Lucene search

K
suseSuseOPENSUSE-SU-2018:2693-1
HistorySep 12, 2018 - 12:07 p.m.

Security update for qemu (moderate)

2018-09-1212:07:50
lists.opensuse.org
29

0.141 Low

EPSS

Percentile

95.1%

This update for qemu fixes the following issues:

This security issue was fixed:

  • CVE-2018-12617: qmp_guest_file_read had an integer overflow that could
    have been exploited by sending a crafted QMP command (including
    guest-file-read with a large count value) to the agent via the listening
    socket causing DoS (bsc#1098735)

These non-security issues were fixed:

  • Allow kvm group access to /dev/sev (bsc#1102604).
  • Fix for the value used for reduced_phys_bits. Please update the
    reduced_phys_bits value used on the commandline or in libvirt XML to the
    value 1 (explicitly set now in QEMU code). (bsc#1103628)
  • Fix (again) the qemu guest agent udev rule file, which got unfixed in a
    series of unfortunate events (bsc#1094898 and now bsc#1105279)

This update was imported from the SUSE:SLE-15:Update update project.