Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:2956-1 Final 1 1 2019-11-12T18:15:08Z current 2019-11-12T18:15:08Z 2019-11-12T18:15:08Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - Remove a backslash '\' escape character from 80-qemu-ga.rules (bsc#1153358) Unlike sles 15 or newer guests, The udev rule file of qemu guest agent in sles 12 sp4 or newer guest only needs one escape character. - Fix use-after-free in slirp (CVE-2018-20126 bsc#1119991) - Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bsc#1146873) - Expose taa-no 'feature', indicating CPU does not have the TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506) - Expose pschange-mc-no 'feature', indicating CPU does not have the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP4 The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-2956,SUSE-SLE-DESKTOP-12-SP4-2019-2956,SUSE-SLE-SERVER-12-SP4-2019-2956 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20192956-1/ Link for SUSE-SU-2019:2956-1 https://lists.suse.com/pipermail/sle-security-updates/2019-November/006129.html E-Mail link for SUSE-SU-2019:2956-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1119991 SUSE Bug 1119991 https://bugzilla.suse.com/1146873 SUSE Bug 1146873 https://bugzilla.suse.com/1152506 SUSE Bug 1152506 https://bugzilla.suse.com/1153358 SUSE Bug 1153358 https://bugzilla.suse.com/1155812 SUSE Bug 1155812 https://www.suse.com/security/cve/CVE-2018-12207/ SUSE CVE CVE-2018-12207 page https://www.suse.com/security/cve/CVE-2018-20126/ SUSE CVE CVE-2018-20126 page https://www.suse.com/security/cve/CVE-2019-11135/ SUSE CVE CVE-2019-11135 page https://www.suse.com/security/cve/CVE-2019-12068/ SUSE CVE CVE-2019-12068 page SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-2.11.2-5.23.2 qemu-arm-2.11.2-5.23.2 qemu-block-curl-2.11.2-5.23.2 qemu-block-dmg-2.11.2-5.23.2 qemu-block-iscsi-2.11.2-5.23.2 qemu-block-rbd-2.11.2-5.23.2 qemu-block-ssh-2.11.2-5.23.2 qemu-extra-2.11.2-5.23.2 qemu-guest-agent-2.11.2-5.23.2 qemu-ipxe-1.0.0+-5.23.2 qemu-kvm-2.11.2-5.23.2 qemu-lang-2.11.2-5.23.2 qemu-linux-user-2.11.2-5.23.2 qemu-ppc-2.11.2-5.23.2 qemu-s390-2.11.2-5.23.2 qemu-seabios-1.11.0-5.23.2 qemu-sgabios-8-5.23.2 qemu-tools-2.11.2-5.23.2 qemu-vgabios-1.11.0-5.23.2 qemu-x86-2.11.2-5.23.2 qemu-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 qemu-block-curl-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 qemu-ipxe-1.0.0+-5.23.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 qemu-kvm-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 qemu-seabios-1.11.0-5.23.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 qemu-sgabios-8-5.23.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 qemu-tools-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 qemu-vgabios-1.11.0-5.23.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 qemu-x86-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 qemu-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-arm-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-block-curl-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-block-iscsi-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-block-rbd-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-block-ssh-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-guest-agent-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-ipxe-1.0.0+-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-kvm-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-lang-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-ppc-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-s390-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-seabios-1.11.0-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-sgabios-8-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-tools-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-vgabios-1.11.0-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-x86-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server 12 SP4 qemu-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-arm-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-block-curl-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-block-iscsi-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-block-rbd-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-block-ssh-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-guest-agent-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-ipxe-1.0.0+-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-kvm-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-lang-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-ppc-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-s390-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-seabios-1.11.0-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-sgabios-8-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-tools-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-vgabios-1.11.0-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-x86-2.11.2-5.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access. CVE-2018-12207 SUSE Linux Enterprise Desktop 12 SP4:qemu-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-block-curl-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-ipxe-1.0.0+-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-kvm-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-seabios-1.11.0-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-sgabios-8-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-tools-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-vgabios-1.11.0-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-x86-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-arm-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-curl-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-iscsi-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-rbd-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-ssh-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-guest-agent-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-ipxe-1.0.0+-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-kvm-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-lang-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-ppc-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-s390-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-seabios-1.11.0-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-sgabios-8-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-tools-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-vgabios-1.11.0-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-x86-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-arm-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-s390-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.23.