Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1782-1 Final 1 1 2015-09-28T09:38:55Z current 2015-09-28T09:38:55Z 2015-09-28T09:38:55Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu qemu was updated to fix several security issues and bugs. The following vulnerabilities were fixed: - CVE-2015-5154: Heap-based buffer overflow in the IDE subsystem in QEMU, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands. (bsc#938344). - CVE-2015-5278: QEMU was vulnerable to an infinite loop issue that could occur when receiving packets over the network. (bsc#945989) - CVE-2015-5279: QEMU was vulnerable to a heap buffer overflow issue that could occur when receiving packets over the network. (bsc#945987) - CVE-2015-6855: QEMU was vulnerable to a divide by zero issue that could occur while executing an IDE command WIN_READ_NATIVE_MAX to determine the maximum size of a drive. (bsc#945404) - CVE-2014-7815: The set_pixel_format function in ui/vnc.c in QEMU allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value. (bsc#902737): Also these non-security issues were fixed: - bsc#937572: Fixed dictzip on big endian systems - bsc#934517: Fix 'info tlb' causes guest to freeze - bsc#934506: Fix vte monitor consol looks empy - bsc#937125: Fix parsing of scsi-disk wwn uint64 property - bsc#945778: Drop .probe hooks for DictZip and tar block drivers - bsc#937572: Fold common-obj-y -> block-obj-y change into original patches - bsc#928308,bsc#944017: Fix virtio-ccw index errors when initrd gets too large - bsc#936537: Fix possible qemu-img error when converting to compressed qcow2 image - bsc#939216: Fix reboot fail after install using uefi - bsc#943446: qemu-img convert doesn't create MB aligned VHDs anymore The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2015-715,SUSE-SLE-SERVER-12-2015-715 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151782-1/ Link for SUSE-SU-2015:1782-1 https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html E-Mail link for SUSE-SU-2015:1782-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/902737 SUSE Bug 902737 https://bugzilla.suse.com/928308 SUSE Bug 928308 https://bugzilla.suse.com/934506 SUSE Bug 934506 https://bugzilla.suse.com/934517 SUSE Bug 934517 https://bugzilla.suse.com/936537 SUSE Bug 936537 https://bugzilla.suse.com/937125 SUSE Bug 937125 https://bugzilla.suse.com/937572 SUSE Bug 937572 https://bugzilla.suse.com/938344 SUSE Bug 938344 https://bugzilla.suse.com/939216 SUSE Bug 939216 https://bugzilla.suse.com/943446 SUSE Bug 943446 https://bugzilla.suse.com/944017 SUSE Bug 944017 https://bugzilla.suse.com/945404 SUSE Bug 945404 https://bugzilla.suse.com/945778 SUSE Bug 945778 https://bugzilla.suse.com/945987 SUSE Bug 945987 https://bugzilla.suse.com/945989 SUSE Bug 945989 https://www.suse.com/security/cve/CVE-2014-7815/ SUSE CVE CVE-2014-7815 page https://www.suse.com/security/cve/CVE-2015-5154/ SUSE CVE CVE-2015-5154 page https://www.suse.com/security/cve/CVE-2015-5278/ SUSE CVE CVE-2015-5278 page https://www.suse.com/security/cve/CVE-2015-5279/ SUSE CVE CVE-2015-5279 page https://www.suse.com/security/cve/CVE-2015-6855/ SUSE CVE CVE-2015-6855 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 qemu-2.0.2-48.9.1 qemu-block-curl-2.0.2-48.9.1 qemu-ipxe-1.0.0-48.9.1 qemu-kvm-2.0.2-48.9.1 qemu-seabios-1.7.4-48.9.1 qemu-sgabios-8-48.9.1 qemu-tools-2.0.2-48.9.1 qemu-vgabios-1.7.4-48.9.1 qemu-x86-2.0.2-48.9.1 qemu-block-rbd-2.0.2-48.9.1 qemu-guest-agent-2.0.2-48.9.1 qemu-lang-2.0.2-48.9.1 qemu-ppc-2.0.2-48.9.1 qemu-s390-2.0.2-48.9.1 qemu-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-block-curl-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-ipxe-1.0.0-48.9.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-kvm-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-seabios-1.7.4-48.9.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-sgabios-8-48.9.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-tools-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-vgabios-1.7.4-48.9.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-x86-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-block-curl-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-block-rbd-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-guest-agent-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-ipxe-1.0.0-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-kvm-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-lang-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-ppc-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-s390-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-seabios-1.7.4-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-sgabios-8-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-tools-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-vgabios-1.7.4-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-x86-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server 12 qemu-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-block-curl-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-block-rbd-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-guest-agent-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-ipxe-1.0.0-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-kvm-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-lang-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-ppc-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-s390-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-seabios-1.7.4-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-sgabios-8-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-tools-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-vgabios-1.7.4-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-x86-2.0.2-48.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value. CVE-2014-7815 SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151782-1/ https://www.suse.com/security/cve/CVE-2014-7815.html CVE-2014-7815 https://bugzilla.suse.com/902737 SUSE Bug 902737 https://bugzilla.suse.com/962627 SUSE Bug 962627 Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands. CVE-2015-5154 SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151782-1/ https://www.suse.com/security/cve/CVE-2015-5154.html CVE-2015-5154 https://bugzilla.suse.com/938344 SUSE Bug 938344 https://bugzilla.suse.com/950367 SUSE Bug 950367 The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets. CVE-2015-5278 SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151782-1/ https://www.suse.com/security/cve/CVE-2015-5278.html CVE-2015-5278 https://bugzilla.suse.com/945989 SUSE Bug 945989 https://bugzilla.suse.com/964947 SUSE Bug 964947 Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets. CVE-2015-5279 SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151782-1/ https://www.suse.com/security/cve/CVE-2015-5279.html CVE-2015-5279 https://bugzilla.suse.com/945987 SUSE Bug 945987 hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash. CVE-2015-6855 SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151782-1/ https://www.suse.com/security/cve/CVE-2015-6855.html CVE-2015-6855 https://bugzilla.suse.com/945404 SUSE Bug 945404 https://bugzilla.suse.com/965156 SUSE Bug 965156