SUSE-RU-2012:0953-1: Recommended update for kvm

sle-updates at sle-updates at
Sat Aug 4 10:08:37 MDT 2012

   SUSE Recommended Update: Recommended update for kvm

Announcement ID:    SUSE-RU-2012:0953-1
Rating:             low
References:         #709405 #722643 #722958 #724813 #747339 #753313 
                    #757031 #764526 
Affected Products:
                    SUSE Linux Enterprise Server 11 SP2
                    SUSE Linux Enterprise Desktop 11 SP2

   An update that solves one vulnerability and has 7 fixes is
   now available.


   This update for KVM resolves the following issues:


   The hardware certification NIC in/out tests were
   failing in some cases. The guest virtio-net driver would
   stop receiving packets after some time (bnc#709405).


   Tight PNG encoding should only be used when
   --enable-vnc-png is set. KVM builds with --disable-vnc-png
   option and this bug is adversely affecting noVNC


   Invoke device reset handler on hot-plug. This
   resolves network connectivity problems with hot-plugged
   NICs on Windows 2008 guests (bnc#722958, bnc#722643).


   Disable CPU hotplug in qemu monitor (bnc#747339).


   Mouse in guest does not work after kdump (bnc#724813).


   The monitor command "block_resize" was moved from
   unsupported to supported in kvm-supported.txt to correctly
   reflect its already supported status.


   Add cache=directsync to round out full range of cache


   fix vulnerability to temporary file symlink attacks
   in snapshot file mode. (bnc#764526) (CVE-2012-2652)


   For pci device assignment, update legacy interrupts
   only if used. Don't mess with assign_intx on devices that
   are in MSI or MSI-X mode, it would corrupt their interrupt
   routing. (bnc#753313)

   Security Issues:

   * CVE-2012-2652


Patch Instructions:

   To install this SUSE Recommended Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server 11 SP2:

      zypper in -t patch slessp2-kvm-6455

   - SUSE Linux Enterprise Desktop 11 SP2:

      zypper in -t patch sledsp2-kvm-6455

   To bring your system up-to-date, use "zypper patch".

Package List:

   - SUSE Linux Enterprise Server 11 SP2 (i586 x86_64):


   - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64):



More information about the sle-updates mailing list