My Favorites

Close

Please to see your favorites.

  • Bookmark
  • Email Document
  • Printer Friendly
  • Favorite
  • Rating:

Multiple vulnerabilities in QEMU

This document (7016590) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 11 Service Pack 3 (SLES 11 SP3)
SUSE Linux Enterprise Server 11 Service Pack 2 (SLES 11 SP2 LTSS)

Situation

A number of security issues in QEMU that affect both Xen and KVM have been found. To provide our customers with a single combined update and to deliver fixes for vulnerabilities that were not published yet, the Xen updates have been released after 2015-06-11 12:00 UTC.

The highest vulnerability rating of these issues is major and allows privilege escalation from guest to host for certain configurations.

Vulnerabilities of Xen on SLE 12 and SLE 11 SP3

Updated packages are available for SLES 11 SP3 x86_64 (64 bit), SLES 11 SP3 x86 (32 bit), SLES 12.

Vulnerabilities of QEMU (KVM) on SLES 12

Status of the updated packages: in QA, awaiting release.

Vulnerabilities of KVM (QEMU) on SLES 11 SP3

Updated packages are available for SLES 11 SP3 x86_64 (64 bit), SLES 11 SP3 x86 (32 bit)

Note

The Xen Security Advisories and SUSE Bugzilla information will be unlocked upon public announcement. Most details from http://xenbits.xen.org/xsa/ will be included in the bugzilla entries.

Disclaimer

This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:7016590
  • Creation Date:09-JUN-15
  • Modified Date:26-JUN-15
    • SUSESUSE Linux Enterprise Server
< Back to Support Search

SUSE Support Forums

Get your questions answered by experienced Sys Ops or interact with other SUSE community experts.

Join Our Community

Support Resources

Learn how to get the most from the technical support you receive with your SUSE Subscription, Premium Support, Academic Program, or Partner Program.


SUSE Customer Support Quick Reference Guide SUSE Technical Support Handbook Update Advisories
Support FAQ

Open an Incident

Open an incident with SUSE Technical Support, manage your subscriptions, download patches, or manage user access.

Go to Customer Center