<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="a3c4f732a4d35adf0172a8c430a54f44"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="1545">
  <id>dbg111-kvm</id>
  <title>QEMU KVM: several security bugs fixed</title>
  <release>openSUSE 11.1</release>
  <issued date="1258105863"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=547555" id="547555" title="bug number 547555" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=550072" id="550072" title="bug number 550072" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=549487" id="549487" title="bug number 549487" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=540247" id="540247" title="bug number 540247" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=550917" id="550917" title="bug number 550917" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=547624" id="547624" title="bug number 547624" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=550732" id="550732" title="bug number 550732" type="bugzilla"/>
  </references>
  <description>This update of QEMU KVM fixes the following bugs:
- CVE-2009-3616: CVSS v2 Base Score: 8.5 use-after-free bug
  in VNC code which might be used to execute code on the
  host system injected from the guest system
- CVE-2009-3638: CVSS v2 Base Score: 7.2 integer overflow
  in kvm_dev_ioctl_get_supported_cpuid() 
- CVE-2009-3640: CVSS v2 Base Score: 2.1
  update_cr8_intercept() NULL pointer dereference
</description>
  <pkglist>
    <collection>
        <package name="kvm-debuginfo" arch="i586" version="78.0.10.6" release="0.1.1">
          <filename>kvm-debuginfo-78.0.10.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="kvm-debuginfo" arch="x86_64" version="78.0.10.6" release="0.1.1">
          <filename>kvm-debuginfo-78.0.10.6-0.1.1.x86_64.rpm</filename>
        </package>
        <package name="kvm-debugsource" arch="i586" version="78.0.10.6" release="0.1.1">
          <filename>kvm-debugsource-78.0.10.6-0.1.1.i586.rpm</filename>
        </package>
        <package name="kvm-debugsource" arch="x86_64" version="78.0.10.6" release="0.1.1">
          <filename>kvm-debugsource-78.0.10.6-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
