SUSE Security Update: Security update for kvm
______________________________________________________________________________

Announcement ID:    SUSE-SU-2014:0623-1
Rating:             important
References:         #812983 #817593 #842006 #864802 #870439 
Cross-References:   CVE-2013-2016 CVE-2013-4344 CVE-2013-4541
                    CVE-2014-0142 CVE-2014-0143 CVE-2014-0144
                    CVE-2014-0145 CVE-2014-0146 CVE-2014-0147
                   
Affected Products:
                    SUSE Linux Enterprise Server 11 SP3
                    SUSE Linux Enterprise Desktop 11 SP3
______________________________________________________________________________

   An update that fixes 9 vulnerabilities is now available. It
   includes one version update.

Description:


   The QEMU embedded within KVM received various security
   fixes.

   Various issues in the block layer have been fixed:

   * A virtio security issue in config io space handling
   (CVE-2013-2016).
   * A SCSI report LUNs buffer overflow (CVE-2013-4344).
   * A buffer overflow in the QEMU USB stack
   (CVE-2013-4541).

   Security Issue references:

   * CVE-2013-2016
   
   * CVE-2013-4344
   
   * CVE-2013-4541
   
   * CVE-2014-0142
   
   * CVE-2014-0143
   
   * CVE-2014-0144
   
   * CVE-2014-0145
   
   * CVE-2014-0146
   
   * CVE-2014-0147
   


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server 11 SP3:

      zypper in -t patch slessp3-kvm-9142

   - SUSE Linux Enterprise Desktop 11 SP3:

      zypper in -t patch sledsp3-kvm-9142

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Server 11 SP3 (i586 s390x x86_64) [New Version: 1.4.2]:

      kvm-1.4.2-0.11.1

   - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64) [New Version: 1.4.2]:

      kvm-1.4.2-0.11.1


References:

   https://www.suse.com/security/cve/CVE-2013-2016.html
   https://www.suse.com/security/cve/CVE-2013-4344.html
   https://www.suse.com/security/cve/CVE-2013-4541.html
   https://www.suse.com/security/cve/CVE-2014-0142.html
   https://www.suse.com/security/cve/CVE-2014-0143.html
   https://www.suse.com/security/cve/CVE-2014-0144.html
   https://www.suse.com/security/cve/CVE-2014-0145.html
   https://www.suse.com/security/cve/CVE-2014-0146.html
   https://www.suse.com/security/cve/CVE-2014-0147.html
   https://bugzilla.novell.com/812983
   https://bugzilla.novell.com/817593
   https://bugzilla.novell.com/842006
   https://bugzilla.novell.com/864802
   https://bugzilla.novell.com/870439
   https://scc.suse.com:443/patches/

SuSE: 2014:0623-1: important: kvm

May 8, 2014
An update that fixes 9 vulnerabilities is now available

Summary

The QEMU embedded within KVM received various security fixes. Various issues in the block layer have been fixed: * A virtio security issue in config io space handling (CVE-2013-2016). * A SCSI report LUNs buffer overflow (CVE-2013-4344). * A buffer overflow in the QEMU USB stack (CVE-2013-4541). Security Issue references: * CVE-2013-2016 * CVE-2013-4344 * CVE-2013-4541 * CVE-2014-0142 * CVE-2014-0143 * CVE-2014-0144 * CVE-2014-0145 * CVE-2014-0146 * CVE-2014-0147 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP3: zypper in -t patch slessp3-kvm-9142 - SUSE Linux Enterprise Desktop 11 SP3: zypper in -t patch sledsp3-kvm-9142 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Serve...

Read the Full Advisory

References

#812983 #817593 #842006 #864802 #870439

Cross- CVE-2013-2016 CVE-2013-4344 CVE-2013-4541

CVE-2014-0142 CVE-2014-0143 CVE-2014-0144

CVE-2014-0145 CVE-2014-0146 CVE-2014-0147

Affected Products:

SUSE Linux Enterprise Server 11 SP3

SUSE Linux Enterprise Desktop 11 SP3

https://www.suse.com/security/cve/CVE-2013-2016.html

https://www.suse.com/security/cve/CVE-2013-4344.html

https://www.suse.com/security/cve/CVE-2013-4541.html

https://www.suse.com/security/cve/CVE-2014-0142.html

https://www.suse.com/security/cve/CVE-2014-0143.html

https://www.suse.com/security/cve/CVE-2014-0144.html

https://www.suse.com/security/cve/CVE-2014-0145.html

https://www.suse.com/security/cve/CVE-2014-0146.html

https://www.suse.com/security/cve/CVE-2014-0147.html

https://bugzilla.novell.com/812983

https://bugzilla.novell.com/817593

https://bugzilla.novell.com/842006

https://bugzilla.no...

Read the Full Advisory

Severity
Announcement ID: SUSE-SU-2014:0623-1
Rating: important

Related News

The End of the Road for Linux 6.11: A Call to Upgrade to Kernel 6.12
3 - 5 min read
The Linux kernel community recently issued an EOL announcement regarding the 6.11 kernel series, urging sysadmins to upgrade quickly to 6.12 . This
A Linux Admin
3 - 6 min read
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks,
Leveraging Insights from the Linux Foundation
3 - 5 min read
The Linux Foundation's recent Census III report provides critical insights for Linux administrators, information security professionals, and anyone
Chrome 131 Released: Emergency Security Update Fixes Over a Dozen Significant Vulns
3 - 6 min read
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing over a dozen significant security
From Wayland Fixes to Security Boosts: Examining Qt 6.8.1
3 - 6 min read
The recent Qt 6.8.1 release brings significant updates and improvements, strengthening its reputation as a secure and reliable application
Exploring Arch Linux 2024.12.01: Security Implications & Notable Enhancements for Linux Admins
3 - 6 min read
The Arch Linux 2024.12.01 ISO release marks an impressive milestone, offering cutting-edge updates that enhance functionality, streamline
Deck the Halls with Enhanced Security: Linux Kernel 6.13
3 - 5 min read
As Linux admins and infosec professionals prepare for the holiday season, there's much cause for celebration this year! Linus Torvalds recently made
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
3 - 5 min read
New Linux security threats mark critical junctures that challenge existing policies and test security protocols to their limit. One such milestone

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved