SUSE-SU-2019:13962-1
- Source
- https://www.suse.com/support/update/announcement/2019/suse-su-201913962-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:13962-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2019:13962-1
- Related
- Published
- 2019-02-15T10:43:11Z
- Modified
- 2019-02-15T10:43:11Z
- Summary
- Security update for kvm
- Details
-
This update for kvm fixes the following issues:
Security issues fixed:
- CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation (bsc#1123156).
- CVE-2018-19489: Fixed a denial of service vulnerability in virtfs (bsc#1117275).
- CVE-2018-19364: Fixed a use-after-free if the virtfs interface resulting in a denial of service (bsc#1116717).
Non-security issue fixed:
- Fixed LAPIC TSC deadline timer save/restore (bsc#1109544)
- References
-
- https://www.suse.com/support/update/announcement/2019/suse-su-201913962-1/
- https://bugzilla.suse.com/1109544
- https://bugzilla.suse.com/1116717
- https://bugzilla.suse.com/1117275
- https://bugzilla.suse.com/1123156
- https://www.suse.com/security/cve/CVE-2018-19364
- https://www.suse.com/security/cve/CVE-2018-19489
- https://www.suse.com/security/cve/CVE-2019-6778
Affected packages
SUSE:Linux Enterprise Server 11 SP4 / kvm
Package
- Name
- kvm
- Purl
- pkg:rpm/suse/kvm&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4