Security update for qemu
This update for qemu fixes the following issues: - Remove a backslash '\' escape character from 80-qemu-ga.rules (bsc#1153358) Unlike sles 15 or newer guests, The udev rule file of qemu guest agent in sles 12 sp4 or newer guest only needs one escape character. - Fix use-after-free in slirp (CVE-2018-20126 bsc#1119991) - Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bsc#1146873) - Expose taa-no 'feature', indicating CPU does not have the TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506) - Expose pschange-mc-no 'feature', indicating CPU does not have the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP4
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for qemu fixes the following issues: - Remove a backslash '\' escape character from 80-qemu-ga.rules (bsc#1153358) Unlike sles 15 or newer guests, The udev rule file of qemu guest agent in sles 12 sp4 or newer guest only needs one escape character. - Fix use-after-free in slirp (CVE-2018-20126 bsc#1119991) - Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bsc#1146873) - Expose taa-no 'feature', indicating CPU does not have the TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506) - Expose pschange-mc-no 'feature', indicating CPU does not have the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812) - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP4
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1119991
- https://bugzilla.suse.com/1146873
- https://bugzilla.suse.com/1152506
- https://bugzilla.suse.com/1153358
- https://bugzilla.suse.com/1155812
- https://www.suse.com/security/cve/CVE-2018-12207
- https://www.suse.com/security/cve/CVE-2018-20126
- https://www.suse.com/security/cve/CVE-2019-11135
- https://www.suse.com/security/cve/CVE-2019-12068
- https://www.suse.com/support/update/announcement/2019/suse-su-20192956-1/