Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:0489-1 Final 1 1 2019-02-26T07:40:31Z current 2019-02-26T07:40:31Z 2019-02-26T07:40:31Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: Security issues fixed: - CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation (bsc#1123156). - CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks in usb-mtp (bsc#1119493). - CVE-2018-19489: Fixed a denial of service vulnerability in virtfs (bsc#1117275). - CVE-2018-19364: Fixed a use-after-free if the virtfs interface resulting in a denial of service (bsc#1116717). - CVE-2018-7858: Fixed a denial of service which could occur while updating the VGA display, after guest has adjusted the display dimensions (bsc#1084604). - CVE-2017-13673: Fixed a denial of service in the cpu_physical_memory_snapshot_get_dirty function. - CVE-2017-13672: Fixed a denial of service via vectors involving display update. Non-security issues fixed: - Fixed bad guest time after migration (bsc#1113231). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-489,SUSE-OpenStack-Cloud-7-2019-489,SUSE-SLE-SAP-12-SP2-2019-489,SUSE-SLE-SERVER-12-SP2-2019-489,SUSE-SLE-SERVER-12-SP2-BCL-2019-489,SUSE-Storage-4-2019-489 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20190489-1/ Link for SUSE-SU-2019:0489-1 https://lists.suse.com/pipermail/sle-security-updates/2019-February/005153.html E-Mail link for SUSE-SU-2019:0489-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1084604 SUSE Bug 1084604 https://bugzilla.suse.com/1113231 SUSE Bug 1113231 https://bugzilla.suse.com/1116717 SUSE Bug 1116717 https://bugzilla.suse.com/1117275 SUSE Bug 1117275 https://bugzilla.suse.com/1119493 SUSE Bug 1119493 https://bugzilla.suse.com/1123156 SUSE Bug 1123156 https://www.suse.com/security/cve/CVE-2017-13672/ SUSE CVE CVE-2017-13672 page https://www.suse.com/security/cve/CVE-2017-13673/ SUSE CVE CVE-2017-13673 page https://www.suse.com/security/cve/CVE-2018-16872/ SUSE CVE CVE-2018-16872 page https://www.suse.com/security/cve/CVE-2018-19364/ SUSE CVE CVE-2018-19364 page https://www.suse.com/security/cve/CVE-2018-19489/ SUSE CVE CVE-2018-19489 page https://www.suse.com/security/cve/CVE-2018-7858/ SUSE CVE CVE-2018-7858 page https://www.suse.com/security/cve/CVE-2019-6778/ SUSE CVE CVE-2019-6778 page SUSE Enterprise Storage 4 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE OpenStack Cloud 7 qemu-2.6.2-41.49.1 qemu-arm-2.6.2-41.49.1 qemu-block-curl-2.6.2-41.49.1 qemu-block-dmg-2.6.2-41.49.1 qemu-block-iscsi-2.6.2-41.49.1 qemu-block-rbd-2.6.2-41.49.1 qemu-block-ssh-2.6.2-41.49.1 qemu-extra-2.6.2-41.49.1 qemu-guest-agent-2.6.2-41.49.1 qemu-ipxe-1.0.0-41.49.1 qemu-kvm-2.6.2-41.49.1 qemu-lang-2.6.2-41.49.1 qemu-linux-user-2.6.2-41.49.1 qemu-ppc-2.6.2-41.49.1 qemu-s390-2.6.2-41.49.1 qemu-seabios-1.9.1-41.49.1 qemu-sgabios-8-41.49.1 qemu-testsuite-2.6.2-41.49.1 qemu-tools-2.6.2-41.49.1 qemu-vgabios-1.9.1-41.49.1 qemu-x86-2.6.2-41.49.1 qemu-2.6.2-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-block-curl-2.6.2-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-block-rbd-2.6.2-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-block-ssh-2.6.2-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-guest-agent-2.6.2-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-ipxe-1.0.0-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-kvm-2.6.2-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-lang-2.6.2-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-seabios-1.9.1-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-sgabios-8-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-tools-2.6.2-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-vgabios-1.9.1-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-x86-2.6.2-41.49.1 as a component of SUSE Enterprise Storage 4 qemu-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-block-curl-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-block-rbd-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-block-ssh-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-guest-agent-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-ipxe-1.0.0-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-kvm-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-lang-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-seabios-1.9.1-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-sgabios-8-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-tools-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-vgabios-1.9.1-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-x86-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL qemu-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-block-curl-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-block-rbd-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-block-ssh-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-guest-agent-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-ipxe-1.0.0-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-kvm-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-lang-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-ppc-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-s390-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-seabios-1.9.1-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-sgabios-8-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-tools-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-vgabios-1.9.1-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-x86-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS qemu-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-block-curl-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-block-rbd-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-block-ssh-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-guest-agent-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-ipxe-1.0.0-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-kvm-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-lang-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-ppc-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-seabios-1.9.1-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-sgabios-8-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-tools-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-vgabios-1.9.1-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-x86-2.6.2-41.