SUSE-RU-2012:0953-1: Recommended update for kvm

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for kvm
______________________________________________________________________________

Announcement ID:    SUSE-RU-2012:0953-1
Rating:             low
References:         #709405 #722643 #722958 #724813 #747339 #753313 
                    #757031 #764526 
Affected Products:
                    SUSE Linux Enterprise Server 11 SP2
                    SUSE Linux Enterprise Desktop 11 SP2
______________________________________________________________________________

   An update that solves one vulnerability and has 7 fixes is
   now available.

Description:


   This update for KVM resolves the following issues:

   *

   The hardware certification NIC in/out tests were
   failing in some cases. The guest virtio-net driver would
   stop receiving packets after some time (bnc#709405).

   *

   Tight PNG encoding should only be used when
   --enable-vnc-png is set. KVM builds with --disable-vnc-png
   option and this bug is adversely affecting noVNC
   (bnc#757031).

   *

   Invoke device reset handler on hot-plug. This
   resolves network connectivity problems with hot-plugged
   NICs on Windows 2008 guests (bnc#722958, bnc#722643).

   *

   Disable CPU hotplug in qemu monitor (bnc#747339).

   *

   Mouse in guest does not work after kdump (bnc#724813).

   *

   The monitor command "block_resize" was moved from
   unsupported to supported in kvm-supported.txt to correctly
   reflect its already supported status.

   *

   Add cache=directsync to round out full range of cache
   options.

   *

   fix vulnerability to temporary file symlink attacks
   in snapshot file mode. (bnc#764526) (CVE-2012-2652)

   *

   For pci device assignment, update legacy interrupts
   only if used. Don't mess with assign_intx on devices that
   are in MSI or MSI-X mode, it would corrupt their interrupt
   routing. (bnc#753313)

   Security Issues:

   * CVE-2012-2652
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2652
   >

Contraindications:



Patch Instructions:

   To install this SUSE Recommended Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server 11 SP2:

      zypper in -t patch slessp2-kvm-6455

   - SUSE Linux Enterprise Desktop 11 SP2:

      zypper in -t patch sledsp2-kvm-6455

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Server 11 SP2 (i586 x86_64):

      kvm-0.15.1-0.21.1

   - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64):

      kvm-0.15.1-0.21.1


References:

   http://support.novell.com/security/cve/CVE-2012-2652.html
   https://bugzilla.novell.com/709405
   https://bugzilla.novell.com/722643
   https://bugzilla.novell.com/722958
   https://bugzilla.novell.com/724813
   https://bugzilla.novell.com/747339
   https://bugzilla.novell.com/753313
   https://bugzilla.novell.com/757031
   https://bugzilla.novell.com/764526
   http://download.novell.com/patch/finder/?keywords=d568a75ed554d4a5eb44c40b27ffb1c7