Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:2442-1 Final 1 1 2021-07-21T12:01:31Z current 2021-07-21T12:01:31Z 2021-07-21T12:01:31Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499) - CVE-2021-3607: Ensure correct input on ring init (bsc#1187539) - CVE-2021-3608: Fix the ring init error flow (bsc#1187538) - CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro-rancher/5.2:latest-2021-2442,Container suse/sles/15.3/cdi-importer:1.37.1-2021-2442,Container suse/sles/15.3/cdi-uploadserver:1.37.1-2021-2442,Container suse/sles/15.3/libguestfs-tools:0.45.0-2021-2442,Container suse/sles/15.3/virt-handler:0.45.0-2021-2442,Container suse/sles/15.3/virt-launcher:0.45.0-2021-2442,Image SLES15-SP3-EC2-ECS-HVM-2021-2442,SUSE-2021-2442,SUSE-SLE-Module-Basesystem-15-SP3-2021-2442,SUSE-SLE-Module-Server-Applications-15-SP3-2021-2442 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20212442-1/ Link for SUSE-SU-2021:2442-1 https://lists.suse.com/pipermail/sle-security-updates/2021-July/009193.html E-Mail link for SUSE-SU-2021:2442-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1187499 SUSE Bug 1187499 https://bugzilla.suse.com/1187529 SUSE Bug 1187529 https://bugzilla.suse.com/1187538 SUSE Bug 1187538 https://bugzilla.suse.com/1187539 SUSE Bug 1187539 https://www.suse.com/security/cve/CVE-2021-3582/ SUSE CVE CVE-2021-3582 page https://www.suse.com/security/cve/CVE-2021-3607/ SUSE CVE CVE-2021-3607 page https://www.suse.com/security/cve/CVE-2021-3608/ SUSE CVE CVE-2021-3608 page https://www.suse.com/security/cve/CVE-2021-3611/ SUSE CVE CVE-2021-3611 page Container suse/sle-micro-rancher/5.2:latest Container suse/sles/15.3/cdi-importer:1.37.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1 Container suse/sles/15.3/libguestfs-tools:0.45.0 Container suse/sles/15.3/virt-handler:0.45.0 Container suse/sles/15.3/virt-launcher:0.45.0 Image SLES15-SP3-EC2-ECS-HVM SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-guest-agent-5.2.0-23.1 qemu-block-curl-5.2.0-23.1 qemu-tools-5.2.0-23.1 qemu-5.2.0-23.1 qemu-ipxe-1.0.0+-23.1 qemu-seabios-1.14.0_0_g155821a-23.1 qemu-sgabios-8-23.1 qemu-vgabios-1.14.0_0_g155821a-23.1 qemu-x86-5.2.0-23.1 qemu-arm-5.2.0-23.1 qemu-audio-alsa-5.2.0-23.1 qemu-audio-pa-5.2.0-23.1 qemu-audio-spice-5.2.0-23.1 qemu-block-dmg-5.2.0-23.1 qemu-block-gluster-5.2.0-23.1 qemu-block-iscsi-5.2.0-23.1 qemu-block-nfs-5.2.0-23.1 qemu-block-rbd-5.2.0-23.1 qemu-block-ssh-5.2.0-23.1 qemu-chardev-baum-5.2.0-23.1 qemu-chardev-spice-5.2.0-23.1 qemu-extra-5.2.0-23.1 qemu-hw-display-qxl-5.2.0-23.1 qemu-hw-display-virtio-gpu-5.2.0-23.1 qemu-hw-display-virtio-gpu-pci-5.2.0-23.1 qemu-hw-display-virtio-vga-5.2.0-23.1 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-23.1 qemu-hw-usb-redirect-5.2.0-23.1 qemu-hw-usb-smartcard-5.2.0-23.1 qemu-ivshmem-tools-5.2.0-23.1 qemu-ksm-5.2.0-23.1 qemu-kvm-5.2.0-23.1 qemu-lang-5.2.0-23.1 qemu-linux-user-5.2.0-23.1 qemu-microvm-5.2.0-23.1 qemu-ppc-5.2.0-23.1 qemu-s390x-5.2.0-23.1 qemu-skiboot-5.2.0-23.1 qemu-testsuite-5.2.0-23.2 qemu-ui-curses-5.2.0-23.1 qemu-ui-gtk-5.2.0-23.1 qemu-ui-opengl-5.2.0-23.1 qemu-ui-spice-app-5.2.0-23.1 qemu-ui-spice-core-5.2.0-23.1 qemu-vhost-user-gpu-5.2.0-23.1 qemu-guest-agent-5.2.0-23.1 as a component of Container suse/sle-micro-rancher/5.2:latest qemu-block-curl-5.2.0-23.1 as a component of Container suse/sles/15.3/cdi-importer:1.37.1 qemu-tools-5.2.0-23.1 as a component of Container suse/sles/15.3/cdi-importer:1.37.1 qemu-block-curl-5.2.0-23.1 as a component of Container suse/sles/15.3/cdi-uploadserver:1.37.1 qemu-tools-5.2.0-23.1 as a component of Container suse/sles/15.3/cdi-uploadserver:1.37.1 qemu-5.2.0-23.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-ipxe-1.0.0+-23.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-seabios-1.14.0_0_g155821a-23.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-sgabios-8-23.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-tools-5.2.0-23.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-vgabios-1.14.0_0_g155821a-23.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-x86-5.2.0-23.1 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-tools-5.2.0-23.1 as a component of Container suse/sles/15.3/virt-handler:0.45.0 qemu-5.2.0-23.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-ipxe-1.0.0+-23.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-seabios-1.14.0_0_g155821a-23.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-sgabios-8-23.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-tools-5.2.0-23.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-vgabios-1.14.0_0_g155821a-23.