Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1502-1

Опубликовано: 29 мая 2020
Источник: suse-cvrf

Описание

Security update for qemu

This update for qemu fixes the following issues:

Security issue fixed:

  • CVE-2020-1983: Fixed a use-after-free in the ip_reass function of slirp (bsc#1170940).

Non-security issues fixed:

  • Fixed an issue where limiting the memory bandwidth was not possible (bsc#1167816).
  • Fixed the issue that s390x could not read IPL channel program when using dasd as boot device (bsc#1158880).
  • Miscellaneous fixes to the in-package support documentation.

Список пакетов

Image SLES15-SP1-CHOST-BYOS-Azure
qemu-tools-3.1.1.1-9.21.4
Image SLES15-SP1-CHOST-BYOS-EC2
qemu-tools-3.1.1.1-9.21.4
Image SLES15-SP1-CHOST-BYOS-GCE
qemu-tools-3.1.1.1-9.21.4
SUSE Linux Enterprise Module for Basesystem 15 SP1
qemu-tools-3.1.1.1-9.21.4
SUSE Linux Enterprise Module for Server Applications 15 SP1
qemu-3.1.1.1-9.21.4
qemu-arm-3.1.1.1-9.21.4
qemu-audio-alsa-3.1.1.1-9.21.4
qemu-audio-oss-3.1.1.1-9.21.4
qemu-audio-pa-3.1.1.1-9.21.4
qemu-block-curl-3.1.1.1-9.21.4
qemu-block-iscsi-3.1.1.1-9.21.4
qemu-block-rbd-3.1.1.1-9.21.4
qemu-block-ssh-3.1.1.1-9.21.4
qemu-guest-agent-3.1.1.1-9.21.4
qemu-ipxe-1.0.0+-9.21.4
qemu-kvm-3.1.1.1-9.21.4
qemu-lang-3.1.1.1-9.21.4
qemu-ppc-3.1.1.1-9.21.4
qemu-s390-3.1.1.1-9.21.4
qemu-seabios-1.12.0-9.21.4
qemu-sgabios-8-9.21.4
qemu-ui-curses-3.1.1.1-9.21.4
qemu-ui-gtk-3.1.1.1-9.21.4
qemu-vgabios-1.12.0-9.21.4
qemu-x86-3.1.1.1-9.21.4

Ссылки

Описание

A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.

Затронутые продукты
Image SLES15-SP1-CHOST-BYOS-Azure:qemu-tools-3.1.1.1-9.21.4
Image SLES15-SP1-CHOST-BYOS-EC2:qemu-tools-3.1.1.1-9.21.4
Image SLES15-SP1-CHOST-BYOS-GCE:qemu-tools-3.1.1.1-9.21.4
SUSE Linux Enterprise Module for Basesystem 15 SP1:qemu-tools-3.1.1.1-9.21.4
Ссылки