Security update for KVM (important)

2015-06-2615:08:01

lists.opensuse.org

0.051 Low

EPSS

Percentile

92.1%

JSON

KVM was updated to fix two security issues:

   * CVE-2015-3209: Heap overflow in qemu pcnet controller allowing guest
     to host escape. (bsc#932770)
   * CVE-2015-4037: Predictable directory names for smb configuration.
     (bsc#932267)

Security Issues:

   * CVE-2015-3209
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3209">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3209</a>&gt;

OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Server11.3s390xkvm< 1.4.2-0.22.31.1kvm-1.4.2-0.22.31.1.s390x.rpm
SUSE Linux Enterprise Desktop11.3i586kvm< 1.4.2-0.22.31.1kvm-1.4.2-0.22.31.1.i586.rpm
SUSE Linux Enterprise Desktop11.3x86_64kvm< 1.4.2-0.22.31.1kvm-1.4.2-0.22.31.1.x86_64.rpm
SUSE Linux Enterprise Server11.3x86_64kvm< 1.4.2-0.22.31.1kvm-1.4.2-0.22.31.1.x86_64.rpm
SUSE Linux Enterprise Server11.3i586kvm< 1.4.2-0.22.31.1kvm-1.4.2-0.22.31.1.i586.rpm

OS	Version	Architecture	Package	Version	Filename
SUSE Linux Enterprise Server	11.3	s390x	kvm	< 1.4.2-0.22.31.1	kvm-1.4.2-0.22.31.1.s390x.rpm
SUSE Linux Enterprise Desktop	11.3	i586	kvm	< 1.4.2-0.22.31.1	kvm-1.4.2-0.22.31.1.i586.rpm
SUSE Linux Enterprise Desktop	11.3	x86_64	kvm	< 1.4.2-0.22.31.1	kvm-1.4.2-0.22.31.1.x86_64.rpm
SUSE Linux Enterprise Server	11.3	x86_64	kvm	< 1.4.2-0.22.31.1	kvm-1.4.2-0.22.31.1.x86_64.rpm
SUSE Linux Enterprise Server	11.3	i586	kvm	< 1.4.2-0.22.31.1	kvm-1.4.2-0.22.31.1.i586.rpm