SUSE-SU-2016:2902-1

Dashboard / Vulnerabilities / SUSE-SU-2016:2902-1

SUSE-SU-2016:2902-1

Summary: Security update for kvm

Details: This update for kvm fixes the following issues: - Address various security/stability issues * Fix OOB access in xlnx.xpx-ethernetlite emulation (CVE-2016-7161 bsc#1001151) * Fix OOB access in VMware SVGA emulation (CVE-2016-7170 bsc#998516) * Fix DOS in ColdFire Fast Ethernet Controller emulation (CVE-2016-7908 bsc#1002550) * Fix DOS in USB xHCI emulation (CVE-2016-8576 bsc#1003878) * Fix DOS in virtio-9pfs (CVE-2016-8578 bsc#1003894) * Fix DOS in virtio-9pfs (CVE-2016-9105 bsc#1007494) * Fix DOS in virtio-9pfs (CVE-2016-8577 bsc#1003893) * Plug data leak in virtio-9pfs interface (CVE-2016-9103 bsc#1007454) * Fix DOS in virtio-9pfs interface (CVE-2016-9102 bsc#1007450) * Fix DOS in virtio-9pfs (CVE-2016-9106 bsc#1007495) * Fix DOS in 16550A UART emulation (CVE-2016-8669 bsc#1004707) * Fix DOS in PC-Net II emulation (CVE-2016-7909 bsc#1002557) * Fix DOS in PRO100 emulation (CVE-2016-9101 bsc#1007391) * Fix DOS in RTL8139 emulation (CVE-2016-8910 bsc#1006538) * Fix DOS in Intel HDA controller emulation (CVE-2016-8909 bsc#1006536) * Fix DOS in virtio-9pfs (CVE-2016-9104 bsc#1007493) * Fix DOS in JAZZ RC4030 emulation (CVE-2016-8667 bsc#1004702) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE11-SP4 - Remove semi-contradictory and now determined erroneous statement in kvm-supported.txt regarding not running ntp in kvm guest when kvm-clock is used. It is now recommended to use ntp in guest in this case.

References: https://www.suse.com/support/update/announcement/2016/suse-su-20162902-1/, https://bugzilla.suse.com/1001151, https://bugzilla.suse.com/1002550, https://bugzilla.suse.com/1002557, https://bugzilla.suse.com/1003878, https://bugzilla.suse.com/1003893, https://bugzilla.suse.com/1003894, https://bugzilla.suse.com/1004702, https://bugzilla.suse.com/1004707, https://bugzilla.suse.com/1006536, https://bugzilla.suse.com/1006538, https://bugzilla.suse.com/1007391, https://bugzilla.suse.com/1007450, https://bugzilla.suse.com/1007454, https://bugzilla.suse.com/1007493, https://bugzilla.suse.com/1007494, https://bugzilla.suse.com/1007495, https://bugzilla.suse.com/998516, https://www.suse.com/security/cve/CVE-2016-7161, https://www.suse.com/security/cve/CVE-2016-7170, https://www.suse.com/security/cve/CVE-2016-7908, https://www.suse.com/security/cve/CVE-2016-7909, https://www.suse.com/security/cve/CVE-2016-8576, https://www.suse.com/security/cve/CVE-2016-8577, https://www.suse.com/security/cve/CVE-2016-8578, https://www.suse.com/security/cve/CVE-2016-8667, https://www.suse.com/security/cve/CVE-2016-8669, https://www.suse.com/security/cve/CVE-2016-8909, https://www.suse.com/security/cve/CVE-2016-8910, https://www.suse.com/security/cve/CVE-2016-9101, https://www.suse.com/security/cve/CVE-2016-9102, https://www.suse.com/security/cve/CVE-2016-9103, https://www.suse.com/security/cve/CVE-2016-9104, https://www.suse.com/security/cve/CVE-2016-9105, https://www.suse.com/security/cve/CVE-2016-9106