Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:2743-1 Final 1 1 2020-09-24T15:55:29Z current 2020-09-24T15:55:29Z 2020-09-24T15:55:29Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - CVE-2020-13361: Fixed an OOB access possibility in ES1370 audio device emulation (bsc#1172384). - CVE-2020-14364: Fixed an OOB access while processing USB packets (bsc#1175441). - CVE-2020-16092: Fixed a denial of service in packet processing of various emulated NICs (bsc#1174641). - CVE-2020-15863: Fixed a buffer overflow in the XGMAC device (bsc#1174386). - Fix OOB access in ROM loading The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-EC2-ECS-On-Demand-2020-2743,SUSE-2020-2743,SUSE-SLE-SERVER-12-SP5-2020-2743 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20202743-1/ Link for SUSE-SU-2020:2743-1 https://lists.suse.com/pipermail/sle-security-updates/2020-September/007481.html E-Mail link for SUSE-SU-2020:2743-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1172384 SUSE Bug 1172384 https://bugzilla.suse.com/1174386 SUSE Bug 1174386 https://bugzilla.suse.com/1174641 SUSE Bug 1174641 https://bugzilla.suse.com/1175441 SUSE Bug 1175441 https://www.suse.com/security/cve/CVE-2020-13361/ SUSE CVE CVE-2020-13361 page https://www.suse.com/security/cve/CVE-2020-14364/ SUSE CVE CVE-2020-14364 page https://www.suse.com/security/cve/CVE-2020-15863/ SUSE CVE CVE-2020-15863 page https://www.suse.com/security/cve/CVE-2020-16092/ SUSE CVE CVE-2020-16092 page Image SLES12-SP5-EC2-ECS-On-Demand SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-tools-3.1.1.1-45.1 qemu-3.1.1.1-45.1 qemu-arm-3.1.1.1-45.1 qemu-audio-alsa-3.1.1.1-45.1 qemu-audio-oss-3.1.1.1-45.1 qemu-audio-pa-3.1.1.1-45.1 qemu-audio-sdl-3.1.1.1-45.1 qemu-block-curl-3.1.1.1-45.1 qemu-block-dmg-3.1.1.1-45.1 qemu-block-iscsi-3.1.1.1-45.1 qemu-block-rbd-3.1.1.1-45.1 qemu-block-ssh-3.1.1.1-45.1 qemu-extra-3.1.1.1-45.1 qemu-guest-agent-3.1.1.1-45.1 qemu-ipxe-1.0.0+-45.1 qemu-kvm-3.1.1.1-45.1 qemu-lang-3.1.1.1-45.1 qemu-linux-user-3.1.1.1-45.1 qemu-ppc-3.1.1.1-45.1 qemu-s390-3.1.1.1-45.1 qemu-seabios-1.12.0-45.1 qemu-sgabios-8-45.1 qemu-ui-curses-3.1.1.1-45.1 qemu-ui-gtk-3.1.1.1-45.1 qemu-ui-sdl-3.1.1.1-45.1 qemu-vgabios-1.12.0-45.1 qemu-x86-3.1.1.1-45.1 qemu-tools-3.1.1.1-45.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand qemu-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-arm-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-audio-alsa-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-audio-oss-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-audio-pa-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-audio-sdl-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-block-curl-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-block-iscsi-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-block-rbd-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-block-ssh-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-guest-agent-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-ipxe-1.0.0+-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-kvm-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-lang-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-ppc-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-s390-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-seabios-1.12.0-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-sgabios-8-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-tools-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-ui-curses-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-ui-gtk-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-ui-sdl-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-vgabios-1.12.0-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-x86-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-arm-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-audio-alsa-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-audio-oss-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-audio-pa-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-audio-sdl-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-block-curl-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-block-iscsi-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-block-rbd-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-block-ssh-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-guest-agent-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-ipxe-1.0.0+-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-kvm-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-lang-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-ppc-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-s390-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-seabios-1.12.0-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-sgabios-8-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-tools-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-ui-curses-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-ui-gtk-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-ui-sdl-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-vgabios-1.12.0-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-x86-3.1.1.1-45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation. CVE-2020-13361 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-45.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202743-1/ https://www.suse.com/security/cve/CVE-2020-13361.html CVE-2020-13361 https://bugzilla.suse.com/1172384 SUSE Bug 1172384 An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host. CVE-2020-14364 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-45.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202743-1/ https://www.suse.com/security/cve/CVE-2020-14364.html CVE-2020-14364 https://bugzilla.suse.com/1175441 SUSE Bug 1175441 https://bugzilla.suse.com/1175534 SUSE Bug 1175534 https://bugzilla.suse.com/1176494 SUSE Bug 1176494 https://bugzilla.suse.com/1177130 SUSE Bug 1177130 hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555. CVE-2020-15863 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-45.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202743-1/ https://www.suse.com/security/cve/CVE-2020-15863.html CVE-2020-15863 https://bugzilla.suse.com/1174386 SUSE Bug 1174386 In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c. CVE-2020-16092 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0-45.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0-45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-45.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20202743-1/ https://www.suse.com/security/cve/CVE-2020-16092.html CVE-2020-16092 https://bugzilla.suse.com/1174641 SUSE Bug 1174641