Lucene search

K
suseSuseSUSE-SU-2015:1519-1
HistorySep 09, 2015 - 6:13 p.m.

Security update for qemu (important)

2015-09-0918:13:21
lists.opensuse.org
9

0.051 Low

EPSS

Percentile

92.1%

qemu was updated to fix two security issues and augments one non-security
bug fix.

The following vulnerabilities were fixed:

  • CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to
    host escape (XSA-135) (bsc#932770)
  • CVE-2015-4037: Avoid predictable directory name for smb config
    (bsc#932267)

The fix for the following non-security bug was improved:

  • bsc#893892: Use improved upstream patch for display issue affecting
    installs of SLES 11 VMs on SLES 12