Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:0177-1 Final 1 1 2022-01-25T13:14:50Z current 2022-01-25T13:14:50Z 2022-01-25T13:14:50Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - CVE-2021-20196: Fixed null pointer dereference that may lead to guest crash (bsc#1181361). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro-rancher/5.2:latest-2022-177,Image SLES15-SP3-EC2-ECS-HVM-2022-177,SUSE-2022-177,SUSE-SLE-Module-Basesystem-15-SP3-2022-177,SUSE-SLE-Module-Server-Applications-15-SP3-2022-177,SUSE-SUSE-MicroOS-5.1-2022-177 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20220177-1/ Link for SUSE-SU-2022:0177-1 https://lists.suse.com/pipermail/sle-updates/2022-January/021445.html E-Mail link for SUSE-SU-2022:0177-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1181361 SUSE Bug 1181361 https://www.suse.com/security/cve/CVE-2021-20196/ SUSE CVE CVE-2021-20196 page Container suse/sle-micro-rancher/5.2:latest Image SLES15-SP3-EC2-ECS-HVM SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-guest-agent-5.2.0-150300.109.2 qemu-tools-5.2.0-150300.109.2 qemu-5.2.0-150300.109.2 qemu-arm-5.2.0-150300.109.2 qemu-audio-alsa-5.2.0-150300.109.2 qemu-audio-pa-5.2.0-150300.109.2 qemu-audio-spice-5.2.0-150300.109.2 qemu-block-curl-5.2.0-150300.109.2 qemu-block-dmg-5.2.0-150300.109.2 qemu-block-gluster-5.2.0-150300.109.2 qemu-block-iscsi-5.2.0-150300.109.2 qemu-block-nfs-5.2.0-150300.109.2 qemu-block-rbd-5.2.0-150300.109.2 qemu-block-ssh-5.2.0-150300.109.2 qemu-chardev-baum-5.2.0-150300.109.2 qemu-chardev-spice-5.2.0-150300.109.2 qemu-extra-5.2.0-150300.109.2 qemu-hw-display-qxl-5.2.0-150300.109.2 qemu-hw-display-virtio-gpu-5.2.0-150300.109.2 qemu-hw-display-virtio-gpu-pci-5.2.0-150300.109.2 qemu-hw-display-virtio-vga-5.2.0-150300.109.2 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.109.2 qemu-hw-usb-redirect-5.2.0-150300.109.2 qemu-hw-usb-smartcard-5.2.0-150300.109.2 qemu-ipxe-1.0.0+-150300.109.2 qemu-ivshmem-tools-5.2.0-150300.109.2 qemu-ksm-5.2.0-150300.109.2 qemu-kvm-5.2.0-150300.109.2 qemu-lang-5.2.0-150300.109.2 qemu-linux-user-5.2.0-150300.109.2 qemu-microvm-5.2.0-150300.109.2 qemu-ppc-5.2.0-150300.109.2 qemu-s390x-5.2.0-150300.109.2 qemu-seabios-1.14.0_0_g155821a-150300.109.2 qemu-sgabios-8-150300.109.2 qemu-skiboot-5.2.0-150300.109.2 qemu-testsuite-5.2.0-150300.109.4 qemu-ui-curses-5.2.0-150300.109.2 qemu-ui-gtk-5.2.0-150300.109.2 qemu-ui-opengl-5.2.0-150300.109.2 qemu-ui-spice-app-5.2.0-150300.109.2 qemu-ui-spice-core-5.2.0-150300.109.2 qemu-vgabios-1.14.0_0_g155821a-150300.109.2 qemu-vhost-user-gpu-5.2.0-150300.109.2 qemu-x86-5.2.0-150300.109.2 qemu-guest-agent-5.2.0-150300.109.2 as a component of Container suse/sle-micro-rancher/5.2:latest qemu-tools-5.2.0-150300.109.2 as a component of Image SLES15-SP3-EC2-ECS-HVM qemu-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-arm-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-ipxe-1.0.0+-150300.109.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-s390x-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-seabios-1.14.0_0_g155821a-150300.109.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-sgabios-8-150300.109.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-tools-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-vgabios-1.14.0_0_g155821a-150300.109.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-x86-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-tools-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 qemu-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-arm-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-alsa-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-pa-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-spice-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-curl-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-iscsi-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-rbd-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-ssh-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-chardev-baum-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-chardev-spice-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-guest-agent-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-qxl-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-gpu-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-gpu-pci-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-vga-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-usb-redirect-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ipxe-1.0.0+-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ksm-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-kvm-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-lang-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ppc-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-s390x-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-seabios-1.14.0_0_g155821a-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-sgabios-8-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-skiboot-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-curses-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-gtk-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-opengl-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-spice-app-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-spice-core-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-vgabios-1.14.0_0_g155821a-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-x86-5.2.0-150300.109.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability. CVE-2021-20196 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-150300.109.2 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-150300.109.2 SUSE Linux Enterprise Micro 5.1:qemu-5.2.0-150300.109.2 SUSE Linux Enterprise Micro 5.1:qemu-arm-5.2.0-150300.109.2 SUSE Linux Enterprise Micro 5.1:qemu-ipxe-1.0.0+-150300.109.2 SUSE Linux Enterprise Micro 5.1:qemu-s390x-5.2.0-150300.109.2 SUSE Linux Enterprise Micro 5.1:qemu-seabios-1.14.0_0_g155821a-150300.109.2 SUSE Linux Enterprise Micro 5.1:qemu-sgabios-8-150300.109.2 SUSE Linux Enterprise Micro 5.1:qemu-tools-5.2.0-150300.109.2 SUSE Linux Enterprise Micro 5.1:qemu-vgabios-1.14.0_0_g155821a-150300.109.2 SUSE Linux Enterprise Micro 5.1:qemu-x86-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-150300.109.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-150300.109.2 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220177-1/ https://www.suse.com/security/cve/CVE-2021-20196.html CVE-2021-20196 https://bugzilla.suse.com/1181361 SUSE Bug 1181361