Oval Definition:oval:org.opensuse.security:def:78493
Revision Date:2016-12-02Version:1
Title:Security update for qemu (Important)
Description:



This update for qemu fixes the following issues:

* - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 - Change package post script udevadm trigger calls to be device specific (bsc#1002116) - Address various security/stability issues * Fix OOB access in xlnx.xpx-ethernetlite emulation (CVE-2016-7161 bsc#1001151) * Fix OOB access in VMware SVGA emulation (CVE-2016-7170 bsc#998516) * Fix DOS in USB xHCI emulation (CVE-2016-7466 bsc#1000345) * Fix DOS in Vmware pv scsi interface (CVE-2016-7421 bsc#999661) * Fix DOS in ColdFire Fast Ethernet Controller emulation (CVE-2016-7908 bsc#1002550) * Fix DOS in USB xHCI emulation (CVE-2016-8576 bsc#1003878) * Fix DOS in virtio-9pfs (CVE-2016-8578 bsc#1003894) * Fix DOS in virtio-9pfs (CVE-2016-9105 bsc#1007494) * Fix DOS in virtio-9pfs (CVE-2016-8577 bsc#1003893) * Plug data leak in virtio-9pfs interface (CVE-2016-9103 bsc#1007454) * Fix DOS in virtio-9pfs interface (CVE-2016-9102 bsc#1007450) * Fix DOS in virtio-9pfs (CVE-2016-9106 bsc#1007495) * Fix DOS in 16550A UART emulation (CVE-2016-8669 bsc#1004707) * Fix DOS in PC-Net II emulation (CVE-2016-7909 bsc#1002557) * Fix DOS in PRO100 emulation (CVE-2016-9101 bsc#1007391) * Fix DOS in RTL8139 emulation (CVE-2016-8910 bsc#1006538) * Fix DOS in Intel HDA controller emulation (CVE-2016-8909 bsc#1006536) * Fix DOS in virtio-9pfs (CVE-2016-9104 bsc#1007493) * Fix DOS in JAZZ RC4030 emulation (CVE-2016-8667 bsc#1004702)

- Fix case of disk corruption with migration due to improper internal state tracking (bsc#996524)

Family:unixClass:patch
Status:Reference(s):1000345
1001151
1002116
1002550
1002557
1003878
1003893
1003894
1004702
1004707
1006536
1006538
1007391
1007450
1007454
1007493
1007494
1007495
996524
998516
999661
CVE-2016-7161
CVE-2016-7170
CVE-2016-7421
CVE-2016-7466
CVE-2016-7908
CVE-2016-7909
CVE-2016-8576
CVE-2016-8577
CVE-2016-8578
CVE-2016-8667
CVE-2016-8669
CVE-2016-8909
CVE-2016-8910
CVE-2016-9101
CVE-2016-9102
CVE-2016-9103
CVE-2016-9104
CVE-2016-9105
CVE-2016-9106
SUSE-SU-2016:2988-1
Platform(s):SUSE Linux Enterprise Desktop 12 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • qemu-2.3.1-24.6 is installed
  • OR qemu-block-curl-2.3.1-24.6 is installed
  • OR qemu-ipxe-1.0.0-24.6 is installed
  • OR qemu-kvm-2.3.1-24.6 is installed
  • OR qemu-seabios-1.8.1-24.6 is installed
  • OR qemu-sgabios-8-24.6 is installed
  • OR qemu-tools-2.3.1-24.6 is installed
  • OR qemu-vgabios-1.8.1-24.6 is installed
  • OR qemu-x86-2.3.1-24.6 is installed
    • BACK