SUSE-SU-2016:2988-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2016/suse-su-20162988-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2988-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2016:2988-1
Upstream
Related
Published
2016-12-02T16:25:10Z
Modified
2026-03-11T06:29:38Z
Summary
Security update for qemu
Details

This update for qemu fixes the following issues:

  • Fix OOB access in xlnx.xpx-ethernetlite emulation (CVE-2016-7161 bsc#1001151)
  • Fix OOB access in VMware SVGA emulation (CVE-2016-7170 bsc#998516)
  • Fix DOS in USB xHCI emulation (CVE-2016-7466 bsc#1000345)
  • Fix DOS in Vmware pv scsi interface (CVE-2016-7421 bsc#999661)
  • Fix DOS in ColdFire Fast Ethernet Controller emulation (CVE-2016-7908 bsc#1002550)
  • Fix DOS in USB xHCI emulation (CVE-2016-8576 bsc#1003878)
  • Fix DOS in virtio-9pfs (CVE-2016-8578 bsc#1003894)
  • Fix DOS in virtio-9pfs (CVE-2016-9105 bsc#1007494)
  • Fix DOS in virtio-9pfs (CVE-2016-8577 bsc#1003893)
  • Plug data leak in virtio-9pfs interface (CVE-2016-9103 bsc#1007454)
  • Fix DOS in virtio-9pfs interface (CVE-2016-9102 bsc#1007450)
  • Fix DOS in virtio-9pfs (CVE-2016-9106 bsc#1007495)
  • Fix DOS in 16550A UART emulation (CVE-2016-8669 bsc#1004707)
  • Fix DOS in PC-Net II emulation (CVE-2016-7909 bsc#1002557)
  • Fix DOS in PRO100 emulation (CVE-2016-9101 bsc#1007391)
  • Fix DOS in RTL8139 emulation (CVE-2016-8910 bsc#1006538)
  • Fix DOS in Intel HDA controller emulation (CVE-2016-8909 bsc#1006536)
  • Fix DOS in virtio-9pfs (CVE-2016-9104 bsc#1007493)
  • Fix DOS in JAZZ RC4030 emulation (CVE-2016-8667 bsc#1004702)
  • Fix case of disk corruption with migration due to improper internal state tracking (bsc#996524)
References

Affected packages

SUSE:Linux Enterprise Desktop 12 SP1
qemu

Package

Name
qemu
Purl
pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.3.1-24.6

Ecosystem specific 

{
    "binaries":  [
        {
            "qemu":  "2.3.1-24.6",
            "qemu-block-curl":  "2.3.1-24.6",
            "qemu-ipxe":  "1.0.0-24.6",
            "qemu-kvm":  "2.3.1-24.6",
            "qemu-seabios":  "1.8.1-24.6",
            "qemu-sgabios":  "8-24.6",
            "qemu-tools":  "2.3.1-24.6",
            "qemu-vgabios":  "1.8.1-24.6",
            "qemu-x86":  "2.3.1-24.6"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2988-1.json"
SUSE:Linux Enterprise Server 12 SP1
qemu

Package

Name
qemu
Purl
pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.3.1-24.6

Ecosystem specific 

{
    "binaries":  [
        {
            "qemu":  "2.3.1-24.6",
            "qemu-block-curl":  "2.3.1-24.6",
            "qemu-block-rbd":  "2.3.1-24.6",
            "qemu-guest-agent":  "2.3.1-24.6",
            "qemu-ipxe":  "1.0.0-24.6",
            "qemu-kvm":  "2.3.1-24.6",
            "qemu-lang":  "2.3.1-24.6",
            "qemu-ppc":  "2.3.1-24.6",
            "qemu-s390":  "2.3.1-24.6",
            "qemu-seabios":  "1.8.1-24.6",
            "qemu-sgabios":  "8-24.6",
            "qemu-tools":  "2.3.1-24.6",
            "qemu-vgabios":  "1.8.1-24.6",
            "qemu-x86":  "2.3.1-24.6"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2988-1.json"
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
qemu

Package

Name
qemu
Purl
pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.3.1-24.6

Ecosystem specific 

{
    "binaries":  [
        {
            "qemu":  "2.3.1-24.6",
            "qemu-block-curl":  "2.3.1-24.6",
            "qemu-block-rbd":  "2.3.1-24.6",
            "qemu-guest-agent":  "2.3.1-24.6",
            "qemu-ipxe":  "1.0.0-24.6",
            "qemu-kvm":  "2.3.1-24.6",
            "qemu-lang":  "2.3.1-24.6",
            "qemu-ppc":  "2.3.1-24.6",
            "qemu-s390":  "2.3.1-24.6",
            "qemu-seabios":  "1.8.1-24.6",
            "qemu-sgabios":  "8-24.6",
            "qemu-tools":  "2.3.1-24.6",
            "qemu-vgabios":  "1.8.1-24.6",
            "qemu-x86":  "2.3.1-24.6"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2988-1.json"