Уведомление безопасности SUSE-SU-2018:0831-1

Критичная (7.8)

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

SUSE

qemu (any) qemu-arm (any) qemu-arm-debuginfo (any) qemu-block-curl (any) qemu-block-curl-debuginfo (any) qemu-block-rbd (any) qemu-block-rbd-debuginfo (any) qemu-block-ssh (any) qemu-block-ssh-debuginfo (any) qemu-debugsource (any) qemu-guest-agent (any) qemu-guest-agent-debuginfo (any) qemu-ipxe (any) qemu-kvm (any) qemu-lang (any) qemu-ppc (any) qemu-ppc-debuginfo (any) qemu-s390 (any) qemu-s390-debuginfo (any) qemu-seabios (any) qemu-sgabios-8 (any) qemu-tools (any) qemu-tools-debuginfo (any) qemu-vgabios (any) qemu-x86 (any) qemu-x86-debuginfo (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Server 12-SP2, SUSE Linux Enterprise Desktop 12-SP2, SUSE Linux Enterprise Server for Raspberry Pi 12-SP2

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Server 12-SP2:
s390x, x86_64:
qemu-kvm - 2.6.2-41.37.1
SUSE Linux Enterprise Server 12-SP2:
ppc64le:
qemu-ppc - 2.6.2-41.37.1
qemu-ppc-debuginfo - 2.6.2-41.37.1
SUSE Linux Enterprise Server 12-SP2:
aarch64:
qemu-arm - 2.6.2-41.37.1
qemu-arm-debuginfo - 2.6.2-41.37.1
SUSE Linux Enterprise Server 12-SP2:
aarch64, x86_64:
qemu-block-rbd-debuginfo - 2.6.2-41.37.1
qemu-block-rbd - 2.6.2-41.37.1
SUSE Linux Enterprise Server 12-SP2:
noarch:
qemu-seabios - 1.9.1-41.37.1
qemu-sgabios-8 - 41.37.1
qemu-ipxe - 1.0.0-41.37.1
qemu-vgabios - 1.9.1-41.37.1
SUSE Linux Enterprise Server 12-SP2:
aarch64, ppc64le, s390x, x86_64:
qemu - 2.6.2-41.37.1
qemu-tools - 2.6.2-41.37.1
qemu-guest-agent-debuginfo - 2.6.2-41.37.1
qemu-block-ssh-debuginfo - 2.6.2-41.37.1
qemu-lang - 2.6.2-41.37.1
qemu-guest-agent - 2.6.2-41.37.1
qemu-debugsource - 2.6.2-41.37.1
qemu-block-curl - 2.6.2-41.37.1
qemu-block-ssh - 2.6.2-41.37.1
qemu-tools-debuginfo - 2.6.2-41.37.1
qemu-block-curl-debuginfo - 2.6.2-41.37.1
SUSE Linux Enterprise Server 12-SP2:
s390x:
qemu-s390 - 2.6.2-41.37.1
qemu-s390-debuginfo - 2.6.2-41.37.1
SUSE Linux Enterprise Server 12-SP2:
x86_64:
qemu-x86 - 2.6.2-41.37.1
qemu-x86-debuginfo - 2.6.2-41.37.1
SUSE Linux Enterprise Desktop 12-SP2:
x86_64:
qemu - 2.6.2-41.37.1
qemu-tools - 2.6.2-41.37.1
qemu-x86 - 2.6.2-41.37.1
qemu-debugsource - 2.6.2-41.37.1
qemu-block-curl - 2.6.2-41.37.1
qemu-kvm - 2.6.2-41.37.1
qemu-tools-debuginfo - 2.6.2-41.37.1
qemu-block-curl-debuginfo - 2.6.2-41.37.1
SUSE Linux Enterprise Desktop 12-SP2:
noarch:
qemu-seabios - 1.9.1-41.37.1
qemu-sgabios-8 - 41.37.1
qemu-ipxe - 1.0.0-41.37.1
qemu-vgabios - 1.9.1-41.37.1
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2:
aarch64:
qemu - 2.6.2-41.37.1
qemu-tools - 2.6.2-41.37.1
qemu-guest-agent-debuginfo - 2.6.2-41.37.1
qemu-block-ssh-debuginfo - 2.6.2-41.37.1
qemu-lang - 2.6.2-41.37.1
qemu-arm - 2.6.2-41.37.1
qemu-guest-agent - 2.6.2-41.37.1
qemu-debugsource - 2.6.2-41.37.1
qemu-block-curl - 2.6.2-41.37.1
qemu-arm-debuginfo - 2.6.2-41.37.1
qemu-block-ssh - 2.6.2-41.37.1
qemu-block-rbd-debuginfo - 2.6.2-41.37.1
qemu-tools-debuginfo - 2.6.2-41.37.1
qemu-block-curl-debuginfo - 2.6.2-41.37.1
qemu-block-rbd - 2.6.2-41.37.1
SUSE Linux Enterprise Server for Raspberry Pi 12-SP2:
noarch:
qemu-ipxe - 1.0.0-41.37.1

http://lists.opensuse.org/opensuse-security-announce/2018-03/msg00066.html
https://bugzilla.suse.com/1040202
https://bugzilla.suse.com/1068032
https://bugzilla.suse.com/1068613
https://bugzilla.suse.com/1070144
https://bugzilla.suse.com/1071228
https://bugzilla.suse.com/1073489
https://bugzilla.suse.com/1076114
https://bugzilla.suse.com/1076179
https://bugzilla.suse.com/1076775
https://bugzilla.suse.com/1076814
https://bugzilla.suse.com/1082276
https://bugzilla.suse.com/1083291
https://bugzilla.suse.com/1085598

Источник: CVE
Наименование: CVE-2018-5683
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5683

Источник: CVE
Наименование: CVE-2017-17381
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17381

Источник: CVE
Наименование: CVE-2018-7550
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7550

Источник: CVE
Наименование: CVE-2017-18043
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18043

Источник: CVE
Наименование: CVE-2017-15119
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15119

Источник: CVE
Наименование: CVE-2017-15124
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15124

Источник: CVE
Наименование: CVE-2017-18030
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18030

Источник: CVE
Наименование: CVE-2017-16845
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16845

Источник: CVE
Наименование: CVE-2017-5715
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5715