Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:1837-1 Final 1 1 2021-06-02T14:28:16Z current 2021-06-02T14:28:16Z 2021-06-02T14:28:16Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - Fix out-of-bounds access issue while doing multi block SDMA (CVE-2020-25085, bsc#1176681) - Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380) - QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290) - Change dependency from CONFIG_VFIO back to CONFIG_LINUX (bsc#1179725) - For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-EC2-ECS-On-Demand-2021-1837,SUSE-2021-1837,SUSE-SLE-SERVER-12-SP5-2021-1837 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/ Link for SUSE-SU-2021:1837-1 https://lists.suse.com/pipermail/sle-security-updates/2021-June/008916.html E-Mail link for SUSE-SU-2021:1837-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1149813 SUSE Bug 1149813 https://bugzilla.suse.com/1163019 SUSE Bug 1163019 https://bugzilla.suse.com/1172380 SUSE Bug 1172380 https://bugzilla.suse.com/1175534 SUSE Bug 1175534 https://bugzilla.suse.com/1176681 SUSE Bug 1176681 https://bugzilla.suse.com/1178683 SUSE Bug 1178683 https://bugzilla.suse.com/1178935 SUSE Bug 1178935 https://bugzilla.suse.com/1179477 SUSE Bug 1179477 https://bugzilla.suse.com/1179484 SUSE Bug 1179484 https://bugzilla.suse.com/1179725 SUSE Bug 1179725 https://bugzilla.suse.com/1182846 SUSE Bug 1182846 https://bugzilla.suse.com/1182975 SUSE Bug 1182975 https://bugzilla.suse.com/1186290 SUSE Bug 1186290 https://www.suse.com/security/cve/CVE-2019-15890/ SUSE CVE CVE-2019-15890 page https://www.suse.com/security/cve/CVE-2020-10756/ SUSE CVE CVE-2020-10756 page https://www.suse.com/security/cve/CVE-2020-14364/ SUSE CVE CVE-2020-14364 page https://www.suse.com/security/cve/CVE-2020-25085/ SUSE CVE CVE-2020-25085 page https://www.suse.com/security/cve/CVE-2020-25707/ SUSE CVE CVE-2020-25707 page https://www.suse.com/security/cve/CVE-2020-25723/ SUSE CVE CVE-2020-25723 page https://www.suse.com/security/cve/CVE-2020-29129/ SUSE CVE CVE-2020-29129 page https://www.suse.com/security/cve/CVE-2020-29130/ SUSE CVE CVE-2020-29130 page https://www.suse.com/security/cve/CVE-2020-8608/ SUSE CVE CVE-2020-8608 page https://www.suse.com/security/cve/CVE-2021-20257/ SUSE CVE CVE-2021-20257 page https://www.suse.com/security/cve/CVE-2021-3419/ SUSE CVE CVE-2021-3419 page Image SLES12-SP5-EC2-ECS-On-Demand SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-tools-3.1.1.1-51.1 qemu-3.1.1.1-51.1 qemu-arm-3.1.1.1-51.1 qemu-audio-alsa-3.1.1.1-51.1 qemu-audio-oss-3.1.1.1-51.1 qemu-audio-pa-3.1.1.1-51.1 qemu-audio-sdl-3.1.1.1-51.1 qemu-block-curl-3.1.1.1-51.1 qemu-block-dmg-3.1.1.1-51.1 qemu-block-iscsi-3.1.1.1-51.1 qemu-block-rbd-3.1.1.1-51.1 qemu-block-ssh-3.1.1.1-51.1 qemu-extra-3.1.1.1-51.1 qemu-guest-agent-3.1.1.1-51.1 qemu-ipxe-1.0.0+-51.1 qemu-kvm-3.1.1.1-51.1 qemu-lang-3.1.1.1-51.1 qemu-linux-user-3.1.1.1-51.1 qemu-ppc-3.1.1.1-51.1 qemu-s390-3.1.1.1-51.1 qemu-seabios-1.12.0_0_ga698c89-51.1 qemu-sgabios-8-51.1 qemu-ui-curses-3.1.1.1-51.1 qemu-ui-gtk-3.1.1.1-51.1 qemu-ui-sdl-3.1.1.1-51.1 qemu-vgabios-1.12.0_0_ga698c89-51.1 qemu-x86-3.1.1.1-51.1 qemu-tools-3.1.1.1-51.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand qemu-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-arm-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-audio-alsa-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-audio-oss-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-audio-pa-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-audio-sdl-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-block-curl-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-block-iscsi-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-block-rbd-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-block-ssh-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-guest-agent-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-ipxe-1.0.0+-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-kvm-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-lang-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-ppc-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-s390-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-seabios-1.12.0_0_ga698c89-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-sgabios-8-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-tools-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-ui-curses-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-ui-gtk-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-ui-sdl-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-vgabios-1.12.0_0_ga698c89-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-x86-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server 12 SP5 qemu-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-arm-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-audio-alsa-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-audio-oss-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-audio-pa-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-audio-sdl-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-block-curl-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-block-iscsi-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-block-rbd-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-block-ssh-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-guest-agent-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-ipxe-1.0.0+-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-kvm-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-lang-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-ppc-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-s390-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-seabios-1.12.0_0_ga698c89-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-sgabios-8-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-tools-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-ui-curses-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-ui-gtk-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-ui-sdl-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-vgabios-1.12.0_0_ga698c89-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 qemu-x86-3.1.1.1-51.