SUSE SLES11 Security Update : kvm (SUSE-SU-2018:3975-1)

This update for kvm fixes the following issues : Security issues fixed : CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use...

qemu security update

15:3.0.0-1.el7 - net: ignore packet size greater than INTMAX Jason Wang Orabug: 28763782 CVE-2018-17963 - pcnet: fix possible buffer overflow Jason Wang Orabug: 28763774 CVE-2018-17962 - rtl8139: fix possible out of bound access Jason Wang Orabug: 28763765 CVE-2018-17958 - ne2000: fix possible ou...

qemu security update

12:2.9.0-17.el7 - i386: Remove generic SMT thread check Babu Moger Orabug: 28676425 - pc: Fix typo on PCCOMPAT212 Eduardo Habkost Orabug: 28676425 - i386: Enable TOPOEXT feature on AMD EPYC CPU Babu Moger Orabug: 28676425 - net: ignore packet size greater than INTMAX Jason Wang Orabug: 28762625...

CVE-2018-15746

Technical details beyond the initial description are not provided in the connected documents. Public sources here only restate the vulnerability concept without specifics; monitor for updates and new disclosures.

CVE-2017-15746

CVE-2017-15746 affects IrfanView 4.50 (64‑bit) with the CADImage plugin 12.0.0.5. A crafted DWG file can trigger a denial of service and possibly other impact due to a faulting address control in CADIMAGE (starting at CADIMAGE+0x3d21b3). Connected sources corroborate a DoS/remote impact scenario ...