qemu: VT100 emulation vulnerability

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."...

Important: Red Hat Security Advisory: qemu-kvm security update

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kvm security update

83-249.0.1.el58.5 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch 83-249.el58.5 - kvm-console-bounds-check-whenever-changing-the-cursor-du-58.patch bz851255 - CVE: CVE-2012-3515 - Resolves: bz851255 EMBARGOED CVE-2012-3515 qemu/kvm: VT100...

SUSE-SU-2015:0929-1 Security update for kvm

The kvm qemu vt100 emulation was affected by a problem where specific vt100 sequences could have been used by guest users to affect the host. CVE-2012-3515 aka XSA-17. Also a temp file race was fixed. CVE-2012-2652 Security Issue reference: CVE-2012-3515 CVE-2012-2652...