Security update for qemu (important)

🗓️ 15 Jul 2017 00:10:54Reported by SuseType

opensuse

opensuse🔗 lists.opensuse.org👁 702 Views

Security update for qemu fixing multiple security vulnerabilitie

Reporter	Title	Published	Views	Family All 782
FreeBSD	xen-tools -- Cirrus VGA Heap overflow via display refresh	14 Mar 201700:00	–	freebsd
AlpineLinux	CVE-2017-5579	15 Mar 201715:00	–	alpinelinux
AlpineLinux	CVE-2017-6505	15 Mar 201714:00	–	alpinelinux
BDU FSTEC	The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure	23 Mar 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure	6 Apr 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the audio.c component of the QEMU hardware emulation software allows a hacker to trigger a service failure.	10 Aug 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `megasas_mmio_write` function in the QEMU hardware emulation software allows a hacker to exert unpredictable effects.	15 Sep 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the QEMU hardware emulation software, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.	15 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `virgl_cmd_get_capset` function in the `hw/display/virtio-gpu-3d.c` component of the QEMU hardware emulation software occurs due to reading data beyond the buffer’s acceptable limits. This allows an attacker to trigger a service failure.	2 Jul 202100:00	–	bdu_fstec
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in qemu-kvm and libguestfs affect SmartCloud Entry (CVE-2016-9603 CVE-2017-2633 CVE-2017-7718 CVE-2017-7980 CVE-2015-8869)	19 Jul 202000:49	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
openSUSE Leap	42.2	x86_64	qemu-block-curl-debuginfo	2.6.2-31.3.3	qemu-block-curl-debuginfo-2.6.2-31.3.3.x86_64.rpm
openSUSE Leap	42.2	x86_64	qemu-block-iscsi	2.6.2-31.3.3	qemu-block-iscsi-2.6.2-31.3.3.x86_64.rpm
openSUSE Leap	42.2	x86_64	qemu-extra	2.6.2-31.3.3	qemu-extra-2.6.2-31.3.3.x86_64.rpm
openSUSE Leap	42.2	noarch	qemu-seabios	1.9.1-31.3.3	qemu-seabios-1.9.1-31.3.3.noarch.rpm
openSUSE Leap	42.2	x86_64	qemu-lang	2.6.2-31.3.3	qemu-lang-2.6.2-31.3.3.x86_64.rpm
openSUSE Leap	42.2	x86_64	qemu-ppc-debuginfo	2.6.2-31.3.3	qemu-ppc-debuginfo-2.6.2-31.3.3.x86_64.rpm
openSUSE Leap	42.2	i586	qemu-testsuite	2.6.2-31.3.6	qemu-testsuite-2.6.2-31.3.6.i586.rpm
openSUSE Leap	42.2	x86_64	qemu-x86	2.6.2-31.3.3	qemu-x86-2.6.2-31.3.3.x86_64.rpm
openSUSE Leap	42.2	i586	qemu-tools-debuginfo	2.6.2-31.3.3	qemu-tools-debuginfo-2.6.2-31.3.3.i586.rpm
openSUSE Leap	42.2	i586	qemu-arm	2.6.2-31.3.3	qemu-arm-2.6.2-31.3.3.i586.rpm

Source	Link
bugzilla	www.bugzilla.suse.com/1035950
bugzilla	www.bugzilla.suse.com/1037242
bugzilla	www.bugzilla.suse.com/1020427
bugzilla	www.bugzilla.suse.com/1043296
bugzilla	www.bugzilla.suse.com/1042801
bugzilla	www.bugzilla.suse.com/1031142
bugzilla	www.bugzilla.suse.com/1017084
bugzilla	www.bugzilla.suse.com/1035406
bugzilla	www.bugzilla.suse.com/1028184
bugzilla	www.bugzilla.suse.com/1025311