Lucene search

K
suseSuseOPENSUSE-SU-2018:2402-1
HistoryAug 17, 2018 - 12:15 p.m.

Security update for qemu (moderate)

2018-08-1712:15:11
lists.opensuse.org
78

0.002 Low

EPSS

Percentile

52.2%

This update for qemu to version 2.11.2 fixes the following issues:

Security issue fixed:

  • CVE-2018-11806: Fix heap buffer overflow issue that can happen while
    reassembling fragmented datagrams (bsc#1096223).
  • CVE-2018-3639: Mitigation functionality for Speculative Store Bypass
    issue in x86 (bsc#1087082).
  • CVE-2018-7550: Fix out of bounds read and write memory access,
    potentially leading to code execution (bsc#1083291)

Bug fixes:

  • bsc#1091695: SEV guest will not lauchh with qemu-system-x86_64 version
    2.11.1.
  • bsc#1094898: qemu-guest-agent service doesn’t work in version Leap 15.0.
  • bsc#1094725: virsh blockresize does not work with Xen qdisks.
  • bsc#1094913: QEMU crashes when starting a guest with more than 7.999TB.

This update was imported from the SUSE:SLE-15:Update update project.