Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2016.2826
SUSE Security Update: Security update for qemu
30 November 2016
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: qemu
Publisher: SUSE
Operating System: SUSE
Impact/Access: Execute Arbitrary Code/Commands -- Existing Account
Denial of Service -- Existing Account
Access Confidential Data -- Existing Account
Resolution: Patch/Upgrade
CVE Names: CVE-2016-9106 CVE-2016-9105 CVE-2016-9104
CVE-2016-9103 CVE-2016-9102 CVE-2016-9101
CVE-2016-8910 CVE-2016-8909 CVE-2016-8669
CVE-2016-8667 CVE-2016-8578 CVE-2016-8577
CVE-2016-8576 CVE-2016-7909 CVE-2016-7908
CVE-2016-7421 CVE-2016-7170 CVE-2016-7161
Reference: ESB-2016.2808
ESB-2016.2707
- --------------------------BEGIN INCLUDED TEXT--------------------
SUSE Security Update: Security update for qemu
______________________________________________________________________________
Announcement ID: SUSE-SU-2016:2936-1
Rating: important
References: #1001151 #1002116 #1002550 #1002557 #1003878
#1003893 #1003894 #1004702 #1004707 #1006536
#1006538 #1007391 #1007450 #1007454 #1007493
#1007494 #1007495 #998516 #999661
Cross-References: CVE-2016-7161 CVE-2016-7170 CVE-2016-7421
CVE-2016-7908 CVE-2016-7909 CVE-2016-8576
CVE-2016-8577 CVE-2016-8578 CVE-2016-8667
CVE-2016-8669 CVE-2016-8909 CVE-2016-8910
CVE-2016-9101 CVE-2016-9102 CVE-2016-9103
CVE-2016-9104 CVE-2016-9105 CVE-2016-9106
Affected Products:
SUSE Linux Enterprise Server for SAP 12
SUSE Linux Enterprise Server 12-LTSS
______________________________________________________________________________
An update that solves 18 vulnerabilities and has one errata
is now available.
Description:
This update for qemu fixes the following issues:
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git
SLE12
- Change package post script udevadm trigger calls to be device specific
(bsc#1002116)
- Address various security/stability issues
* Fix OOB access in xlnx.xpx-ethernetlite emulation (CVE-2016-7161
bsc#1001151)
* Fix OOB access in VMware SVGA emulation (CVE-2016-7170 bsc#998516)
* Fix DOS in Vmware pv scsi interface (CVE-2016-7421 bsc#999661)
* Fix DOS in ColdFire Fast Ethernet Controller emulation (CVE-2016-7908
bsc#1002550)
* Fix DOS in USB xHCI emulation (CVE-2016-8576 bsc#1003878)
* Fix DOS in virtio-9pfs (CVE-2016-8578 bsc#1003894)
* Fix DOS in virtio-9pfs (CVE-2016-9105 bsc#1007494)
* Fix DOS in virtio-9pfs (CVE-2016-8577 bsc#1003893)
* Plug data leak in virtio-9pfs interface (CVE-2016-9103 bsc#1007454)
* Fix DOS in virtio-9pfs interface (CVE-2016-9102 bsc#1007450)
* Fix DOS in virtio-9pfs (CVE-2016-9106 bsc#1007495)
* Fix DOS in 16550A UART emulation (CVE-2016-8669 bsc#1004707)
* Fix DOS in PC-Net II emulation (CVE-2016-7909 bsc#1002557)
* Fix DOS in PRO100 emulation (CVE-2016-9101 bsc#1007391)
* Fix DOS in RTL8139 emulation (CVE-2016-8910 bsc#1006538)
* Fix DOS in Intel HDA controller emulation (CVE-2016-8909 bsc#1006536)
* Fix DOS in virtio-9pfs (CVE-2016-9104 bsc#1007493)
* Fix DOS in JAZZ RC4030 emulation (CVE-2016-8667 bsc#1004702)
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Server for SAP 12:
zypper in -t patch SUSE-SLE-SAP-12-2016-1719=1
- SUSE Linux Enterprise Server 12-LTSS:
zypper in -t patch SUSE-SLE-SERVER-12-2016-1719=1