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192956-1/ https://www.suse.com/security/cve/CVE-2018-12207.html CVE-2018-12207 https://bugzilla.suse.com/1117665 SUSE Bug 1117665 https://bugzilla.suse.com/1139073 SUSE Bug 1139073 https://bugzilla.suse.com/1152505 SUSE Bug 1152505 https://bugzilla.suse.com/1155812 SUSE Bug 1155812 https://bugzilla.suse.com/1155817 SUSE Bug 1155817 https://bugzilla.suse.com/1155945 SUSE Bug 1155945 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled. CVE-2018-20126 SUSE Linux Enterprise Desktop 12 SP4:qemu-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-block-curl-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-ipxe-1.0.0+-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-kvm-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-seabios-1.11.0-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-sgabios-8-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-tools-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-vgabios-1.11.0-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-x86-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-arm-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-curl-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-iscsi-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-rbd-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-ssh-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-guest-agent-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-ipxe-1.0.0+-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-kvm-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-lang-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-ppc-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-s390-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-seabios-1.11.0-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-sgabios-8-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-tools-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-vgabios-1.11.0-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-x86-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-arm-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-s390-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.23.2 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192956-1/ https://www.suse.com/security/cve/CVE-2018-20126.html CVE-2018-20126 https://bugzilla.suse.com/1119991 SUSE Bug 1119991 TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. CVE-2019-11135 SUSE Linux Enterprise Desktop 12 SP4:qemu-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-block-curl-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-ipxe-1.0.0+-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-kvm-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-seabios-1.11.0-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-sgabios-8-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-tools-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-vgabios-1.11.0-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-x86-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-arm-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-curl-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-iscsi-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-rbd-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-ssh-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-guest-agent-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-ipxe-1.0.0+-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-kvm-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-lang-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-ppc-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-s390-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-seabios-1.11.0-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-sgabios-8-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-tools-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-vgabios-1.11.0-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-x86-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-arm-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-s390-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.23.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192956-1/ https://www.suse.com/security/cve/CVE-2019-11135.html CVE-2019-11135 https://bugzilla.suse.com/1139073 SUSE Bug 1139073 https://bugzilla.suse.com/1152497 SUSE Bug 1152497 https://bugzilla.suse.com/1152505 SUSE Bug 1152505 https://bugzilla.suse.com/1152506 SUSE Bug 1152506 https://bugzilla.suse.com/1160120 SUSE Bug 1160120 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well. CVE-2019-12068 SUSE Linux Enterprise Desktop 12 SP4:qemu-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-block-curl-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-ipxe-1.0.0+-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-kvm-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-seabios-1.11.0-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-sgabios-8-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-tools-2.11.2-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-vgabios-1.11.0-5.23.2 SUSE Linux Enterprise Desktop 12 SP4:qemu-x86-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-arm-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-curl-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-iscsi-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-rbd-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-block-ssh-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-guest-agent-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-ipxe-1.0.0+-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-kvm-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-lang-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-ppc-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-s390-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-seabios-1.11.0-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-sgabios-8-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-tools-2.11.2-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-vgabios-1.11.0-5.23.2 SUSE Linux Enterprise Server 12 SP4:qemu-x86-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-arm-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-s390-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0-5.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.23.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192956-1/ https://www.suse.com/security/cve/CVE-2019-12068.html CVE-2019-12068 https://bugzilla.suse.com/1146873 SUSE Bug 1146873 https://bugzilla.suse.com/1146874 SUSE Bug 1146874 https://bugzilla.suse.com/1178658 SUSE Bug 1178658