50-3.10 is installed
  • OR python-neutron-gbp-5.0.1~dev472-3.10 is installed
  • OR python-nova-18.2.3~dev22-3.10 is installed
  • OR python-octavia-3.1.2~dev45-3.10 is installed
  • OR python-openstack_auth-14.0.4~dev11-3.6 is installed
  • OR python-sahara-9.0.2~dev12-3.3 is installed
  • OR python-tempest-19.0.0-15 is installed
  • OR python-urllib3-1.23-3.9 is installed
  • OR python-watcher-1.12.1~dev19-4.3 is installed
  • OR venv-openstack-barbican-7.0.1~dev18-3.9 is installed
  • OR venv-openstack-barbican-x86_64-7.0.1~dev18-3.9 is installed
  • OR venv-openstack-cinder-13.0.7~dev16-3.9 is installed
  • OR venv-openstack-cinder-x86_64-13.0.7~dev16-3.9 is installed
  • OR venv-openstack-designate-7.0.1~dev22-3.9 is installed
  • OR venv-openstack-designate-x86_64-7.0.1~dev22-3.9 is installed
  • OR venv-openstack-glance-17.0.1~dev30-3.9 is installed
  • OR venv-openstack-glance-x86_64-17.0.1~dev30-3.9 is installed
  • OR venv-openstack-heat-11.0.3~dev23-3.9 is installed
  • OR venv-openstack-heat-x86_64-11.0.3~dev23-3.9 is installed
  • OR venv-openstack-horizon-14.0.4~dev11-4.9 is installed
  • OR venv-openstack-horizon-x86_64-14.0.4~dev11-4.9 is installed
  • OR venv-openstack-ironic-11.1.4~dev15-4.9 is installed
  • OR venv-openstack-ironic-x86_64-11.1.4~dev15-4.9 is installed
  • OR venv-openstack-keystone-14.1.1~dev16-3.9 is installed
  • OR venv-openstack-keystone-x86_64-14.1.1~dev16-3.9 is installed
  • OR venv-openstack-magnum-7.1.1~dev28-4.9 is installed
  • OR venv-openstack-magnum-x86_64-7.1.1~dev28-4.9 is installed
  • OR venv-openstack-manila-7.3.1~dev6-3.9 is installed
  • OR venv-openstack-manila-x86_64-7.3.1~dev6-3.9 is installed
  • OR venv-openstack-monasca-2.7.1~dev10-3.9 is installed
  • OR venv-openstack-monasca-ceilometer-1.8.2~dev3-3.9 is installed
  • OR venv-openstack-monasca-ceilometer-x86_64-1.8.2~dev3-3.9 is installed
  • OR venv-openstack-monasca-x86_64-2.7.1~dev10-3.9 is installed
  • OR venv-openstack-neutron-13.0.5~dev50-6.9 is installed
  • OR venv-openstack-neutron-x86_64-13.0.5~dev50-6.9 is installed
  • OR venv-openstack-nova-18.2.3~dev22-3.9 is installed
  • OR venv-openstack-nova-x86_64-18.2.3~dev22-3.9 is installed
  • OR venv-openstack-octavia-3.1.2~dev45-4.9 is installed
  • OR venv-openstack-octavia-x86_64-3.1.2~dev45-4.9 is installed
  • OR venv-openstack-sahara-9.0.2~dev12-3.9 is installed
  • OR venv-openstack-sahara-x86_64-9.0.2~dev12-3.9 is installed
  • OR venv-openstack-swift-2.19.2~dev1-2.6 is installed
  • OR venv-openstack-swift-x86_64-2.19.2~dev1-2.6 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • libmysqlclient18-10.0.40.3-29.38 is installed
  • OR mariadb-10.0.40.3-29.38 is installed
    • BACK