Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:0896-1 Final 1 1 2015-05-12T21:54:11Z current 2015-05-12T21:54:11Z 2015-05-12T21:54:11Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu qemu / kvm was updated to fix a security issue and some bugs. Security issue fixed: * CVE-2015-3456: Fixed a buffer overflow in the floppy drive emulation, which could be used to denial of service attacks or potential code execution against the host. * CVE-2015-1779: Fixed insufficient resource limiting in the VNC websockets decoder. Bugs fixed: - qemu truncates vhd images in virt-rescue (bsc#886378) - Update kvm-supported.txt with the current rbd support status. - enable rbd build on x86_64 (qemu-block-rbd package) (FATE#318349) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2015-200,SUSE-SLE-SERVER-12-2015-200 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20150896-1/ Link for SUSE-SU-2015:0896-1 https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00015.html E-Mail link for SUSE-SU-2015:0896-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/886378 SUSE Bug 886378 https://bugzilla.suse.com/924018 SUSE Bug 924018 https://bugzilla.suse.com/929339 SUSE Bug 929339 https://www.suse.com/security/cve/CVE-2015-1779/ SUSE CVE CVE-2015-1779 page https://www.suse.com/security/cve/CVE-2015-3456/ SUSE CVE CVE-2015-3456 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 qemu-2.0.2-46.1 qemu-block-curl-2.0.2-46.1 qemu-ipxe-1.0.0-46.1 qemu-kvm-2.0.2-46.1 qemu-seabios-1.7.4-46.1 qemu-sgabios-8-46.1 qemu-tools-2.0.2-46.1 qemu-vgabios-1.7.4-46.1 qemu-x86-2.0.2-46.1 qemu-block-rbd-2.0.2-46.1 qemu-guest-agent-2.0.2-46.1 qemu-lang-2.0.2-46.1 qemu-ppc-2.0.2-46.1 qemu-s390-2.0.2-46.1 qemu-2.0.2-46.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-block-curl-2.0.2-46.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-ipxe-1.0.0-46.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-kvm-2.0.2-46.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-seabios-1.7.4-46.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-sgabios-8-46.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-tools-2.0.2-46.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-vgabios-1.7.4-46.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-x86-2.0.2-46.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-2.0.2-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-block-curl-2.0.2-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-block-rbd-2.0.2-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-guest-agent-2.0.2-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-ipxe-1.0.0-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-kvm-2.0.2-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-lang-2.0.2-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-ppc-2.0.2-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-s390-2.0.2-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-seabios-1.7.4-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-sgabios-8-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-tools-2.0.2-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-vgabios-1.7.4-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-x86-2.0.2-46.1 as a component of SUSE Linux Enterprise Server 12 qemu-2.0.2-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-block-curl-2.0.2-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-block-rbd-2.0.2-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-guest-agent-2.0.2-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-ipxe-1.0.0-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-kvm-2.0.2-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-lang-2.0.2-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-ppc-2.0.2-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-s390-2.0.2-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-seabios-1.7.4-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-sgabios-8-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-tools-2.0.2-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-vgabios-1.7.4-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-x86-2.0.2-46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section. CVE-2015-1779 SUSE Linux Enterprise Desktop 12:qemu-2.0.2-46.1 SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-46.1 SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-46.1 SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-46.1 SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-46.1 SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-46.1 SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-46.1 SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-46.1 SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-46.1 SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-46.1 SUSE Linux Enterprise Server 12:qemu-sgabios-8-46.1 SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-46.1 SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-46.1 moderate 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150896-1/ https://www.suse.com/security/cve/CVE-2015-1779.html CVE-2015-1779 https://bugzilla.suse.com/924018 SUSE Bug 924018 https://bugzilla.suse.com/962632 SUSE Bug 962632 The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM. CVE-2015-3456 SUSE Linux Enterprise Desktop 12:qemu-2.0.2-46.1 SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-46.1 SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-46.1 SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-46.1 SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-46.1 SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-46.1 SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-46.1 SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-46.1 SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-46.1 SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-46.1 SUSE Linux Enterprise Server 12:qemu-sgabios-8-46.1 SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-46.1 SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-46.1 SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-46.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-46.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150896-1/ https://www.suse.com/security/cve/CVE-2015-3456.html CVE-2015-3456 https://bugzilla.suse.com/929339 SUSE Bug 929339 https://bugzilla.suse.com/932770 SUSE Bug 932770 https://bugzilla.suse.com/935900 SUSE Bug 935900