Уведомление безопасности SUSE-SU-2018:3555-1

Высокая (7.2)

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

SUSE

qemu (any) qemu-arm (any) qemu-arm-debuginfo (any) qemu-block-curl (any) qemu-block-curl-debuginfo (any) qemu-block-iscsi (any) qemu-block-iscsi-debuginfo (any) qemu-block-rbd (any) qemu-block-rbd-debuginfo (any) qemu-block-ssh (any) qemu-block-ssh-debuginfo (any) qemu-debugsource (any) qemu-guest-agent (any) qemu-guest-agent-debuginfo (any) qemu-ipxe (any) qemu-kvm (any) qemu-lang (any) qemu-ppc (any) qemu-ppc-debuginfo (any) qemu-s390 (any) qemu-s390-debuginfo (any) qemu-seabios (any) qemu-sgabios-8 (any) qemu-tools (any) qemu-tools-debuginfo (any) qemu-vgabios (any) qemu-x86 (any) qemu-x86-debuginfo (any)

Уведомление безопасности об уязвимостях SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12-SP3, SUSE CaaS Platform ALL, SUSE Linux Enterprise Desktop 12-SP3

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE CaaS Platform 3.0:
x86_64:
qemu-guest-agent - 2.9.1-6.19.11
qemu-guest-agent-debuginfo - 2.9.1-6.19.11
qemu-debugsource - 2.9.1-6.19.11
SUSE Linux Enterprise Server 12-SP3:
s390x, x86_64:
qemu-kvm - 2.9.1-6.19.11
SUSE Linux Enterprise Server 12-SP3:
ppc64le:
qemu-ppc-debuginfo - 2.9.1-6.19.11
qemu-ppc - 2.9.1-6.19.11
SUSE Linux Enterprise Server 12-SP3:
aarch64:
qemu-arm - 2.9.1-6.19.11
qemu-arm-debuginfo - 2.9.1-6.19.11
SUSE Linux Enterprise Server 12-SP3:
aarch64, x86_64:
qemu-block-rbd-debuginfo - 2.9.1-6.19.11
qemu-block-rbd - 2.9.1-6.19.11
SUSE Linux Enterprise Server 12-SP3:
noarch:
qemu-sgabios-8 - 6.19.11
qemu-ipxe - 1.0.0-6.19.11
qemu-seabios - 1.10.2-6.19.11
qemu-vgabios - 1.10.2-6.19.11
SUSE Linux Enterprise Server 12-SP3:
aarch64, ppc64le, s390x, x86_64:
qemu-guest-agent - 2.9.1-6.19.11
qemu-tools-debuginfo - 2.9.1-6.19.11
qemu-tools - 2.9.1-6.19.11
qemu-block-curl - 2.9.1-6.19.11
qemu-block-ssh-debuginfo - 2.9.1-6.19.11
qemu-block-curl-debuginfo - 2.9.1-6.19.11
qemu-block-ssh - 2.9.1-6.19.11
qemu-block-iscsi - 2.9.1-6.19.11
qemu - 2.9.1-6.19.11
qemu-guest-agent-debuginfo - 2.9.1-6.19.11
qemu-lang - 2.9.1-6.19.11
qemu-block-iscsi-debuginfo - 2.9.1-6.19.11
qemu-debugsource - 2.9.1-6.19.11
SUSE Linux Enterprise Server 12-SP3:
s390x:
qemu-s390-debuginfo - 2.9.1-6.19.11
qemu-s390 - 2.9.1-6.19.11
SUSE Linux Enterprise Server 12-SP3:
x86_64:
qemu-x86-debuginfo - 2.9.1-6.19.11
qemu-x86 - 2.9.1-6.19.11
SUSE CaaS Platform ALL:
x86_64:
qemu-guest-agent - 2.9.1-6.19.11
qemu-guest-agent-debuginfo - 2.9.1-6.19.11
qemu-debugsource - 2.9.1-6.19.11
SUSE Linux Enterprise Desktop 12-SP3:
x86_64:
qemu-tools-debuginfo - 2.9.1-6.19.11
qemu-block-curl - 2.9.1-6.19.11
qemu-tools - 2.9.1-6.19.11
qemu-block-curl-debuginfo - 2.9.1-6.19.11
qemu-x86 - 2.9.1-6.19.11
qemu-kvm - 2.9.1-6.19.11
qemu - 2.9.1-6.19.11
qemu-debugsource - 2.9.1-6.19.11
SUSE Linux Enterprise Desktop 12-SP3:
noarch:
qemu-sgabios-8 - 6.19.11
qemu-ipxe - 1.0.0-6.19.11
qemu-seabios - 1.10.2-6.19.11
qemu-vgabios - 1.10.2-6.19.11

http://lists.suse.com/pipermail/sle-security-updates/2018-October/004810.html
https://bugzilla.suse.com/1092885
https://bugzilla.suse.com/1094725
https://bugzilla.suse.com/1096223
https://bugzilla.suse.com/1098735

Источник: CVE
Наименование: CVE-2018-12617
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12617

Источник: CVE
Наименование: CVE-2018-11806
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11806

Источник: CVE
Наименование: CVE-2018-3639
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3639