<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for qemu</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2021:1240-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2021-04-16T11:58:20Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-04-16T11:58:20Z</InitialReleaseDate>
    <CurrentReleaseDate>2021-04-16T11:58:20Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for qemu</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for qemu fixes the following issues:

- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
- Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
- Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)
- Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)
- Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)
- Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
- Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)
- Fix OOB access in SLIRP ARP packet processing (CVE-2020-29130, bsc#1179467)
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
- Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386)
- Fix DoS in packet processing of various emulated NICs (CVE-2020-16092 bsc#1174641)
- Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)
- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
- Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)
- Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">HPE-Helion-OpenStack-8-2021-1240,SUSE-2021-1240,SUSE-OpenStack-Cloud-8-2021-1240,SUSE-OpenStack-Cloud-Crowbar-8-2021-1240,SUSE-SLE-SAP-12-SP3-2021-1240,SUSE-SLE-SERVER-12-SP3-2021-1240,SUSE-SLE-SERVER-12-SP3-BCL-2021-1240</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      <Description>Link for SUSE-SU-2021:1240-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2021-April/008648.html</URL>
      <Description>E-Mail link for SUSE-SU-2021:1240-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1172383</URL>
      <Description>SUSE Bug 1172383</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1172384</URL>
      <Description>SUSE Bug 1172384</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1172385</URL>
      <Description>SUSE Bug 1172385</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1172386</URL>
      <Description>SUSE Bug 1172386</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1172478</URL>
      <Description>SUSE Bug 1172478</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1173612</URL>
      <Description>SUSE Bug 1173612</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1174386</URL>
      <Description>SUSE Bug 1174386</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1174641</URL>
      <Description>SUSE Bug 1174641</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1175441</URL>
      <Description>SUSE Bug 1175441</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1176673</URL>
      <Description>SUSE Bug 1176673</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1176682</URL>
      <Description>SUSE Bug 1176682</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1176684</URL>
      <Description>SUSE Bug 1176684</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1178174</URL>
      <Description>SUSE Bug 1178174</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1178934</URL>
      <Description>SUSE Bug 1178934</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1179467</URL>
      <Description>SUSE Bug 1179467</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1179468</URL>
      <Description>SUSE Bug 1179468</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1180523</URL>
      <Description>SUSE Bug 1180523</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1181108</URL>
      <Description>SUSE Bug 1181108</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1181639</URL>
      <Description>SUSE Bug 1181639</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1182137</URL>
      <Description>SUSE Bug 1182137</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1182425</URL>
      <Description>SUSE Bug 1182425</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1182577</URL>
      <Description>SUSE Bug 1182577</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1182968</URL>
      <Description>SUSE Bug 1182968</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-11947/</URL>
      <Description>SUSE CVE CVE-2020-11947 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-12829/</URL>
      <Description>SUSE CVE CVE-2020-12829 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-13361/</URL>
      <Description>SUSE CVE CVE-2020-13361 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-13362/</URL>
      <Description>SUSE CVE CVE-2020-13362 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-13659/</URL>
      <Description>SUSE CVE CVE-2020-13659 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-13765/</URL>
      <Description>SUSE CVE CVE-2020-13765 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-14364/</URL>
      <Description>SUSE CVE CVE-2020-14364 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-15469/</URL>
      <Description>SUSE CVE CVE-2020-15469 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-15863/</URL>
      <Description>SUSE CVE CVE-2020-15863 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-16092/</URL>
      <Description>SUSE CVE CVE-2020-16092 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-25084/</URL>
      <Description>SUSE CVE CVE-2020-25084 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-25624/</URL>
      <Description>SUSE CVE CVE-2020-25624 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-25625/</URL>
      <Description>SUSE CVE CVE-2020-25625 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-25723/</URL>
      <Description>SUSE CVE CVE-2020-25723 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-27617/</URL>
      <Description>SUSE CVE CVE-2020-27617 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-28916/</URL>
      <Description>SUSE CVE CVE-2020-28916 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-29130/</URL>
      <Description>SUSE CVE CVE-2020-29130 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-29443/</URL>
      <Description>SUSE CVE CVE-2020-29443 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-20181/</URL>
      <Description>SUSE CVE CVE-2021-20181 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-20203/</URL>
      <Description>SUSE CVE CVE-2021-20203 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-20257/</URL>
      <Description>SUSE CVE CVE-2021-20257 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-3416/</URL>
      <Description>SUSE CVE CVE-2021-3416 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="HPE Helion OpenStack 8">
      <Branch Type="Product Name" Name="HPE Helion OpenStack 8">
        <FullProductName ProductID="HPE Helion OpenStack 8" CPE="cpe:/o:suse:hpe-helion-openstack:8">HPE Helion OpenStack 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP3-BCL">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP3-BCL">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL" CPE="cpe:/o:suse:sles-bcl:12:sp3">SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP3-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS" CPE="cpe:/o:suse:sles-ltss:12:sp3">SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3" CPE="cpe:/o:suse:sles_sap:12:sp3">SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud 8">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud 8">
