Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:4086-1 Final 1 1 2018-12-12T08:20:05Z current 2018-12-12T08:20:05Z 2018-12-12T08:20:05Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: Security issue fixed: - CVE-2018-16847: Fixed an out of bounds r/w buffer access in cmb operations (bsc#1114529). Non-security issue fixed: - Fixed serial console issue in SLES 12 SP2 that triggered a qemu-kvm bug (bsc#1108474). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-Module-Basesystem-15-2018-2913,SUSE-SLE-Module-Development-Tools-OBS-15-2018-2913,SUSE-SLE-Module-Server-Applications-15-2018-2913 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20184086-1/ Link for SUSE-SU-2018:4086-1 https://lists.suse.com/pipermail/sle-security-updates/2018-December/004955.html E-Mail link for SUSE-SU-2018:4086-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1108474 SUSE Bug 1108474 https://bugzilla.suse.com/1114529 SUSE Bug 1114529 https://www.suse.com/security/cve/CVE-2018-16847/ SUSE CVE CVE-2018-16847 page SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Server Applications 15 qemu-tools-2.11.2-9.17.1 qemu-2.11.2-9.17.1 qemu-arm-2.11.2-9.17.1 qemu-block-curl-2.11.2-9.17.1 qemu-block-iscsi-2.11.2-9.17.1 qemu-block-rbd-2.11.2-9.17.1 qemu-block-ssh-2.11.2-9.17.1 qemu-guest-agent-2.11.2-9.17.1 qemu-ipxe-1.0.0+-9.17.1 qemu-kvm-2.11.2-9.17.1 qemu-lang-2.11.2-9.17.1 qemu-ppc-2.11.2-9.17.1 qemu-s390-2.11.2-9.17.1 qemu-seabios-1.11.0-9.17.1 qemu-sgabios-8-9.17.1 qemu-vgabios-1.11.0-9.17.1 qemu-x86-2.11.2-9.17.1 qemu-tools-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 qemu-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-arm-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-block-curl-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-block-iscsi-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-block-rbd-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-block-ssh-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-guest-agent-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-ipxe-1.0.0+-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-kvm-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-lang-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-ppc-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-s390-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-seabios-1.11.0-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-sgabios-8-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-vgabios-1.11.0-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 qemu-x86-2.11.2-9.17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU process. CVE-2018-16847 SUSE Linux Enterprise Module for Basesystem 15:qemu-tools-2.11.2-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-2.11.2-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-arm-2.11.2-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-block-curl-2.11.2-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-block-iscsi-2.11.2-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-block-rbd-2.11.2-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-block-ssh-2.11.2-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-guest-agent-2.11.2-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-ipxe-1.0.0+-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-kvm-2.11.2-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-lang-2.11.2-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-ppc-2.11.2-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-s390-2.11.2-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-seabios-1.11.0-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-sgabios-8-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-vgabios-1.11.0-9.17.1 SUSE Linux Enterprise Module for Server Applications 15:qemu-x86-2.11.2-9.17.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20184086-1/ https://www.suse.com/security/cve/CVE-2018-16847.html CVE-2018-16847 https://bugzilla.suse.com/1114529 SUSE Bug 1114529 https://bugzilla.suse.com/1114540 SUSE Bug 1114540