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Linux Enterprise Server for SAP 12 (x86_64):
qemu-2.0.2-48.25.1
qemu-block-curl-2.0.2-48.25.1
qemu-block-curl-debuginfo-2.0.2-48.25.1
qemu-block-rbd-2.0.2-48.25.1
qemu-block-rbd-debuginfo-2.0.2-48.25.1
qemu-debugsource-2.0.2-48.25.1
qemu-guest-agent-2.0.2-48.25.1
qemu-guest-agent-debuginfo-2.0.2-48.25.1
qemu-kvm-2.0.2-48.25.1
qemu-lang-2.0.2-48.25.1
qemu-tools-2.0.2-48.25.1
qemu-tools-debuginfo-2.0.2-48.25.1
qemu-x86-2.0.2-48.25.1
qemu-x86-debuginfo-2.0.2-48.25.1
- SUSE Linux Enterprise Server for SAP 12 (noarch):
qemu-ipxe-1.0.0-48.25.1
qemu-seabios-1.7.4-48.25.1
qemu-sgabios-8-48.25.1
qemu-vgabios-1.7.4-48.25.1
- SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64):
qemu-2.0.2-48.25.1
qemu-block-curl-2.0.2-48.25.1
qemu-block-curl-debuginfo-2.0.2-48.25.1
qemu-debugsource-2.0.2-48.25.1
qemu-guest-agent-2.0.2-48.25.1
qemu-guest-agent-debuginfo-2.0.2-48.25.1
qemu-lang-2.0.2-48.25.1
qemu-tools-2.0.2-48.25.1
qemu-tools-debuginfo-2.0.2-48.25.1
- SUSE Linux Enterprise Server 12-LTSS (s390x x86_64):
qemu-kvm-2.0.2-48.25.1
- SUSE Linux Enterprise Server 12-LTSS (ppc64le):
qemu-ppc-2.0.2-48.25.1
qemu-ppc-debuginfo-2.0.2-48.25.1
- SUSE Linux Enterprise Server 12-LTSS (x86_64):
qemu-block-rbd-2.0.2-48.25.1
qemu-block-rbd-debuginfo-2.0.2-48.25.1
qemu-x86-2.0.2-48.25.1
qemu-x86-debuginfo-2.0.2-48.25.1
- SUSE Linux Enterprise Server 12-LTSS (noarch):
qemu-ipxe-1.0.0-48.25.1
qemu-seabios-1.7.4-48.25.1
qemu-sgabios-8-48.25.1
qemu-vgabios-1.7.4-48.25.1
- SUSE Linux Enterprise Server 12-LTSS (s390x):
qemu-s390-2.0.2-48.25.1
qemu-s390-debuginfo-2.0.2-48.25.1
References:
https://www.suse.com/security/cve/CVE-2016-7161.html
https://www.suse.com/security/cve/CVE-2016-7170.html
https://www.suse.com/security/cve/CVE-2016-7421.html
https://www.suse.com/security/cve/CVE-2016-7908.html
https://www.suse.com/security/cve/CVE-2016-7909.html
https://www.suse.com/security/cve/CVE-2016-8576.html
https://www.suse.com/security/cve/CVE-2016-8577.html
https://www.suse.com/security/cve/CVE-2016-8578.html
https://www.suse.com/security/cve/CVE-2016-8667.html
https://www.suse.com/security/cve/CVE-2016-8669.html
https://www.suse.com/security/cve/CVE-2016-8909.html
https://www.suse.com/security/cve/CVE-2016-8910.html
https://www.suse.com/security/cve/CVE-2016-9101.html
https://www.suse.com/security/cve/CVE-2016-9102.html
https://www.suse.com/security/cve/CVE-2016-9103.html
https://www.suse.com/security/cve/CVE-2016-9104.html
https://www.suse.com/security/cve/CVE-2016-9105.html
https://www.suse.com/security/cve/CVE-2016-9106.html
https://bugzilla.suse.com/1001151
https://bugzilla.suse.com/1002116
https://bugzilla.suse.com/1002550
https://bugzilla.suse.com/1002557
https://bugzilla.suse.com/1003878
https://bugzilla.suse.com/1003893
https://bugzilla.suse.com/1003894
https://bugzilla.suse.com/1004702
https://bugzilla.suse.com/1004707
https://bugzilla.suse.com/1006536
https://bugzilla.suse.com/1006538
https://bugzilla.suse.com/1007391
https://bugzilla.suse.com/1007450
https://bugzilla.suse.com/1007454
https://bugzilla.suse.com/1007493
https://bugzilla.suse.com/1007494
https://bugzilla.suse.com/1007495
https://bugzilla.suse.com/998516
https://bugzilla.suse.com/999661
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=YmRA
-----END PGP SIGNATURE-----