Recommended update for kvm
|References:||#709405 #722643 #722958 #724813 #747339 #753313 #757031 #764526|
An update that solves one vulnerability and has 7 fixes is now available.
This update for KVM resolves the following issues:
The hardware certification NIC in/out tests were
failing in some cases. The guest virtio-net driver would
stop receiving packets after some time (bnc#709405).
Tight PNG encoding should only be used when
--enable-vnc-png is set. KVM builds with --disable-vnc-png
option and this bug is adversely affecting noVNC
Invoke device reset handler on hot-plug. This
resolves network connectivity problems with hot-plugged
NICs on Windows 2008 guests (bnc#722958, bnc#722643).
Disable CPU hotplug in qemu monitor (bnc#747339).
Mouse in guest does not work after kdump (bnc#724813).
The monitor command "block_resize" was moved from
unsupported to supported in kvm-supported.txt to correctly
reflect its already supported status.
Add cache=directsync to round out full range of cache
fix vulnerability to temporary file symlink attacks
in snapshot file mode. (bnc#764526) (CVE-2012-2652)
For pci device assignment, update legacy interrupts
only if used. Don't mess with assign_intx on devices that
are in MSI or MSI-X mode, it would corrupt their interrupt
To install this SUSE Recommended Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Server 11 SP2:
zypper in -t patch slessp2-kvm-6455
- SUSE Linux Enterprise Desktop 11 SP2:
zypper in -t patch sledsp2-kvm-6455
To bring your system up-to-date, use "zypper patch".
- SUSE Linux Enterprise Server 11 SP2 (i586 x86_64):
- SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64):