Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2020:1538-1 Moderate: qemu Multiple Issues Resolved

suse
Calendar Grey June 4, 2020
Dist Suse Esm H88
SUSE update resolves 7 security flaws in qemu. Immediate patching advised! Follow instructions to protect your systems.
An update that solves 7 vulnerabilities and has one errata is now available

Summary

This update for qemu fixes the following issues: Security issues fixed: - CVE-2020-1711: Fixed a potential OOB access in the iSCSI client code (bsc#1166240). - CVE-2019-12068: Fixed a potential DoS in the LSI SCSI controller emulation (bsc#1146873). - CVE-2020-1983: Fixed a use-after-free in the ip_reass function of slirp (bsc#1170940). - CVE-2020-8608: Fixed a potential OOB access in slirp (bsc#1163018). - CVE-2020-7039: Fixed a potential OOB access in slirp (bsc#1161066). - CVE-2019-15890: Fixed a use-after-free during packet reassembly in slirp (bsc#1149811). - Fixed multiple potential DoS issues in SLIRP, similar to CVE-2019-6778 (bsc#1123156). Non-security issue fixed: - Make sure that required memory is mapped properly during an incoming migration of a Xen HVM domU (bsc#1160024).

Topics%20covered

Topics Covered

security advisory moderate Denial of Service SUSE issue fix OpenStack qemu

References

#1123156 #1146873 #1149811 #1160024 #1161066

#1163018 #1166240 #1170940

Cross- CVE-2019-12068 CVE-2019-15890 CVE-2019-6778

CVE-2020-1711 CVE-2020-1983 CVE-2020-7039

CVE-2020-8608

Affected Products:

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud 8

SUSE Linux Enterprise Server for SAP 12-SP3

SUSE Linux Enterprise Server 12-SP3-LTSS

SUSE Linux Enterprise Server 12-SP3-BCL

SUSE Enterprise Storage 5

HPE Helion Openstack 8

https://www.suse.com/security/cve/CVE-2019-12068.html

https://www.suse.com/security/cve/CVE-2019-15890.html

https://www.suse.com/security/cve/CVE-2019-6778.html

https://www.suse.com/security/cve/CVE-2020-1711.html

https://www.suse.com/security/cve/CVE-2020-1983.html

https://www.suse.com/security/cve/CVE-2020-7039.html

Announcement ID: SUSE-SU-2020:1538-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate Denial of Service SUSE issue fix OpenStack qemu

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here