SUSE-SU-2018:2615-1

Details

Description of the patch:

This update for kvm fixes the following security issues:

CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket causing DoS (bsc#1098735)
CVE-2018-11806: Prevent heap-based buffer overflow via incoming fragmented datagrams (bsc#1096223)

With this release the mitigations for Spectre v4 are moved the the patches from upstream (CVE-2018-3639, bsc#1092885).

Affected Packages

kvm

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP3SUSE Linux Enterprise Server 11 SP3-LTSSSUSE Linux Enterprise Server 11 SP3-TERADATA

Fixed in:

1.4.2-53.23.2

References

ADVISORY

https://bugzilla.suse.com/1092885

ADVISORY

https://bugzilla.suse.com/1096223

ADVISORY

https://bugzilla.suse.com/1098735

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2018-September/004532.html

ADVISORY