Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:1942-1 Final 1 1 2021-06-10T08:50:33Z current 2021-06-10T08:50:33Z 2021-06-10T08:50:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream (bsc#1181103) - Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144, CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282) - Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263, bsc#1183373) - Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968) - Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686) - Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425) - QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290) - For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro-rancher/5.2:latest-2021-1942,Container suse/sles/15.3/cdi-importer:1.37.1-2021-1942,Container suse/sles/15.3/cdi-uploadserver:1.37.1-2021-1942,Container suse/sles/15.3/libguestfs-tools:0.45.0-2021-1942,Container suse/sles/15.3/virt-handler:0.45.0-2021-1942,Container suse/sles/15.3/virt-launcher:0.45.0-2021-1942,Image SLES15-SP3-EC2-ECS-HVM-2021-1942,SUSE-2021-1942,SUSE-SLE-Module-Basesystem-15-SP3-2021-1942,SUSE-SLE-Module-Server-Applications-15-SP3-2021-1942 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ Link for SUSE-SU-2021:1942-1 https://lists.suse.com/pipermail/sle-security-updates/2021-June/008986.html E-Mail link for SUSE-SU-2021:1942-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1149813 SUSE Bug 1149813 https://bugzilla.suse.com/1163019 SUSE Bug 1163019 https://bugzilla.suse.com/1175144 SUSE Bug 1175144 https://bugzilla.suse.com/1175534 SUSE Bug 1175534 https://bugzilla.suse.com/1176681 SUSE Bug 1176681 https://bugzilla.suse.com/1178683 SUSE Bug 1178683 https://bugzilla.suse.com/1178935 SUSE Bug 1178935 https://bugzilla.suse.com/1179477 SUSE Bug 1179477 https://bugzilla.suse.com/1179484 SUSE Bug 1179484 https://bugzilla.suse.com/1179686 SUSE Bug 1179686 https://bugzilla.suse.com/1181103 SUSE Bug 1181103 https://bugzilla.suse.com/1182282 SUSE Bug 1182282 https://bugzilla.suse.com/1182425 SUSE Bug 1182425 https://bugzilla.suse.com/1182968 SUSE Bug 1182968 https://bugzilla.suse.com/1182975 SUSE Bug 1182975 https://bugzilla.suse.com/1183373 SUSE Bug 1183373 https://bugzilla.suse.com/1186290 SUSE Bug 1186290 https://www.suse.com/security/cve/CVE-2019-15890/ SUSE CVE CVE-2019-15890 page https://www.suse.com/security/cve/CVE-2020-14364/ SUSE CVE CVE-2020-14364 page https://www.suse.com/security/cve/CVE-2020-17380/ SUSE CVE CVE-2020-17380 page https://www.suse.com/security/cve/CVE-2020-25085/ SUSE CVE CVE-2020-25085 page https://www.suse.com/security/cve/CVE-2020-25707/ SUSE CVE CVE-2020-25707 page https://www.suse.com/security/cve/CVE-2020-25723/ SUSE CVE CVE-2020-25723 page https://www.suse.com/security/cve/CVE-2020-27821/ SUSE CVE CVE-2020-27821 page https://www.suse.com/security/cve/CVE-2020-29129/ SUSE CVE CVE-2020-29129 page https://www.suse.com/security/cve/CVE-2020-29130/ SUSE CVE CVE-2020-29130 page https://www.suse.com/security/cve/CVE-2020-8608/ SUSE CVE CVE-2020-8608 page https://www.suse.com/security/cve/CVE-2021-20263/ SUSE CVE CVE-2021-20263 page https://www.suse.com/security/cve/CVE-2021-3409/ SUSE CVE CVE-2021-3409 page https://www.suse.com/security/cve/CVE-2021-3416/ SUSE CVE CVE-2021-3416 page https://www.suse.com/security/cve/CVE-2021-3419/ SUSE CVE CVE-2021-3419 page Container suse/sle-micro-rancher/5.2:latest Container suse/sles/15.3/cdi-importer:1.37.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1 Container suse/sles/15.3/libguestfs-tools:0.45.0 Container suse/sles/15.3/virt-handler:0.45.0 Container suse/sles/15.3/virt-launcher:0.45.0 Image SLES15-SP3-EC2-ECS-HVM SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-guest-agent-5.2.0-17.1 qemu-block-curl-5.2.0-17.1 qemu-tools-5.2.0-17.1 qemu-5.2.0-17.1 qemu-ipxe-1.0.0+-17.1 qemu-seabios-1.14.0_0_g155821a-17.1 qemu-sgabios-8-17.1 qemu-vgabios-1.14.0_0_g155821a-17.1 qemu-x86-5.2.0-17.1 qemu-arm-5.2.0-17.1 qemu-audio-alsa-5.2.0-17.1 qemu-audio-pa-5.2.0-17.1 qemu-audio-spice-5.2.0-17.1 qemu-block-dmg-5.2.0-17.1 qemu-block-gluster-5.2.0-17.1 qemu-block-iscsi-5.2.0-17.1 qemu-block-nfs-5.2.0-17.1 qemu-block-rbd-5.2.0-17.1 qemu-block-ssh-5.2.0-17.1 qemu-chardev-baum-5.2.0-17.1 qemu-chardev-spice-5.2.0-17.1 qemu-extra-5.2.0-17.1 qemu-hw-display-qxl-5.2.0-17.1 qemu-hw-display-virtio-gpu-5.2.0-17.1 qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 qemu-hw-display-virtio-vga-5.2.0-17.1 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 qemu-hw-usb-redirect-5.2.0-17.1 qemu-hw-usb-smartcard-5.2.0-17.1 qemu-ivshmem-tools-5.2.0-17.1 qemu-ksm-5.2.0-17.1 qemu-kvm-5.2.0-17.1 qemu-lang-5.2.0-17.1 qemu-linux-user-5.2.0-17.1 qemu-microvm-5.2.0-17.1 qemu-ppc-5.2.0-17.1 qemu-s390x-5.2.0-17.1 qemu-skiboot-5.2.0-17.1 qemu-testsuite-5.2.0-17.2 qemu-ui-curses-5.2.0-17.1 qemu-ui-gtk-5.2.0-17.1 qemu-ui-opengl-5.2.0-17.1 qemu-ui-spice-app-5.2.0-17.1 qemu-ui-spice-core-5.2.0-17.1 qemu-vhost-user-gpu-5.2.0-17.1 qemu-guest-agent-5.2.0-17.1 as a component of Container suse/sle-micro-rancher/5.2:latest qemu-block-curl-5.2.0-17.1 as a component of Container suse/sles/15.3/cdi-importer:1.37.1 qemu-tools-5.2.0-17.1 as a component of Container suse/sles/15.3/cdi-importer:1.37.1 qemu-block-curl-5.2.0-17.1 as a component of Container suse/sles/15.3/cdi-uploadserver:1.37.1 qemu-tools-5.2.0-17.1 as a component of Container suse/sles/15.3/cdi-uploadserver:1.37.1 qemu-5.2.0-17.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-ipxe-1.0.0+-17.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-seabios-1.14.0_0_g155821a-17.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-sgabios-8-17.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-tools-5.2.0-17.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-vgabios-1.14.0_0_g155821a-17.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-x86-5.2.0-17.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-tools-5.2.0-17.1 as a component of Container suse/sles/15.3/virt-handler:0.45.0 qemu-5.2.0-17.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-ipxe-1.0.0+-17.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-seabios-1.14.0_0_g155821a-17.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-sgabios-8-17.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-tools-5.2.0-17.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-vgabios-1.14.0_0_g155821a-17.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-x86-5.2.0-17.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-tools-5.2.0-17.1 as a component of Image SLES15-SP3-EC2-ECS-HVM qemu-tools-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 qemu-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-arm-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-alsa-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-pa-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-spice-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-curl-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-iscsi-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-rbd-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-ssh-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-chardev-baum-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-chardev-spice-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-guest-agent-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-qxl-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-gpu-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-vga-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-usb-redirect-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ipxe-1.0.0+-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ksm-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-kvm-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-lang-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ppc-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-s390x-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-seabios-1.14.0_0_g155821a-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-sgabios-8-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-skiboot-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-curses-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-gtk-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-opengl-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-spice-app-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-spice-core-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-vgabios-1.14.0_0_g155821a-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-x86-5.2.0-17.