Recommended update for kvm

SUSE Recommended Update: Recommended update for kvm
Announcement ID: SUSE-RU-2012:0953-1
Rating: low
References: #709405 #722643 #722958 #724813 #747339 #753313 #757031 #764526
Affected Products:
  • SUSE Linux Enterprise Server 11 SP2
  • SUSE Linux Enterprise Desktop 11 SP2

  • An update that solves one vulnerability and has 7 fixes is now available.

    Description:


    This update for KVM resolves the following issues:

    *

    The hardware certification NIC in/out tests were
    failing in some cases. The guest virtio-net driver would
    stop receiving packets after some time (bnc#709405).

    *

    Tight PNG encoding should only be used when
    --enable-vnc-png is set. KVM builds with --disable-vnc-png
    option and this bug is adversely affecting noVNC
    (bnc#757031).

    *

    Invoke device reset handler on hot-plug. This
    resolves network connectivity problems with hot-plugged
    NICs on Windows 2008 guests (bnc#722958, bnc#722643).

    *

    Disable CPU hotplug in qemu monitor (bnc#747339).

    *

    Mouse in guest does not work after kdump (bnc#724813).

    *

    The monitor command "block_resize" was moved from
    unsupported to supported in kvm-supported.txt to correctly
    reflect its already supported status.

    *

    Add cache=directsync to round out full range of cache
    options.

    *

    fix vulnerability to temporary file symlink attacks
    in snapshot file mode. (bnc#764526) (CVE-2012-2652)

    *

    For pci device assignment, update legacy interrupts
    only if used. Don't mess with assign_intx on devices that
    are in MSI or MSI-X mode, it would corrupt their interrupt
    routing. (bnc#753313)

    Security Issues:

    * CVE-2012-2652
    >

    Contraindications:

    None

    Patch Instructions:

    To install this SUSE Recommended Update use YaST online_update.
    Alternatively you can run the command listed for your product:

    • SUSE Linux Enterprise Server 11 SP2:
      zypper in -t patch slessp2-kvm-6455
    • SUSE Linux Enterprise Desktop 11 SP2:
      zypper in -t patch sledsp2-kvm-6455

    To bring your system up-to-date, use "zypper patch".

    Package List:

    • SUSE Linux Enterprise Server 11 SP2 (i586 x86_64):
    • kvm-0.15.1-0.21.1
    • SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64):
    • kvm-0.15.1-0.21.1

    References:

  • http://support.novell.com/security/cve/CVE-2012-2652.html
  • https://bugzilla.novell.com/709405
  • https://bugzilla.novell.com/722643
  • https://bugzilla.novell.com/722958
  • https://bugzilla.novell.com/724813
  • https://bugzilla.novell.com/747339
  • https://bugzilla.novell.com/753313
  • https://bugzilla.novell.com/757031
  • https://bugzilla.novell.com/764526
  • http://download.suse.com/patch/finder/?keywords=d568a75ed554d4a5eb44c40b27ffb1c7