        <FullProductName ProductID="SUSE OpenStack Cloud 8" CPE="cpe:/o:suse:suse-openstack-cloud:8">SUSE OpenStack Cloud 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud Crowbar 8">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud Crowbar 8">
        <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8" CPE="cpe:/o:suse:suse-openstack-cloud-crowbar:8">SUSE OpenStack Cloud Crowbar 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="qemu-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-2.9.1-6.47.1">qemu-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-block-curl-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-block-curl-2.9.1-6.47.1">qemu-block-curl-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-block-iscsi-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-block-iscsi-2.9.1-6.47.1">qemu-block-iscsi-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-block-rbd-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-block-rbd-2.9.1-6.47.1">qemu-block-rbd-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-block-ssh-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-block-ssh-2.9.1-6.47.1">qemu-block-ssh-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-guest-agent-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-guest-agent-2.9.1-6.47.1">qemu-guest-agent-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-ipxe-1.0.0+-6.47.1">
      <FullProductName ProductID="qemu-ipxe-1.0.0+-6.47.1">qemu-ipxe-1.0.0+-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-kvm-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-kvm-2.9.1-6.47.1">qemu-kvm-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-lang-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-lang-2.9.1-6.47.1">qemu-lang-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1">
      <FullProductName ProductID="qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-sgabios-8-6.47.1">
      <FullProductName ProductID="qemu-sgabios-8-6.47.1">qemu-sgabios-8-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-tools-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-tools-2.9.1-6.47.1">qemu-tools-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1">
      <FullProductName ProductID="qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-x86-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-x86-2.9.1-6.47.1">qemu-x86-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-arm-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-arm-2.9.1-6.47.1">qemu-arm-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-block-dmg-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-block-dmg-2.9.1-6.47.1">qemu-block-dmg-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-extra-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-extra-2.9.1-6.47.1">qemu-extra-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-linux-user-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-linux-user-2.9.1-6.47.1">qemu-linux-user-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-ppc-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-ppc-2.9.1-6.47.1">qemu-ppc-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="qemu-s390-2.9.1-6.47.1">
      <FullProductName ProductID="qemu-s390-2.9.1-6.47.1">qemu-s390-2.9.1-6.47.1</FullProductName>
    </Branch>
    <Relationship ProductReference="qemu-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-2.9.1-6.47.1">qemu-2.9.1-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-curl-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1">qemu-block-curl-2.9.1-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-iscsi-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1">qemu-block-iscsi-2.9.1-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-rbd-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1">qemu-block-rbd-2.9.1-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-ssh-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1">qemu-block-ssh-2.9.1-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-guest-agent-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1">qemu-guest-agent-2.9.1-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-ipxe-1.0.0+-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1">qemu-ipxe-1.0.0+-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-kvm-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1">qemu-kvm-2.9.1-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-lang-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1">qemu-lang-2.9.1-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-sgabios-8-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1">qemu-sgabios-8-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-tools-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1">qemu-tools-2.9.1-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-x86-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1">qemu-x86-2.9.1-6.47.1 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1">qemu-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-curl-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1">qemu-block-curl-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-iscsi-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1">qemu-block-iscsi-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-rbd-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1">qemu-block-rbd-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-ssh-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1">qemu-block-ssh-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-guest-agent-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1">qemu-guest-agent-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-ipxe-1.0.0+-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1">qemu-ipxe-1.0.0+-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-kvm-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1">qemu-kvm-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-lang-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1">qemu-lang-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-sgabios-8-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1">qemu-sgabios-8-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-tools-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1">qemu-tools-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-x86-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1">qemu-x86-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1">qemu-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-arm-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1">qemu-arm-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-curl-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1">qemu-block-curl-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-iscsi-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1">qemu-block-iscsi-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-rbd-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1">qemu-block-rbd-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-ssh-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1">qemu-block-ssh-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-guest-agent-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1">qemu-guest-agent-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-ipxe-1.0.0+-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1">qemu-ipxe-1.0.0+-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-kvm-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1">qemu-kvm-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-lang-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1">qemu-lang-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