Security update for KVM SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:0943-1 Final 1 1 2013-06-24T20:56:39Z current 2013-06-24T20:56:39Z 2013-06-24T20:56:39Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for KVM This update fixes a file permission issue with qga (the QEMU Guest Agent) from the qemu/kvm package and includes several bug-fixes. (bnc#818182) (CVE-2013-2007) (bnc#786813) (bnc#725008) (bnc#712137) (bnc#824340) Security Issues: * CVE-2013-2007 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2007> The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slessp2-kvm Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20150943-1/ Link for SUSE-SU-2015:0943-1 https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00024.html E-Mail link for SUSE-SU-2015:0943-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/709405 SUSE Bug 709405 https://bugzilla.suse.com/712137 SUSE Bug 712137 https://bugzilla.suse.com/722643 SUSE Bug 722643 https://bugzilla.suse.com/722958 SUSE Bug 722958 https://bugzilla.suse.com/724813 SUSE Bug 724813 https://bugzilla.suse.com/725008 SUSE Bug 725008 https://bugzilla.suse.com/747339 SUSE Bug 747339 https://bugzilla.suse.com/753313 SUSE Bug 753313 https://bugzilla.suse.com/757031 SUSE Bug 757031 https://bugzilla.suse.com/764526 SUSE Bug 764526 https://bugzilla.suse.com/770153 SUSE Bug 770153 https://bugzilla.suse.com/772586 SUSE Bug 772586 https://bugzilla.suse.com/777084 SUSE Bug 777084 https://bugzilla.suse.com/786813 SUSE Bug 786813 https://bugzilla.suse.com/818182 SUSE Bug 818182 https://bugzilla.suse.com/824340 SUSE Bug 824340 https://bugzilla.suse.com/834196 SUSE Bug 834196 https://bugzilla.suse.com/929339 SUSE Bug 929339 https://www.suse.com/security/cve/CVE-2012-2652/ SUSE CVE CVE-2012-2652 page https://www.suse.com/security/cve/CVE-2012-3515/ SUSE CVE CVE-2012-3515 page https://www.suse.com/security/cve/CVE-2013-2007/ SUSE CVE CVE-2013-2007 page https://www.suse.com/security/cve/CVE-2015-3456/ SUSE CVE CVE-2015-3456 page SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 11 SP2 kvm-0.15.1-0.27.1 kvm-0.15.1-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP2 kvm-0.15.1-0.27.1 as a component of SUSE Linux Enterprise Server 11 SP2-LTSS kvm-0.15.1-0.27.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite or read arbitrary files via a symlink attack on an unspecified temporary file. CVE-2012-2652 SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1 SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150943-1/ https://www.suse.com/security/cve/CVE-2012-2652.html CVE-2012-2652 https://bugzilla.suse.com/764526 SUSE Bug 764526 Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space." CVE-2012-3515 SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1 SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150943-1/ https://www.suse.com/security/cve/CVE-2012-3515.html CVE-2012-3515 https://bugzilla.suse.com/777084 SUSE Bug 777084 The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files. CVE-2013-2007 SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1 SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150943-1/ https://www.suse.com/security/cve/CVE-2013-2007.html CVE-2013-2007 https://bugzilla.suse.com/818181 SUSE Bug 818181 https://bugzilla.suse.com/818182 SUSE Bug 818182 https://bugzilla.suse.com/818183 SUSE Bug 818183 The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM. CVE-2015-3456 SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1 SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150943-1/ https://www.suse.com/security/cve/CVE-2015-3456.html CVE-2015-3456 https://bugzilla.suse.com/929339 SUSE Bug 929339 https://bugzilla.suse.com/932770 SUSE Bug 932770 https://bugzilla.suse.com/935900 SUSE Bug 935900