Recommended update for kvm

SUSE Recommended Update: Recommended update for kvm
Announcement ID: SUSE-RU-2012:0953-1
Rating: low
References: #709405 #722643 #722958 #724813 #747339 #753313 #757031 #764526
Affected Products:
  • SUSE Linux Enterprise Server 11 SP2
  • SUSE Linux Enterprise Desktop 11 SP2

  • An update that solves one vulnerability and has 7 fixes is now available.


    This update for KVM resolves the following issues:


    The hardware certification NIC in/out tests were
    failing in some cases. The guest virtio-net driver would
    stop receiving packets after some time (bnc#709405).


    Tight PNG encoding should only be used when
    --enable-vnc-png is set. KVM builds with --disable-vnc-png
    option and this bug is adversely affecting noVNC


    Invoke device reset handler on hot-plug. This
    resolves network connectivity problems with hot-plugged
    NICs on Windows 2008 guests (bnc#722958, bnc#722643).


    Disable CPU hotplug in qemu monitor (bnc#747339).


    Mouse in guest does not work after kdump (bnc#724813).


    The monitor command "block_resize" was moved from
    unsupported to supported in kvm-supported.txt to correctly
    reflect its already supported status.


    Add cache=directsync to round out full range of cache


    fix vulnerability to temporary file symlink attacks
    in snapshot file mode. (bnc#764526) (CVE-2012-2652)


    For pci device assignment, update legacy interrupts
    only if used. Don't mess with assign_intx on devices that
    are in MSI or MSI-X mode, it would corrupt their interrupt
    routing. (bnc#753313)

    Security Issues:

    * CVE-2012-2652



    Patch Instructions:

    To install this SUSE Recommended Update use YaST online_update.
    Alternatively you can run the command listed for your product:

    • SUSE Linux Enterprise Server 11 SP2:
      zypper in -t patch slessp2-kvm-6455
    • SUSE Linux Enterprise Desktop 11 SP2:
      zypper in -t patch sledsp2-kvm-6455

    To bring your system up-to-date, use "zypper patch".

    Package List:

    • SUSE Linux Enterprise Server 11 SP2 (i586 x86_64):
    • kvm-0.15.1-0.21.1
    • SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64):
    • kvm-0.15.1-0.21.1