Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

SUSE: 2015:0870-1 Important: KVM Driver File System Corruption

suse
Calendar Grey May 13, 2015
Scroller Suse
SUSE has rolled out a security update for kvm, addressing significant concerns and a vulnerability that impacts file systems alongside VNC settings.
An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata An update that solves one vulnerability and has one errata is ...

Summary

This update for KVM fixes an issue in the virtio-blk driver which could result in incorrectly setting its WCE configuration. Under some circumstances, this misconfiguration could cause severe file system corruption, because cache flushes were not generated as they ought to have been. The update also addresses one security vulnerability: * CVE-2015-1779: Insufficient resource limiting in VNC websockets decoder. (bsc#924018) Security Issues: * CVE-2015-1779 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP3: zypper in -t patch slessp3-kvm=10645 - SUSE Linux Enterprise Desktop 11 SP3:

Topics%20covered

Topics Covered

security advisory important SUSE file system kvm VNC resource limiting

References

#920571 #924018

Cross- CVE-2015-1779

Affected Products:

SUSE Linux Enterprise Server 11 SP3

SUSE Linux Enterprise Desktop 11 SP3

https://www.suse.com/security/cve/CVE-2015-1779.html

https://bugzilla.suse.com/show_bug.cgi?id=920571

https://bugzilla.suse.com/show_bug.cgi?id=924018

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2015:0870-1
Rating: important

Topics%20covered

Topics Covered

security advisory important SUSE file system kvm VNC resource limiting

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.