Security update for qemu SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2021:1043-1 Final 1 1 2021-07-13T22:06:05Z current 2021-07-13T22:06:05Z 2021-07-13T22:06:05Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3546: Fix out-of-bounds write in virgl_cmd_get_capset (bsc#1185981) - CVE-2021-3544: Fix memory leaks found in the virtio vhost-user GPU device (bsc#1186010) - CVE-2021-3545: Fix information disclosure due to uninitialized memory read (bsc#1185990) - CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681) - CVE-2020-10756: Fix out-of-bounds read information disclosure in icmp6_send_echoreply(bsc#1172380) - For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975) Non-security issues fixed: - Fix issue where s390 guest fails to find zipl boot menu index (bsc#1183979) - QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290) - Host CPU microcode revision will be visible inside VMs when the proper CPU-model is used (jsc#SLE-17785): - Fix testsuite error (bsc#1184574) - Fix qemu crash with iothread when block commit after snapshot (bsc#1187013) - Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591) - Use RCU to avoid race during scsi hotplug/hotunplug (bsc#1184574) This update was imported from the SUSE:SLE-15-SP2:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2021-1043 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ E-Mail link for openSUSE-SU-2021:1043-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1149813 SUSE Bug 1149813 https://bugzilla.suse.com/1163019 SUSE Bug 1163019 https://bugzilla.suse.com/1172380 SUSE Bug 1172380 https://bugzilla.suse.com/1175534 SUSE Bug 1175534 https://bugzilla.suse.com/1176681 SUSE Bug 1176681 https://bugzilla.suse.com/1178683 SUSE Bug 1178683 https://bugzilla.suse.com/1178935 SUSE Bug 1178935 https://bugzilla.suse.com/1179477 SUSE Bug 1179477 https://bugzilla.suse.com/1179484 SUSE Bug 1179484 https://bugzilla.suse.com/1182846 SUSE Bug 1182846 https://bugzilla.suse.com/1182975 SUSE Bug 1182975 https://bugzilla.suse.com/1183979 SUSE Bug 1183979 https://bugzilla.suse.com/1184574 SUSE Bug 1184574 https://bugzilla.suse.com/1185591 SUSE Bug 1185591 https://bugzilla.suse.com/1185981 SUSE Bug 1185981 https://bugzilla.suse.com/1185990 SUSE Bug 1185990 https://bugzilla.suse.com/1186010 SUSE Bug 1186010 https://bugzilla.suse.com/1186290 SUSE Bug 1186290 https://bugzilla.suse.com/1187013 SUSE Bug 1187013 https://www.suse.com/security/cve/CVE-2019-15890/ SUSE CVE CVE-2019-15890 page https://www.suse.com/security/cve/CVE-2020-10756/ SUSE CVE CVE-2020-10756 page https://www.suse.com/security/cve/CVE-2020-14364/ SUSE CVE CVE-2020-14364 page https://www.suse.com/security/cve/CVE-2020-25085/ SUSE CVE CVE-2020-25085 page https://www.suse.com/security/cve/CVE-2020-25707/ SUSE CVE CVE-2020-25707 page https://www.suse.com/security/cve/CVE-2020-25723/ SUSE CVE CVE-2020-25723 page https://www.suse.com/security/cve/CVE-2020-29129/ SUSE CVE CVE-2020-29129 page https://www.suse.com/security/cve/CVE-2020-29130/ SUSE CVE CVE-2020-29130 page https://www.suse.com/security/cve/CVE-2020-8608/ SUSE CVE CVE-2020-8608 page https://www.suse.com/security/cve/CVE-2021-20257/ SUSE CVE CVE-2021-20257 page https://www.suse.com/security/cve/CVE-2021-3419/ SUSE CVE CVE-2021-3419 page https://www.suse.com/security/cve/CVE-2021-3544/ SUSE CVE CVE-2021-3544 page https://www.suse.com/security/cve/CVE-2021-3545/ SUSE CVE CVE-2021-3545 page https://www.suse.com/security/cve/CVE-2021-3546/ SUSE CVE CVE-2021-3546 page openSUSE Leap 15.2 qemu-4.2.1-lp152.9.16.2 qemu-arm-4.2.1-lp152.9.16.2 qemu-audio-alsa-4.2.1-lp152.9.16.2 qemu-audio-pa-4.2.1-lp152.9.16.2 qemu-audio-sdl-4.2.1-lp152.9.16.2 qemu-block-curl-4.2.1-lp152.9.16.2 qemu-block-dmg-4.2.1-lp152.9.16.2 qemu-block-gluster-4.2.1-lp152.9.16.2 qemu-block-iscsi-4.2.1-lp152.9.16.2 qemu-block-nfs-4.2.1-lp152.9.16.2 qemu-block-rbd-4.2.1-lp152.9.16.2 qemu-block-ssh-4.2.1-lp152.9.16.2 qemu-extra-4.2.1-lp152.9.16.2 qemu-guest-agent-4.2.1-lp152.9.16.2 qemu-ipxe-1.0.0+-lp152.9.16.2 qemu-ksm-4.2.1-lp152.9.16.2 qemu-kvm-4.2.1-lp152.9.16.2 qemu-lang-4.2.1-lp152.9.16.2 qemu-linux-user-4.2.1-lp152.9.16.1 qemu-microvm-4.2.1-lp152.9.16.2 qemu-ppc-4.2.1-lp152.9.16.2 qemu-s390-4.2.1-lp152.9.16.2 qemu-seabios-1.12.1+-lp152.9.16.2 qemu-sgabios-8-lp152.9.16.2 qemu-testsuite-4.2.1-lp152.9.16.7 qemu-tools-4.2.1-lp152.9.16.2 qemu-ui-curses-4.2.1-lp152.9.16.2 qemu-ui-gtk-4.2.1-lp152.9.16.2 qemu-ui-sdl-4.2.1-lp152.9.16.2 qemu-ui-spice-app-4.2.1-lp152.9.16.2 qemu-vgabios-1.12.1+-lp152.9.16.2 qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 qemu-x86-4.2.1-lp152.9.16.2 qemu-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-arm-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-audio-alsa-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-audio-pa-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-audio-sdl-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-block-curl-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-block-dmg-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-block-gluster-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-block-iscsi-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-block-nfs-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-block-rbd-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-block-ssh-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-extra-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-guest-agent-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-ipxe-1.0.0+-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-ksm-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-kvm-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-lang-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-linux-user-4.2.1-lp152.9.16.1 