Описание
Security update for qemu
This update for qemu fixes the following issues:
A new feature was added:
- Support EPYC vCPU type (bsc#1052825 fate#324038)
Also a mitigation for a security problem has been applied:
- CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to allow enabling/disabling branch prediction features in the Intel CPU. (bsc#1068032)
Список пакетов
SUSE Linux Enterprise Desktop 12 SP3
qemu-2.9.1-6.9.2
qemu-block-curl-2.9.1-6.9.2
qemu-ipxe-1.0.0-6.9.2
qemu-kvm-2.9.1-6.9.2
qemu-seabios-1.10.2-6.9.2
qemu-sgabios-8-6.9.2
qemu-tools-2.9.1-6.9.2
qemu-vgabios-1.10.2-6.9.2
qemu-x86-2.9.1-6.9.2
SUSE Linux Enterprise Server 12 SP3
qemu-2.9.1-6.9.2
qemu-arm-2.9.1-6.9.2
qemu-block-curl-2.9.1-6.9.2
qemu-block-iscsi-2.9.1-6.9.2
qemu-block-rbd-2.9.1-6.9.2
qemu-block-ssh-2.9.1-6.9.2
qemu-guest-agent-2.9.1-6.9.2
qemu-ipxe-1.0.0-6.9.2
qemu-kvm-2.9.1-6.9.2
qemu-lang-2.9.1-6.9.2
qemu-ppc-2.9.1-6.9.2
qemu-s390-2.9.1-6.9.2
qemu-seabios-1.10.2-6.9.2
qemu-sgabios-8-6.9.2
qemu-tools-2.9.1-6.9.2
qemu-vgabios-1.10.2-6.9.2
qemu-x86-2.9.1-6.9.2
SUSE Linux Enterprise Server for SAP Applications 12 SP3
qemu-2.9.1-6.9.2
qemu-arm-2.9.1-6.9.2
qemu-block-curl-2.9.1-6.9.2
qemu-block-iscsi-2.9.1-6.9.2
qemu-block-rbd-2.9.1-6.9.2
qemu-block-ssh-2.9.1-6.9.2
qemu-guest-agent-2.9.1-6.9.2
qemu-ipxe-1.0.0-6.9.2
qemu-kvm-2.9.1-6.9.2
qemu-lang-2.9.1-6.9.2
qemu-ppc-2.9.1-6.9.2
qemu-s390-2.9.1-6.9.2
qemu-seabios-1.10.2-6.9.2
qemu-sgabios-8-6.9.2
qemu-tools-2.9.1-6.9.2
qemu-vgabios-1.10.2-6.9.2
qemu-x86-2.9.1-6.9.2
Ссылки
- Link for SUSE-SU-2018:0007-1
- E-Mail link for SUSE-SU-2018:0007-1
- SUSE Security Ratings
- SUSE Bug 1052825
- SUSE Bug 1068032
- SUSE CVE CVE-2017-5715 page
Описание
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.9.2
SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.9.2
SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.9.2
SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.9.2
Ссылки
- CVE-2017-5715
- SUSE Bug 1068032
- SUSE Bug 1074562
- SUSE Bug 1074578
- SUSE Bug 1074701
- SUSE Bug 1074741
- SUSE Bug 1074919
- SUSE Bug 1075006
- SUSE Bug 1075007
- SUSE Bug 1075262
- SUSE Bug 1075419
- SUSE Bug 1076115
- SUSE Bug 1076372
- SUSE Bug 1076606
- SUSE Bug 1078353
- SUSE Bug 1080039
- SUSE Bug 1087887
- SUSE Bug 1087939
- SUSE Bug 1088147
- SUSE Bug 1089055