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 qemu-2.6.2-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-block-curl-2.6.2-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-block-rbd-2.6.2-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-block-ssh-2.6.2-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-guest-agent-2.6.2-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-ipxe-1.0.0-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-kvm-2.6.2-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-lang-2.6.2-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-s390-2.6.2-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-seabios-1.9.1-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-sgabios-8-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-tools-2.6.2-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-vgabios-1.9.1-41.49.1 as a component of SUSE OpenStack Cloud 7 qemu-x86-2.6.2-41.49.1 as a component of SUSE OpenStack Cloud 7 QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update. CVE-2017-13672 SUSE Enterprise Storage 4:qemu-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-curl-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-rbd-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-ssh-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-guest-agent-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-ipxe-1.0.0-41.49.1 SUSE Enterprise Storage 4:qemu-kvm-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-lang-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-seabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-sgabios-8-41.49.1 SUSE Enterprise Storage 4:qemu-tools-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-vgabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-s390-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-curl-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-rbd-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-ssh-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-guest-agent-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-ipxe-1.0.0-41.49.1 SUSE OpenStack Cloud 7:qemu-kvm-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-lang-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-s390-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-seabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-sgabios-8-41.49.1 SUSE OpenStack Cloud 7:qemu-tools-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-vgabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-x86-2.6.2-41.49.1 low 2.3 AV:A/AC:M/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190489-1/ https://www.suse.com/security/cve/CVE-2017-13672.html CVE-2017-13672 https://bugzilla.suse.com/1056334 SUSE Bug 1056334 https://bugzilla.suse.com/1056336 SUSE Bug 1056336 https://bugzilla.suse.com/1084604 SUSE Bug 1084604 The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion failure) in the cpu_physical_memory_snapshot_get_dirty function. CVE-2017-13673 SUSE Enterprise Storage 4:qemu-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-curl-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-rbd-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-ssh-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-guest-agent-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-ipxe-1.0.0-41.49.1 SUSE Enterprise Storage 4:qemu-kvm-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-lang-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-seabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-sgabios-8-41.49.1 SUSE Enterprise Storage 4:qemu-tools-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-vgabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-s390-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-curl-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-rbd-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-ssh-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-guest-agent-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-ipxe-1.0.0-41.49.1 SUSE OpenStack Cloud 7:qemu-kvm-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-lang-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-s390-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-seabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-sgabios-8-41.49.1 SUSE OpenStack Cloud 7:qemu-tools-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-vgabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-x86-2.6.2-41.49.1 important 2.3 AV:A/AC:M/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190489-1/ https://www.suse.com/security/cve/CVE-2017-13673.html CVE-2017-13673 https://bugzilla.suse.com/1056386 SUSE Bug 1056386 https://bugzilla.suse.com/1056387 SUSE Bug 1056387 https://bugzilla.suse.com/1084604 SUSE Bug 1084604 A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and directories in usb_mtp_object_readdir doesn't consider that the underlying filesystem may have changed since the time lstat(2) was called in usb_mtp_object_alloc, a classical TOCTTOU problem. An attacker with write access to the host filesystem shared with a guest can use this property to navigate the host filesystem in the context of the QEMU process and read any file the QEMU process has access to. Access to the filesystem may be local or via a network share protocol such as CIFS. CVE-2018-16872 SUSE Enterprise Storage 4:qemu-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-curl-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-rbd-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-ssh-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-guest-agent-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-ipxe-1.0.0-41.49.1 SUSE Enterprise Storage 4:qemu-kvm-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-lang-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-seabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-sgabios-8-41.49.1 SUSE Enterprise Storage 4:qemu-tools-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-vgabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-s390-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-curl-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-rbd-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-ssh-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-guest-agent-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-ipxe-1.0.0-41.49.1 SUSE OpenStack Cloud 7:qemu-kvm-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-lang-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-s390-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-seabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-sgabios-8-41.49.1 SUSE OpenStack Cloud 7:qemu-tools-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-vgabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-x86-2.6.2-41.49.