as a component of openSUSE Leap 15.2 qemu-microvm-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-ppc-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-s390-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-seabios-1.12.1+-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-sgabios-8-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-testsuite-4.2.1-lp152.9.16.7 as a component of openSUSE Leap 15.2 qemu-tools-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-ui-curses-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-ui-gtk-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-ui-sdl-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-ui-spice-app-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-vgabios-1.12.1+-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 qemu-x86-4.2.1-lp152.9.16.2 as a component of openSUSE Leap 15.2 libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. CVE-2019-15890 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2019-15890.html CVE-2019-15890 https://bugzilla.suse.com/1149811 SUSE Bug 1149811 https://bugzilla.suse.com/1149813 SUSE Bug 1149813 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory, resulting in possible information disclosure. This flaw affects versions of libslirp before 4.3.1. CVE-2020-10756 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2020-10756.html CVE-2020-10756 https://bugzilla.suse.com/1172380 SUSE Bug 1172380 https://bugzilla.suse.com/1184743 SUSE Bug 1184743 An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host. CVE-2020-14364 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2020-14364.html CVE-2020-14364 https://bugzilla.suse.com/1175441 SUSE Bug 1175441 https://bugzilla.suse.com/1175534 SUSE Bug 1175534 https://bugzilla.suse.com/1176494 SUSE Bug 1176494 https://bugzilla.suse.com/1177130 SUSE Bug 1177130 QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case. CVE-2020-25085 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2020-25085.html CVE-2020-25085 https://bugzilla.suse.com/1176681 SUSE Bug 1176681 https://bugzilla.suse.com/1182282 SUSE Bug 1182282 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate is a duplicate of CVE-2020-28916 CVE-2020-25707 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2020-25707.html CVE-2020-25707 https://bugzilla.suse.com/1178683 SUSE Bug 1178683 https://bugzilla.suse.com/1179468 SUSE Bug 1179468 A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service. CVE-2020-25723 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 low 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2020-25723.html CVE-2020-25723 https://bugzilla.suse.com/1178934 SUSE Bug 1178934 https://bugzilla.suse.com/1178935 SUSE Bug 1178935 ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. CVE-2020-29129 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 low 4 AV:N/AC:L/Au:S/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2020-29129.html CVE-2020-29129 https://bugzilla.suse.com/1179466 SUSE Bug 1179466 https://bugzilla.suse.com/1179467 SUSE Bug 1179467 https://bugzilla.suse.com/1179477 SUSE Bug 1179477 https://bugzilla.suse.com/1179484 SUSE Bug 1179484 slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. CVE-2020-29130 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 moderate 4 AV:N/AC:L/Au:S/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2020-29130.html CVE-2020-29130 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1179467 SUSE Bug 1179467 https://bugzilla.suse.com/1179477 SUSE Bug 1179477 In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code. CVE-2020-8608 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2020-8608.html CVE-2020-8608 https://bugzilla.suse.com/1163018 SUSE Bug 1163018 https://bugzilla.suse.com/1163019 SUSE Bug 1163019 An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability. CVE-2021-20257 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 low 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2021-20257.html CVE-2021-20257 https://bugzilla.suse.com/1182577 SUSE Bug 1182577 https://bugzilla.suse.com/1182846 SUSE Bug 1182846 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none. CVE-2021-3419 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2021-3419.html CVE-2021-3419 https://bugzilla.suse.com/1182968 SUSE Bug 1182968 https://bugzilla.suse.com/1182975 SUSE Bug 1182975 Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory (i.e., free) after effective lifetime. CVE-2021-3544 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2021-3544.html CVE-2021-3544 https://bugzilla.suse.com/1186010 SUSE Bug 1186010 An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw exists in virgl_cmd_get_capset_info() in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest could exploit this issue to leak memory from the host. CVE-2021-3545 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2021-3545.html CVE-2021-3545 https://bugzilla.suse.com/1185990 SUSE Bug 1185990 An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process. CVE-2021-3546 openSUSE Leap 15.2:qemu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.16.2 openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.16.1 openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.16.2 openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.16.7 openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.16.2 openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.16.2 openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.16.2 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/ https://www.suse.com/security/cve/CVE-2021-3546.html CVE-2021-3546 https://bugzilla.suse.com/1185981 SUSE Bug 1185981