Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:0349-1 Final 1 1 2015-02-10T19:17:01Z current 2015-02-10T19:17:01Z 2015-02-10T19:17:01Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu QEMU was updated to fix various bugs and security issues. Following security issues were fixed: CVE-2014-8106: Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU allowed local guest users to execute arbitrary code via vectors related to blit regions. CVE-2014-7840: The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allowed remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data. Also a bug was fixed where qemu-img convert could occasionaly corrupt images. (bsc#908380) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2015-88,SUSE-SLE-SERVER-12-2015-88 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20150349-1/ Link for SUSE-SU-2015:0349-1 https://lists.suse.com/pipermail/sle-security-updates/2015-February/001243.html E-Mail link for SUSE-SU-2015:0349-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/905097 SUSE Bug 905097 https://bugzilla.suse.com/907805 SUSE Bug 907805 https://bugzilla.suse.com/908380 SUSE Bug 908380 https://www.suse.com/security/cve/CVE-2014-7840/ SUSE CVE CVE-2014-7840 page https://www.suse.com/security/cve/CVE-2014-8106/ SUSE CVE CVE-2014-8106 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 qemu-2.0.2-42.1 qemu-block-curl-2.0.2-42.1 qemu-ipxe-1.0.0-42.1 qemu-kvm-2.0.2-42.1 qemu-seabios-1.7.4-42.1 qemu-sgabios-8-42.1 qemu-tools-2.0.2-42.1 qemu-vgabios-1.7.4-42.1 qemu-x86-2.0.2-42.1 qemu-guest-agent-2.0.2-42.1 qemu-lang-2.0.2-42.1 qemu-ppc-2.0.2-42.1 qemu-s390-2.0.2-42.1 qemu-2.0.2-42.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-block-curl-2.0.2-42.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-ipxe-1.0.0-42.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-kvm-2.0.2-42.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-seabios-1.7.4-42.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-sgabios-8-42.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-tools-2.0.2-42.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-vgabios-1.7.4-42.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-x86-2.0.2-42.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-2.0.2-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-block-curl-2.0.2-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-guest-agent-2.0.2-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-ipxe-1.0.0-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-kvm-2.0.2-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-lang-2.0.2-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-ppc-2.0.2-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-s390-2.0.2-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-seabios-1.7.4-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-sgabios-8-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-tools-2.0.2-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-vgabios-1.7.4-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-x86-2.0.2-42.1 as a component of SUSE Linux Enterprise Server 12 qemu-2.0.2-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-block-curl-2.0.2-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-guest-agent-2.0.2-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-ipxe-1.0.0-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-kvm-2.0.2-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-lang-2.0.2-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-ppc-2.0.2-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-s390-2.0.2-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-seabios-1.7.4-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-sgabios-8-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-tools-2.0.2-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-vgabios-1.7.4-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-x86-2.0.2-42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data. CVE-2014-7840 SUSE Linux Enterprise Desktop 12:qemu-2.0.2-42.1 SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-42.1 SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-42.1 SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-42.1 SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-42.1 SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-42.1 SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-42.1 SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-42.1 SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-42.1 SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-42.1 SUSE Linux Enterprise Server 12:qemu-sgabios-8-42.1 SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-42.1 SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-42.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150349-1/ https://www.suse.com/security/cve/CVE-2014-7840.html CVE-2014-7840 https://bugzilla.suse.com/905097 SUSE Bug 905097 Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320. CVE-2014-8106 SUSE Linux Enterprise Desktop 12:qemu-2.0.2-42.1 SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-42.1 SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-42.1 SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-42.1 SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-42.1 SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-42.1 SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-42.1 SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-42.1 SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-42.1 SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-42.1 SUSE Linux Enterprise Server 12:qemu-sgabios-8-42.1 SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-42.1 SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-42.1 SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-42.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-42.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150349-1/ https://www.suse.com/security/cve/CVE-2014-8106.html CVE-2014-8106 https://bugzilla.suse.com/1023004 SUSE Bug 1023004 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/907805 SUSE Bug 907805