-ppc-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1">qemu-ppc-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-s390-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1">qemu-s390-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-sgabios-8-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1">qemu-sgabios-8-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-tools-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1">qemu-tools-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-x86-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1">qemu-x86-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1">qemu-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-curl-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1">qemu-block-curl-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-iscsi-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1">qemu-block-iscsi-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-rbd-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1">qemu-block-rbd-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-ssh-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1">qemu-block-ssh-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-guest-agent-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1">qemu-guest-agent-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-ipxe-1.0.0+-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1">qemu-ipxe-1.0.0+-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-kvm-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1">qemu-kvm-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-lang-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1">qemu-lang-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-ppc-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1">qemu-ppc-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-sgabios-8-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1">qemu-sgabios-8-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-tools-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1">qemu-tools-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-x86-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1">qemu-x86-2.9.1-6.47.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1">qemu-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-curl-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1">qemu-block-curl-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-iscsi-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1">qemu-block-iscsi-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-rbd-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1">qemu-block-rbd-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-ssh-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1">qemu-block-ssh-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-guest-agent-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1">qemu-guest-agent-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-ipxe-1.0.0+-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1">qemu-ipxe-1.0.0+-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-kvm-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1">qemu-kvm-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-lang-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1">qemu-lang-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-sgabios-8-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1">qemu-sgabios-8-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-tools-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1">qemu-tools-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-x86-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1">qemu-x86-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1">qemu-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-curl-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1">qemu-block-curl-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-iscsi-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1">qemu-block-iscsi-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-rbd-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1">qemu-block-rbd-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-block-ssh-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1">qemu-block-ssh-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-guest-agent-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1">qemu-guest-agent-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-ipxe-1.0.0+-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1">qemu-ipxe-1.0.0+-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-kvm-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1">qemu-kvm-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-lang-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1">qemu-lang-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-sgabios-8-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1">qemu-sgabios-8-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-tools-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1">qemu-tools-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1">qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="qemu-x86-2.9.1-6.47.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1">qemu-x86-2.9.1-6.47.1 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.</Note>
    </Notes>
    <CVE>CVE-2020-11947</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-11947.html</URL>
        <Description>CVE-2020-11947</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1180523</URL>
        <Description>SUSE Bug 1180523</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPY_AREA macro while handling MMIO write operations through the sm501_2d_engine_write() callback. A local attacker could abuse this flaw to crash the QEMU process in sm501_2d_operation() in hw/display/sm501.c on the host, resulting in a denial of service.</Note>
    </Notes>
    <CVE>CVE-2020-12829</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-12829.html</URL>
        <Description>CVE-2020-12829</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1172385</URL>
        <Description>SUSE Bug 1172385</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.</Note>
    </Notes>
    <CVE>CVE-2020-13361</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-13361.html</URL>
        <Description>CVE-2020-13361</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1172384</URL>
        <Description>SUSE Bug 1172384</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.</Note>
    </Notes>
    <CVE>CVE-2020-13362</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-13362.html</URL>
        <Description>CVE-2020-13362</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1172383</URL>
        <Description>SUSE Bug 1172383</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.</Note>
    </Notes>
    <CVE>CVE-2020-13659</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-13659.html</URL>
        <Description>CVE-2020-13659</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1172386</URL>
        <Description>SUSE Bug 1172386</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.</Note>
    </Notes>
    <CVE>CVE-2020-13765</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-13765.html</URL>
        <Description>CVE-2020-13765</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1172478</URL>
        <Description>SUSE Bug 1172478</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.</Note>
    </Notes>
    <CVE>CVE-2020-14364</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-14364.html</URL>