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190489-1/ https://www.suse.com/security/cve/CVE-2018-16872.html CVE-2018-16872 https://bugzilla.suse.com/1119493 SUSE Bug 1119493 https://bugzilla.suse.com/1119494 SUSE Bug 1119494 hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to (for example) a use-after-free outcome. CVE-2018-19364 SUSE Enterprise Storage 4:qemu-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-curl-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-rbd-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-ssh-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-guest-agent-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-ipxe-1.0.0-41.49.1 SUSE Enterprise Storage 4:qemu-kvm-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-lang-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-seabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-sgabios-8-41.49.1 SUSE Enterprise Storage 4:qemu-tools-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-vgabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-s390-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-curl-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-rbd-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-ssh-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-guest-agent-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-ipxe-1.0.0-41.49.1 SUSE OpenStack Cloud 7:qemu-kvm-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-lang-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-s390-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-seabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-sgabios-8-41.49.1 SUSE OpenStack Cloud 7:qemu-tools-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-vgabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-x86-2.6.2-41.49.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190489-1/ https://www.suse.com/security/cve/CVE-2018-19364.html CVE-2018-19364 https://bugzilla.suse.com/1116717 SUSE Bug 1116717 https://bugzilla.suse.com/1116726 SUSE Bug 1116726 v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race condition during file renaming. CVE-2018-19489 SUSE Enterprise Storage 4:qemu-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-curl-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-rbd-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-ssh-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-guest-agent-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-ipxe-1.0.0-41.49.1 SUSE Enterprise Storage 4:qemu-kvm-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-lang-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-seabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-sgabios-8-41.49.1 SUSE Enterprise Storage 4:qemu-tools-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-vgabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-s390-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-curl-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-rbd-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-ssh-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-guest-agent-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-ipxe-1.0.0-41.49.1 SUSE OpenStack Cloud 7:qemu-kvm-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-lang-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-s390-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-seabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-sgabios-8-41.49.1 SUSE OpenStack Cloud 7:qemu-tools-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-vgabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-x86-2.6.2-41.49.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190489-1/ https://www.suse.com/security/cve/CVE-2018-19489.html CVE-2018-19489 https://bugzilla.suse.com/1117275 SUSE Bug 1117275 https://bugzilla.suse.com/1117279 SUSE Bug 1117279 Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorrect region calculation when updating VGA display. CVE-2018-7858 SUSE Enterprise Storage 4:qemu-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-curl-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-rbd-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-ssh-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-guest-agent-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-ipxe-1.0.0-41.49.1 SUSE Enterprise Storage 4:qemu-kvm-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-lang-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-seabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-sgabios-8-41.49.1 SUSE Enterprise Storage 4:qemu-tools-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-vgabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-s390-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-curl-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-rbd-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-ssh-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-guest-agent-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-ipxe-1.0.0-41.49.1 SUSE OpenStack Cloud 7:qemu-kvm-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-lang-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-s390-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-seabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-sgabios-8-41.49.1 SUSE OpenStack Cloud 7:qemu-tools-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-vgabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-x86-2.6.2-41.49.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190489-1/ https://www.suse.com/security/cve/CVE-2018-7858.html CVE-2018-7858 https://bugzilla.suse.com/1084604 SUSE Bug 1084604 In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow. CVE-2019-6778 SUSE Enterprise Storage 4:qemu-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-curl-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-rbd-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-block-ssh-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-guest-agent-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-ipxe-1.0.0-41.49.1 SUSE Enterprise Storage 4:qemu-kvm-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-lang-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-seabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-sgabios-8-41.49.1 SUSE Enterprise Storage 4:qemu-tools-2.6.2-41.49.1 SUSE Enterprise Storage 4:qemu-vgabios-1.9.1-41.49.1 SUSE Enterprise Storage 4:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-BCL:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-s390-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server 12 SP2-LTSS:qemu-x86-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-curl-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-rbd-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-block-ssh-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-guest-agent-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-ipxe-1.0.0-41.49.1 SUSE OpenStack Cloud 7:qemu-kvm-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-lang-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-s390-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-seabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-sgabios-8-41.49.1 SUSE OpenStack Cloud 7:qemu-tools-2.6.2-41.49.1 SUSE OpenStack Cloud 7:qemu-vgabios-1.9.1-41.49.1 SUSE OpenStack Cloud 7:qemu-x86-2.6.2-41.49.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190489-1/ https://www.suse.com/security/cve/CVE-2019-6778.html CVE-2019-6778 https://bugzilla.suse.com/1123156 SUSE Bug 1123156 https://bugzilla.suse.com/1123157 SUSE Bug 1123157 https://bugzilla.suse.com/1178658 SUSE Bug 1178658