Security update for kvm SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:0010-1 Final 1 1 2016-01-04T09:22:40Z current 2016-01-04T09:22:40Z 2016-01-04T09:22:40Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for kvm This update for kvm fixes the following issues: Security issues fixed: - CVE-2015-7512: The receive packet size is now checked in the emulated pcnet driver, eliminating buffer overflow and potential security issue by malicious guest systems. (bsc#957162) - CVE-2015-8345: A infinite loop in processing command block list was fixed that could be exploit by malicious guest systems (bsc#956829). Other bugs fixed: - To assist users past the migration incompatibility discussed in bsc#950590 (restore migration compatibility with SLE11 SP3 and SLE12, at the unfortunate expense to prior SLE11 SP4 kvm release compatability when a virtio-net device is used), print a message which references the support document TID 7017048. See https://www.suse.com/support/kb/doc.php?id=7017048 - Fix cases of wrong clock values in kvmclock timekeeping (bsc#947164 and bsc#953187) - Enforce pxe rom sizes to ensure migration compatibility. (bsc#950590) - Fix kvm live migration fails between sles11 sp3 and sp4 (bsc#950590) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sledsp4-kvm-12293,slessp4-kvm-12293 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20160010-1/ Link for SUSE-SU-2016:0010-1 https://lists.opensuse.org/opensuse-security-announce/2016-01/msg00000.html E-Mail link for SUSE-SU-2016:0010-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/947164 SUSE Bug 947164 https://bugzilla.suse.com/950590 SUSE Bug 950590 https://bugzilla.suse.com/953187 SUSE Bug 953187 https://bugzilla.suse.com/956829 SUSE Bug 956829 https://bugzilla.suse.com/957162 SUSE Bug 957162 https://www.suse.com/security/cve/CVE-2015-7512/ SUSE CVE CVE-2015-7512 page https://www.suse.com/security/cve/CVE-2015-8345/ SUSE CVE CVE-2015-8345 page SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 kvm-1.4.2-35.1 kvm-1.4.2-35.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 kvm-1.4.2-35.1 as a component of SUSE Linux Enterprise Server 11 SP4 kvm-1.4.2-35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet. CVE-2015-7512 SUSE Linux Enterprise Desktop 11 SP4:kvm-1.4.2-35.1 SUSE Linux Enterprise Server 11 SP4:kvm-1.4.2-35.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:kvm-1.4.2-35.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20160010-1/ https://www.suse.com/security/cve/CVE-2015-7512.html CVE-2015-7512 https://bugzilla.suse.com/957162 SUSE Bug 957162 https://bugzilla.suse.com/962360 SUSE Bug 962360 The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash and infinite loop) via vectors involving the command block list. CVE-2015-8345 SUSE Linux Enterprise Desktop 11 SP4:kvm-1.4.2-35.1 SUSE Linux Enterprise Server 11 SP4:kvm-1.4.2-35.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:kvm-1.4.2-35.1 moderate 5.2 AV:A/AC:M/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20160010-1/ https://www.suse.com/security/cve/CVE-2015-8345.html CVE-2015-8345 https://bugzilla.suse.com/956829 SUSE Bug 956829 https://bugzilla.suse.com/956832 SUSE Bug 956832