Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1519-1 Final 1 1 2015-06-08T14:28:12Z current 2015-06-08T14:28:12Z 2015-06-08T14:28:12Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu qemu was updated to fix two security issues and augments one non-security bug fix. The following vulnerabilities were fixed: * CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to host escape (XSA-135) (bsc#932770) * CVE-2015-4037: Avoid predictable directory name for smb config (bsc#932267) The fix for the following non-security bug was improved: * bsc#893892: Use improved upstream patch for display issue affecting installs of SLES 11 VMs on SLES 12 The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2015-509,SUSE-SLE-SERVER-12-2015-509 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151519-1/ Link for SUSE-SU-2015:1519-1 https://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html E-Mail link for SUSE-SU-2015:1519-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/893892 SUSE Bug 893892 https://bugzilla.suse.com/932267 SUSE Bug 932267 https://bugzilla.suse.com/932770 SUSE Bug 932770 https://www.suse.com/security/cve/CVE-2015-3209/ SUSE CVE CVE-2015-3209 page https://www.suse.com/security/cve/CVE-2015-4037/ SUSE CVE CVE-2015-4037 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 qemu-2.0.2-48.4.1 qemu-block-curl-2.0.2-48.4.1 qemu-ipxe-1.0.0-48.4.1 qemu-kvm-2.0.2-48.4.1 qemu-seabios-1.7.4-48.4.1 qemu-sgabios-8-48.4.1 qemu-tools-2.0.2-48.4.1 qemu-vgabios-1.7.4-48.4.1 qemu-x86-2.0.2-48.4.1 qemu-block-rbd-2.0.2-48.4.1 qemu-guest-agent-2.0.2-48.4.1 qemu-lang-2.0.2-48.4.1 qemu-ppc-2.0.2-48.4.1 qemu-s390-2.0.2-48.4.1 qemu-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-block-curl-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-ipxe-1.0.0-48.4.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-kvm-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-seabios-1.7.4-48.4.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-sgabios-8-48.4.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-tools-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-vgabios-1.7.4-48.4.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-x86-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-block-curl-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-block-rbd-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-guest-agent-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-ipxe-1.0.0-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-kvm-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-lang-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-ppc-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-s390-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-seabios-1.7.4-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-sgabios-8-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-tools-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-vgabios-1.7.4-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-x86-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server 12 qemu-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-block-curl-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-block-rbd-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-guest-agent-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-ipxe-1.0.0-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-kvm-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-lang-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-ppc-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-s390-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-seabios-1.7.4-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-sgabios-8-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-tools-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-vgabios-1.7.4-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-x86-2.0.2-48.4.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set. CVE-2015-3209 SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.4.1 SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.4.1 SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.4.1 SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.4.1 SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.4.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151519-1/ https://www.suse.com/security/cve/CVE-2015-3209.html CVE-2015-3209 https://bugzilla.suse.com/932267 SUSE Bug 932267 https://bugzilla.suse.com/932770 SUSE Bug 932770 https://bugzilla.suse.com/932823 SUSE Bug 932823 The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.*-* files before the program. CVE-2015-4037 SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.4.1 SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.4.1 SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.4.1 SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.4.1 SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.4.1 SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.4.1 SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.4.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.4.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151519-1/ https://www.suse.com/security/cve/CVE-2015-4037.html CVE-2015-4037 https://bugzilla.suse.com/932267 SUSE Bug 932267 https://bugzilla.suse.com/950367 SUSE Bug 950367