Уведомление безопасности SUSE-SU-2018:0056-1

Средняя (4.7)

(AV:L/AC:M/Au:N/C:C/I:N/A:N)

SUSE

qemu (any) qemu-block-curl (any) qemu-block-curl-debuginfo (any) qemu-block-rbd (any) qemu-block-rbd-debuginfo (any) qemu-debugsource (any) qemu-guest-agent (any) qemu-guest-agent-debuginfo (any) qemu-ipxe (any) qemu-kvm (any) qemu-lang (any) qemu-ppc (any) qemu-ppc-debuginfo (any) qemu-s390 (any) qemu-s390-debuginfo (any) qemu-seabios (any) qemu-sgabios-8 (any) qemu-tools (any) qemu-tools-debuginfo (any) qemu-vgabios (any) qemu-x86 (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Server for SAP 12-SP1, SUSE OpenStack Cloud 6, SUSE Linux Enterprise Server 12-SP1-LTSS

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Server for SAP 12-SP1:
x86_64:
qemu-block-rbd - 2.3.1-33.6.1
qemu-x86 - 2.3.1-33.6.1
qemu-kvm - 2.3.1-33.6.1
qemu-block-rbd-debuginfo - 2.3.1-33.6.1
SUSE Linux Enterprise Server for SAP 12-SP1:
noarch:
qemu-vgabios - 1.8.1-33.6.1
qemu-ipxe - 1.0.0-33.6.1
qemu-sgabios-8 - 33.6.1
qemu-seabios - 1.8.1-33.6.1
SUSE Linux Enterprise Server for SAP 12-SP1:
ppc64le, x86_64:
qemu - 2.3.1-33.6.1
qemu-guest-agent - 2.3.1-33.6.1
qemu-lang - 2.3.1-33.6.1
qemu-block-curl-debuginfo - 2.3.1-33.6.1
qemu-tools - 2.3.1-33.6.1
qemu-tools-debuginfo - 2.3.1-33.6.1
qemu-debugsource - 2.3.1-33.6.1
qemu-block-curl - 2.3.1-33.6.1
qemu-guest-agent-debuginfo - 2.3.1-33.6.1
SUSE Linux Enterprise Server for SAP 12-SP1:
ppc64le:
qemu-ppc - 2.3.1-33.6.1
qemu-ppc-debuginfo - 2.3.1-33.6.1
SUSE OpenStack Cloud 6:
x86_64:
qemu - 2.3.1-33.6.1
qemu-block-curl-debuginfo - 2.3.1-33.6.1
qemu-lang - 2.3.1-33.6.1
qemu-x86 - 2.3.1-33.6.1
qemu-guest-agent - 2.3.1-33.6.1
qemu-block-rbd-debuginfo - 2.3.1-33.6.1
qemu-tools - 2.3.1-33.6.1
qemu-tools-debuginfo - 2.3.1-33.6.1
qemu-debugsource - 2.3.1-33.6.1
qemu-kvm - 2.3.1-33.6.1
qemu-block-curl - 2.3.1-33.6.1
qemu-guest-agent-debuginfo - 2.3.1-33.6.1
qemu-block-rbd - 2.3.1-33.6.1
SUSE OpenStack Cloud 6:
noarch:
qemu-vgabios - 1.8.1-33.6.1
qemu-ipxe - 1.0.0-33.6.1
qemu-sgabios-8 - 33.6.1
qemu-seabios - 1.8.1-33.6.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
x86_64:
qemu-block-rbd - 2.3.1-33.6.1
qemu-x86 - 2.3.1-33.6.1
qemu-block-rbd-debuginfo - 2.3.1-33.6.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
s390x, x86_64:
qemu-kvm - 2.3.1-33.6.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
ppc64le:
qemu-ppc - 2.3.1-33.6.1
qemu-ppc-debuginfo - 2.3.1-33.6.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
s390x:
qemu-s390 - 2.3.1-33.6.1
qemu-s390-debuginfo - 2.3.1-33.6.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
noarch:
qemu-vgabios - 1.8.1-33.6.1
qemu-ipxe - 1.0.0-33.6.1
qemu-sgabios-8 - 33.6.1
qemu-seabios - 1.8.1-33.6.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
ppc64le, s390x, x86_64:
qemu - 2.3.1-33.6.1
qemu-guest-agent - 2.3.1-33.6.1
qemu-lang - 2.3.1-33.6.1
qemu-block-curl-debuginfo - 2.3.1-33.6.1
qemu-tools - 2.3.1-33.6.1
qemu-tools-debuginfo - 2.3.1-33.6.1
qemu-debugsource - 2.3.1-33.6.1
qemu-block-curl - 2.3.1-33.6.1
qemu-guest-agent-debuginfo - 2.3.1-33.6.1

http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00027.html
https://bugzilla.suse.com/1068032

Источник: CVE
Наименование: CVE-2017-5715
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5715