Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

SUSE 12-SP1: 2019:1269-1 Important: Qemu DoS and Information Leak

suse
Calendar Grey May 16, 2019
Dist Suse Esm H88
SUSE has released a significant patch for qemu, tackling severe vulnerabilities such as denial of service and data exposure.
An update that fixes 6 vulnerabilities is now available

Summary

This update for qemu fixes the following issues: Following security issues were fixed: - CVE-2019-9824: Fixed an information leak in slirp (bsc#1129622) - CVE-2018-20815: Fix DOS possibility in device tree processing (bsc#1130675) - CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091: Added x86 cpu feature "md-clear" (bsc#1111331) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2019-1269=1 - SUSE Linux Enterprise Server 12-SP1-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2019-1269=1 Package List:

References

#1111331 #1129622 #1130675

Cross- CVE-2018-12126 CVE-2018-12127 CVE-2018-12130

CVE-2018-20815 CVE-2019-11091 CVE-2019-9824

Affected Products:

SUSE Linux Enterprise Server for SAP 12-SP1

SUSE Linux Enterprise Server 12-SP1-LTSS

https://www.suse.com/security/cve/CVE-2018-12126.html

https://www.suse.com/security/cve/CVE-2018-12127.html

https://www.suse.com/security/cve/CVE-2018-12130.html

https://www.suse.com/security/cve/CVE-2018-20815.html

https://www.suse.com/security/cve/CVE-2019-11091.html

https://www.suse.com/security/cve/CVE-2019-9824.html

https://bugzilla.suse.com/1111331

https://bugzilla.suse.com/1129622

https://bugzilla.suse.com/1130675

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:1269-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here