Security update for qemu SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2019:2059-1 Final 1 1 2019-09-03T04:19:16Z current 2019-09-03T04:19:16Z 2019-09-03T04:19:16Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: Security issues fixed: - CVE-2019-14378: Security fix for heap overflow in ip_reass on big packet input (bsc#1143794). - CVE-2019-12155: Security fix for null pointer dereference while releasing spice resources (bsc#1135902). - CVE-2019-13164: Security fix for qemu-bridge-helper ACL can be bypassed when names are too long (bsc#1140402). Bug fixes and enhancements: - Add vcpu features needed for Cascadelake-Server, Icelake-Client and Icelake-Server, especially the foundational arch-capabilities to help with security and performance on Intel hosts (bsc#1134883) (fate#327764) - Add support for one more security/performance related vcpu feature (bsc#1136778) (fate#327796) - Disable file locking in the Xen PV disk backend to avoid locking issues with PV domUs during migration. The issues triggered by the locking can not be properly handled in libxl. The locking introduced in qemu-2.10 was removed again in qemu-4.0 (bsc#1079730, bsc#1098403, bsc#1111025). - Ignore csske for expanding the cpu model (bsc#1136540) - Fix vm migration is failing with input/output error when nfs server is disconnected (bsc#1119115) This update was imported from the SUSE:SLE-15:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2019-2059 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00008.html E-Mail link for openSUSE-SU-2019:2059-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1079730 SUSE Bug 1079730 https://bugzilla.suse.com/1098403 SUSE Bug 1098403 https://bugzilla.suse.com/1111025 SUSE Bug 1111025 https://bugzilla.suse.com/1119115 SUSE Bug 1119115 https://bugzilla.suse.com/1134883 SUSE Bug 1134883 https://bugzilla.suse.com/1135902 SUSE Bug 1135902 https://bugzilla.suse.com/1136540 SUSE Bug 1136540 https://bugzilla.suse.com/1136778 SUSE Bug 1136778 https://bugzilla.suse.com/1140402 SUSE Bug 1140402 https://bugzilla.suse.com/1143794 SUSE Bug 1143794 https://www.suse.com/security/cve/CVE-2019-12155/ SUSE CVE CVE-2019-12155 page https://www.suse.com/security/cve/CVE-2019-13164/ SUSE CVE CVE-2019-13164 page https://www.suse.com/security/cve/CVE-2019-14378/ SUSE CVE CVE-2019-14378 page openSUSE Leap 15.0 qemu-2.11.2-lp150.7.25.1 qemu-arm-2.11.2-lp150.7.25.1 qemu-block-curl-2.11.2-lp150.7.25.1 qemu-block-dmg-2.11.2-lp150.7.25.1 qemu-block-gluster-2.11.2-lp150.7.25.1 qemu-block-iscsi-2.11.2-lp150.7.25.1 qemu-block-rbd-2.11.2-lp150.7.25.1 qemu-block-ssh-2.11.2-lp150.7.25.1 qemu-extra-2.11.2-lp150.7.25.1 qemu-guest-agent-2.11.2-lp150.7.25.1 qemu-ipxe-1.0.0+-lp150.7.25.1 qemu-ksm-2.11.2-lp150.7.25.1 qemu-kvm-2.11.2-lp150.7.25.1 qemu-lang-2.11.2-lp150.7.25.1 qemu-ppc-2.11.2-lp150.7.25.1 qemu-s390-2.11.2-lp150.7.25.1 qemu-seabios-1.11.0-lp150.7.25.1 qemu-sgabios-8-lp150.7.25.1 qemu-tools-2.11.2-lp150.7.25.1 qemu-vgabios-1.11.0-lp150.7.25.1 qemu-x86-2.11.2-lp150.7.25.1 qemu-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-arm-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-block-curl-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-block-dmg-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-block-gluster-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-block-iscsi-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-block-rbd-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-block-ssh-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-extra-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-guest-agent-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-ipxe-1.0.0+-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-ksm-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-kvm-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-lang-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-ppc-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-s390-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-seabios-1.11.0-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-sgabios-8-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-tools-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-vgabios-1.11.0-lp150.7.25.1 as a component of openSUSE Leap 15.0 qemu-x86-2.11.2-lp150.7.25.1 as a component of openSUSE Leap 15.0 interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference. CVE-2019-12155 openSUSE Leap 15.0:qemu-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-arm-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-curl-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-dmg-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-gluster-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-iscsi-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-rbd-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-ssh-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-extra-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-guest-agent-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-ipxe-1.0.0+-lp150.7.25.1 openSUSE Leap 15.0:qemu-ksm-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-kvm-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-lang-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-ppc-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-s390-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-seabios-1.11.0-lp150.7.25.1 openSUSE Leap 15.0:qemu-sgabios-8-lp150.7.25.1 openSUSE Leap 15.0:qemu-tools-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-vgabios-1.11.0-lp150.7.25.1 openSUSE Leap 15.0:qemu-x86-2.11.2-lp150.7.25.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00008.html https://www.suse.com/security/cve/CVE-2019-12155.html CVE-2019-12155 https://bugzilla.suse.com/1135902 SUSE Bug 1135902 https://bugzilla.suse.com/1135905 SUSE Bug 1135905 qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass. CVE-2019-13164 openSUSE Leap 15.0:qemu-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-arm-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-curl-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-dmg-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-gluster-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-iscsi-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-rbd-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-ssh-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-extra-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-guest-agent-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-ipxe-1.0.0+-lp150.7.25.1 openSUSE Leap 15.0:qemu-ksm-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-kvm-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-lang-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-ppc-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-s390-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-seabios-1.11.0-lp150.7.25.1 openSUSE Leap 15.0:qemu-sgabios-8-lp150.7.25.1 openSUSE Leap 15.0:qemu-tools-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-vgabios-1.11.0-lp150.7.25.1 openSUSE Leap 15.0:qemu-x86-2.11.2-lp150.7.25.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00008.html https://www.suse.com/security/cve/CVE-2019-13164.html CVE-2019-13164 https://bugzilla.suse.com/1140402 SUSE Bug 1140402 ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment. CVE-2019-14378 openSUSE Leap 15.0:qemu-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-arm-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-curl-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-dmg-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-gluster-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-iscsi-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-rbd-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-block-ssh-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-extra-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-guest-agent-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-ipxe-1.0.0+-lp150.7.25.1 openSUSE Leap 15.0:qemu-ksm-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-kvm-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-lang-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-ppc-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-s390-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-seabios-1.11.0-lp150.7.25.1 openSUSE Leap 15.0:qemu-sgabios-8-lp150.7.25.1 openSUSE Leap 15.0:qemu-tools-2.11.2-lp150.7.25.1 openSUSE Leap 15.0:qemu-vgabios-1.11.0-lp150.7.25.1 openSUSE Leap 15.0:qemu-x86-2.11.2-lp150.7.25.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/opensuse-security-announce/2019-09/msg00008.html https://www.suse.com/security/cve/CVE-2019-14378.html CVE-2019-14378 https://bugzilla.suse.com/1143794 SUSE Bug 1143794 https://bugzilla.suse.com/1143797 SUSE Bug 1143797 https://bugzilla.suse.com/1178658 SUSE Bug 1178658