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. CVE-2019-15890 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-51.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/ https://www.suse.com/security/cve/CVE-2019-15890.html CVE-2019-15890 https://bugzilla.suse.com/1149811 SUSE Bug 1149811 https://bugzilla.suse.com/1149813 SUSE Bug 1149813 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory, resulting in possible information disclosure. This flaw affects versions of libslirp before 4.3.1. CVE-2020-10756 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-51.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/ https://www.suse.com/security/cve/CVE-2020-10756.html CVE-2020-10756 https://bugzilla.suse.com/1172380 SUSE Bug 1172380 https://bugzilla.suse.com/1184743 SUSE Bug 1184743 An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host. CVE-2020-14364 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-51.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/ https://www.suse.com/security/cve/CVE-2020-14364.html CVE-2020-14364 https://bugzilla.suse.com/1175441 SUSE Bug 1175441 https://bugzilla.suse.com/1175534 SUSE Bug 1175534 https://bugzilla.suse.com/1176494 SUSE Bug 1176494 https://bugzilla.suse.com/1177130 SUSE Bug 1177130 QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case. CVE-2020-25085 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-51.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/ https://www.suse.com/security/cve/CVE-2020-25085.html CVE-2020-25085 https://bugzilla.suse.com/1176681 SUSE Bug 1176681 https://bugzilla.suse.com/1182282 SUSE Bug 1182282 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate is a duplicate of CVE-2020-28916 CVE-2020-25707 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-51.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/ https://www.suse.com/security/cve/CVE-2020-25707.html CVE-2020-25707 https://bugzilla.suse.com/1178683 SUSE Bug 1178683 https://bugzilla.suse.com/1179468 SUSE Bug 1179468 A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service. CVE-2020-25723 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-51.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/ https://www.suse.com/security/cve/CVE-2020-25723.html CVE-2020-25723 https://bugzilla.suse.com/1178934 SUSE Bug 1178934 https://bugzilla.suse.com/1178935 SUSE Bug 1178935 ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. CVE-2020-29129 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-51.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/ https://www.suse.com/security/cve/CVE-2020-29129.html CVE-2020-29129 https://bugzilla.suse.com/1179466 SUSE Bug 1179466 https://bugzilla.suse.com/1179467 SUSE Bug 1179467 https://bugzilla.suse.com/1179477 SUSE Bug 1179477 https://bugzilla.suse.com/1179484 SUSE Bug 1179484 slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. CVE-2020-29130 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-51.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/ https://www.suse.com/security/cve/CVE-2020-29130.html CVE-2020-29130 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1179467 SUSE Bug 1179467 https://bugzilla.suse.com/1179477 SUSE Bug 1179477 In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code. CVE-2020-8608 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-51.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/ https://www.suse.com/security/cve/CVE-2020-8608.html CVE-2020-8608 https://bugzilla.suse.com/1163018 SUSE Bug 1163018 https://bugzilla.suse.com/1163019 SUSE Bug 1163019 An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability. CVE-2021-20257 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-51.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/ https://www.suse.com/security/cve/CVE-2021-20257.html CVE-2021-20257 https://bugzilla.suse.com/1182577 SUSE Bug 1182577 https://bugzilla.suse.com/1182846 SUSE Bug 1182846 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none. CVE-2021-3419 Image SLES12-SP5-EC2-ECS-On-Demand:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server 12 SP5:qemu-x86-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-arm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-alsa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-oss-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-pa-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-audio-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-curl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-iscsi-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-rbd-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-block-ssh-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-guest-agent-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ipxe-1.0.0+-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-kvm-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-lang-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ppc-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-s390-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-seabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-sgabios-8-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-tools-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-curses-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-gtk-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-ui-sdl-3.1.1.1-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-vgabios-1.12.0_0_ga698c89-51.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:qemu-x86-3.1.1.1-51.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/ https://www.suse.com/security/cve/CVE-2021-3419.html CVE-2021-3419 https://bugzilla.suse.com/1182968 SUSE Bug 1182968 https://bugzilla.suse.com/1182975 SUSE Bug 1182975