        <Description>CVE-2020-14364</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1175441</URL>
        <Description>SUSE Bug 1175441</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1175534</URL>
        <Description>SUSE Bug 1175534</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1176494</URL>
        <Description>SUSE Bug 1176494</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1177130</URL>
        <Description>SUSE Bug 1177130</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.</Note>
    </Notes>
    <CVE>CVE-2020-15469</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-15469.html</URL>
        <Description>CVE-2020-15469</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1173612</URL>
        <Description>SUSE Bug 1173612</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.</Note>
    </Notes>
    <CVE>CVE-2020-15863</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-15863.html</URL>
        <Description>CVE-2020-15863</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1174386</URL>
        <Description>SUSE Bug 1174386</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.</Note>
    </Notes>
    <CVE>CVE-2020-16092</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-16092.html</URL>
        <Description>CVE-2020-16092</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1174641</URL>
        <Description>SUSE Bug 1174641</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked.</Note>
    </Notes>
    <CVE>CVE-2020-25084</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-25084.html</URL>
        <Description>CVE-2020-25084</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1176673</URL>
        <Description>SUSE Bug 1176673</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.</Note>
    </Notes>
    <CVE>CVE-2020-25624</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-25624.html</URL>
        <Description>CVE-2020-25624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1176682</URL>
        <Description>SUSE Bug 1176682</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.</Note>
    </Notes>
    <CVE>CVE-2020-25625</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-25625.html</URL>
        <Description>CVE-2020-25625</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1176684</URL>
        <Description>SUSE Bug 1176684</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.</Note>
    </Notes>
    <CVE>CVE-2020-25723</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-25723.html</URL>
        <Description>CVE-2020-25723</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1178934</URL>
        <Description>SUSE Bug 1178934</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1178935</URL>
        <Description>SUSE Bug 1178935</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via packet data that lacks a valid Layer 3 protocol.</Note>
    </Notes>
    <CVE>CVE-2020-27617</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-27617.html</URL>
        <Description>CVE-2020-27617</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1178174</URL>
        <Description>SUSE Bug 1178174</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.</Note>
    </Notes>
    <CVE>CVE-2020-28916</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-28916.html</URL>
        <Description>CVE-2020-28916</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1178683</URL>
        <Description>SUSE Bug 1178683</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1179468</URL>
        <Description>SUSE Bug 1179468</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.</Note>
    </Notes>
    <CVE>CVE-2020-29130</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-29130.html</URL>
        <Description>CVE-2020-29130</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1178658</URL>
        <Description>SUSE Bug 1178658</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1179467</URL>
        <Description>SUSE Bug 1179467</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1179477</URL>
        <Description>SUSE Bug 1179477</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated.</Note>
    </Notes>
    <CVE>CVE-2020-29443</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-29443.html</URL>
        <Description>CVE-2020-29443</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1181108</URL>
        <Description>SUSE Bug 1181108</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="19">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client to cause a use-after-free error, potentially escalating their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity as well as system availability.</Note>
    </Notes>
    <CVE>CVE-2021-20181</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-20181.html</URL>
        <Description>CVE-2021-20181</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1182137</URL>
        <Description>SUSE Bug 1182137</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="20">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.</Note>
    </Notes>
    <CVE>CVE-2021-20203</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-20203.html</URL>
        <Description>CVE-2021-20203</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1181639</URL>
        <Description>SUSE Bug 1181639</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="21">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.</Note>
    </Notes>
    <CVE>CVE-2021-20257</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-20257.html</URL>
        <Description>CVE-2021-20257</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1182577</URL>
        <Description>SUSE Bug 1182577</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1182846</URL>
        <Description>SUSE Bug 1182846</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="22">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario.</Note>
    </Notes>
    <CVE>CVE-2021-3416</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>HPE Helion OpenStack 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>HPE Helion OpenStack 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-arm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-s390-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:qemu-x86-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-curl-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-iscsi-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-rbd-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-block-ssh-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-guest-agent-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-ipxe-1.0.0+-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-kvm-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-lang-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-seabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-sgabios-8-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-tools-2.9.1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-vgabios-1.10.2_0_g5f4c7b1-6.47.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:qemu-x86-2.9.1-6.47.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2021/suse-su-20211240-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-3416.html</URL>
        <Description>CVE-2021-3416</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1182968</URL>
        <Description>SUSE Bug 1182968</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1186473</URL>
        <Description>SUSE Bug 1186473</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
