1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2018:0039-1

[SUSE-SU-2018:0039-1] Security update for kvm

Severity Important
Affected Packages 3
CVEs 2
Info Packages References Vulnerabilities

Security update for kvm

This update for kvm fixes the following issues:

A security flaw mitigation has been applied:

  • CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to allow enabling/disabling branch prediction features in the Intel CPU. (bsc#1068032)

Also a security fix has been applied:

  • CVE-2017-2633: Fix various out of bounds access issues in the QEMU vnc infrastructure (bsc#1026612)
Package Affected Version
pkg:rpm/suse/kvm?arch=x86_64&distro=sles-11&sp=3 < 1.4.2-53.14.1
pkg:rpm/suse/kvm?arch=s390x&distro=sles-11&sp=3 < 1.4.2-53.14.1
pkg:rpm/suse/kvm?arch=i586&distro=sles-11&sp=3 < 1.4.2-53.14.1
ID
SUSE-SU-2018:0039-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2018/suse-su-20180039-1/
Published
2018-01-08T12:27:20
(6 years ago)
Modified
2018-01-08T12:27:20
(6 years ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/kvm?arch=x86_64&distro=sles-11&sp=3 suse kvm < 1.4.2-53.14.1 sles-11 x86_64
Affected pkg:rpm/suse/kvm?arch=s390x&distro=sles-11&sp=3 suse kvm < 1.4.2-53.14.1 sles-11 s390x
Affected pkg:rpm/suse/kvm?arch=i586&distro=sles-11&sp=3 suse kvm < 1.4.2-53.14.1 sles-11 i586
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date