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. CVE-2019-15890 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2019-15890.html CVE-2019-15890 https://bugzilla.suse.com/1149811 SUSE Bug 1149811 https://bugzilla.suse.com/1149813 SUSE Bug 1149813 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host. CVE-2020-14364 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2020-14364.html CVE-2020-14364 https://bugzilla.suse.com/1175441 SUSE Bug 1175441 https://bugzilla.suse.com/1175534 SUSE Bug 1175534 https://bugzilla.suse.com/1176494 SUSE Bug 1176494 https://bugzilla.suse.com/1177130 SUSE Bug 1177130 A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code with privileges of the QEMU process on the host. CVE-2020-17380 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2020-17380.html CVE-2020-17380 https://bugzilla.suse.com/1175144 SUSE Bug 1175144 https://bugzilla.suse.com/1182282 SUSE Bug 1182282 QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case. CVE-2020-25085 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2020-25085.html CVE-2020-25085 https://bugzilla.suse.com/1176681 SUSE Bug 1176681 https://bugzilla.suse.com/1182282 SUSE Bug 1182282 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate is a duplicate of CVE-2020-28916 CVE-2020-25707 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2020-25707.html CVE-2020-25707 https://bugzilla.suse.com/1178683 SUSE Bug 1178683 https://bugzilla.suse.com/1179468 SUSE Bug 1179468 A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service. CVE-2020-25723 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2020-25723.html CVE-2020-25723 https://bugzilla.suse.com/1178934 SUSE Bug 1178934 https://bugzilla.suse.com/1178935 SUSE Bug 1178935 A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0. CVE-2020-27821 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2020-27821.html CVE-2020-27821 https://bugzilla.suse.com/1179686 SUSE Bug 1179686 ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. CVE-2020-29129 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2020-29129.html CVE-2020-29129 https://bugzilla.suse.com/1179466 SUSE Bug 1179466 https://bugzilla.suse.com/1179467 SUSE Bug 1179467 https://bugzilla.suse.com/1179477 SUSE Bug 1179477 https://bugzilla.suse.com/1179484 SUSE Bug 1179484 slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. CVE-2020-29130 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2020-29130.html CVE-2020-29130 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1179467 SUSE Bug 1179467 https://bugzilla.suse.com/1179477 SUSE Bug 1179477 In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code. CVE-2020-8608 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2020-8608.html CVE-2020-8608 https://bugzilla.suse.com/1163018 SUSE Bug 1163018 https://bugzilla.suse.com/1163019 SUSE Bug 1163019 A flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU. The new 'xattrmap' option may cause the 'security.capability' xattr in the guest to not drop on file write, potentially leading to a modified, privileged executable in the guest. In rare circumstances, this flaw could be used by a malicious user to elevate their privileges within the guest. CVE-2021-20263 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2021-20263.html CVE-2021-20263 https://bugzilla.suse.com/1183373 SUSE Bug 1183373 The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this. CVE-2021-3409 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2021-3409.html CVE-2021-3409 https://bugzilla.suse.com/1182282 SUSE Bug 1182282 A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario. CVE-2021-3416 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2021-3416.html CVE-2021-3416 https://bugzilla.suse.com/1182968 SUSE Bug 1182968 https://bugzilla.suse.com/1186473 SUSE Bug 1186473 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none. CVE-2021-3419 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-17.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-17.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-17.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-17.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-17.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-17.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/ https://www.suse.com/security/cve/CVE-2021-3419.html CVE-2021-3419 https://bugzilla.suse.com/1182968 SUSE Bug 1182968 https://bugzilla.suse.com/1182975 SUSE Bug 1182975