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-x86-5.2.0-23.1 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-tools-5.2.0-23.1 as a component of Image SLES15-SP3-EC2-ECS-HVM qemu-tools-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 qemu-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-arm-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-alsa-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-pa-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-spice-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-curl-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-iscsi-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-rbd-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-ssh-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-chardev-baum-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-chardev-spice-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-guest-agent-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-qxl-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-gpu-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-gpu-pci-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-vga-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-usb-redirect-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ipxe-1.0.0+-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ksm-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-kvm-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-lang-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ppc-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-s390x-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-seabios-1.14.0_0_g155821a-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-sgabios-8-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-skiboot-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-curses-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-gtk-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-opengl-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-spice-app-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-spice-core-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-vgabios-1.14.0_0_g155821a-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-x86-5.2.0-23.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA_CMD_CREATE_MR" command due to improper memory remapping (mremap). This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this vulnerability is to system availability. CVE-2021-3582 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-23.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-23.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-23.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-23.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-23.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-23.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-23.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212442-1/ https://www.suse.com/security/cve/CVE-2021-3582.html CVE-2021-3582 https://bugzilla.suse.com/1187499 SUSE Bug 1187499 An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability. CVE-2021-3607 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-23.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-23.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-23.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-23.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-23.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-23.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-23.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212442-1/ https://www.suse.com/security/cve/CVE-2021-3607.html CVE-2021-3607 https://bugzilla.suse.com/1187539 SUSE Bug 1187539 A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The highest threat from this vulnerability is to system availability. CVE-2021-3608 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-23.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-23.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-23.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-23.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-23.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-23.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-23.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212442-1/ https://www.suse.com/security/cve/CVE-2021-3608.html CVE-2021-3608 https://bugzilla.suse.com/1187538 SUSE Bug 1187538 A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0. CVE-2021-3611 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-23.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-block-curl-5.2.0-23.1 Container suse/sles/15.3/cdi-importer:1.37.1:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-block-curl-5.2.0-23.1 Container suse/sles/15.3/cdi-uploadserver:1.37.1:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-23.1 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-23.1 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-23.1 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-23.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-23.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-23.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212442-1/ https://www.suse.com/security/cve/CVE-2021-3611.html CVE-2021-3611 https://bugzilla.suse.com/1187529 SUSE Bug 1187529 https://bugzilla.suse.com/1193914 SUSE Bug 1193914