Security update for libslirp SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1465-1 Final 1 1 2022-04-29T09:36:14Z current 2022-04-29T09:36:14Z 2022-04-29T09:36:14Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libslirp This update for libslirp fixes the following issues: - CVE-2021-3592: Fixed invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364). - CVE-2021-3594: Fixed invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367). - CVE-2021-3595: Fixed invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366). - Fix a dhcp regression [bsc#1198773] The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container rancher/elemental-teal-iso/5.4:latest-2022-1465,Container rancher/elemental-teal-rt/5.4:latest-2022-1465,Container rancher/elemental-teal/5.4:latest-2022-1465,Container suse/sles/15.4/libguestfs-tools:0.49.0-2022-1465,Container suse/sles/15.4/virt-launcher:0.49.0-2022-1465,SUSE-2022-1465,SUSE-SLE-Module-Server-Applications-15-SP3-2022-1465,SUSE-SLE-Module-Server-Applications-15-SP4-2022-1465,SUSE-SUSE-MicroOS-5.1-2022-1465,SUSE-SUSE-MicroOS-5.2-2022-1465,openSUSE-SLE-15.3-2022-1465,openSUSE-SLE-15.4-2022-1465 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221465-1/ Link for SUSE-SU-2022:1465-1 https://lists.suse.com/pipermail/sle-security-updates/2022-April/010895.html E-Mail link for SUSE-SU-2022:1465-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1187364 SUSE Bug 1187364 https://bugzilla.suse.com/1187366 SUSE Bug 1187366 https://bugzilla.suse.com/1187367 SUSE Bug 1187367 https://bugzilla.suse.com/1198773 SUSE Bug 1198773 https://www.suse.com/security/cve/CVE-2021-3592/ SUSE CVE CVE-2021-3592 page https://www.suse.com/security/cve/CVE-2021-3594/ SUSE CVE CVE-2021-3594 page https://www.suse.com/security/cve/CVE-2021-3595/ SUSE CVE CVE-2021-3595 page Container rancher/elemental-teal-iso/5.4:latest Container rancher/elemental-teal-rt/5.4:latest Container rancher/elemental-teal/5.4:latest Container suse/sles/15.4/libguestfs-tools:0.49.0 Container suse/sles/15.4/virt-launcher:0.49.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Server Applications 15 SP3 openSUSE Leap 15.3 openSUSE Leap 15.4 libslirp0-4.3.1-150300.2.7.1 libslirp-devel-4.3.1-150300.2.7.1 libslirp0-4.3.1-150300.2.7.1 as a component of Container rancher/elemental-teal-iso/5.4:latest libslirp0-4.3.1-150300.2.7.1 as a component of Container rancher/elemental-teal-rt/5.4:latest libslirp0-4.3.1-150300.2.7.1 as a component of Container rancher/elemental-teal/5.4:latest libslirp0-4.3.1-150300.2.7.1 as a component of Container suse/sles/15.4/libguestfs-tools:0.49.0 libslirp0-4.3.1-150300.2.7.1 as a component of Container suse/sles/15.4/virt-launcher:0.49.0 libslirp0-4.3.1-150300.2.7.1 as a component of SUSE Linux Enterprise Micro 5.1 libslirp0-4.3.1-150300.2.7.1 as a component of SUSE Linux Enterprise Micro 5.2 libslirp-devel-4.3.1-150300.2.7.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libslirp0-4.3.1-150300.2.7.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 libslirp-devel-4.3.1-150300.2.7.1 as a component of openSUSE Leap 15.3 libslirp0-4.3.1-150300.2.7.1 as a component of openSUSE Leap 15.3 libslirp-devel-4.3.1-150300.2.7.1 as a component of openSUSE Leap 15.4 libslirp0-4.3.1-150300.2.7.1 as a component of openSUSE Leap 15.4 An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the 'bootp_t' structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0. CVE-2021-3592 Container rancher/elemental-teal-iso/5.4:latest:libslirp0-4.3.1-150300.2.7.1 Container rancher/elemental-teal-rt/5.4:latest:libslirp0-4.3.1-150300.2.7.1 Container rancher/elemental-teal/5.4:latest:libslirp0-4.3.1-150300.2.7.1 Container suse/sles/15.4/libguestfs-tools:0.49.0:libslirp0-4.3.1-150300.2.7.1 Container suse/sles/15.4/virt-launcher:0.49.0:libslirp0-4.3.1-150300.2.7.1 SUSE Linux Enterprise Micro 5.1:libslirp0-4.3.1-150300.2.7.1 SUSE Linux Enterprise Micro 5.2:libslirp0-4.3.1-150300.2.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:libslirp-devel-4.3.1-150300.2.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:libslirp0-4.3.1-150300.2.7.1 openSUSE Leap 15.3:libslirp-devel-4.3.1-150300.2.7.1 openSUSE Leap 15.3:libslirp0-4.3.1-150300.2.7.1 openSUSE Leap 15.4:libslirp-devel-4.3.1-150300.2.7.1 openSUSE Leap 15.4:libslirp0-4.3.1-150300.2.7.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221465-1/ https://www.suse.com/security/cve/CVE-2021-3592.html CVE-2021-3592 https://bugzilla.suse.com/1187364 SUSE Bug 1187364 https://bugzilla.suse.com/1187369 SUSE Bug 1187369 An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0. CVE-2021-3594 Container rancher/elemental-teal-iso/5.4:latest:libslirp0-4.3.1-150300.2.7.1 Container rancher/elemental-teal-rt/5.4:latest:libslirp0-4.3.1-150300.2.7.1 Container rancher/elemental-teal/5.4:latest:libslirp0-4.3.1-150300.2.7.1 Container suse/sles/15.4/libguestfs-tools:0.49.0:libslirp0-4.3.1-150300.2.7.1 Container suse/sles/15.4/virt-launcher:0.49.0:libslirp0-4.3.1-150300.2.7.1 SUSE Linux Enterprise Micro 5.1:libslirp0-4.3.1-150300.2.7.1 SUSE Linux Enterprise Micro 5.2:libslirp0-4.3.1-150300.2.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:libslirp-devel-4.3.1-150300.2.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:libslirp0-4.3.1-150300.2.7.1 openSUSE Leap 15.3:libslirp-devel-4.3.1-150300.2.7.1 openSUSE Leap 15.3:libslirp0-4.3.1-150300.2.7.1 openSUSE Leap 15.4:libslirp-devel-4.3.1-150300.2.7.1 openSUSE Leap 15.4:libslirp0-4.3.1-150300.2.7.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221465-1/ https://www.suse.com/security/cve/CVE-2021-3594.html CVE-2021-3594 https://bugzilla.suse.com/1187367 SUSE Bug 1187367 An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the 'tftp_t' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0. CVE-2021-3595 Container rancher/elemental-teal-iso/5.4:latest:libslirp0-4.3.1-150300.2.7.1 Container rancher/elemental-teal-rt/5.4:latest:libslirp0-4.3.1-150300.2.7.1 Container rancher/elemental-teal/5.4:latest:libslirp0-4.3.1-150300.2.7.1 Container suse/sles/15.4/libguestfs-tools:0.49.0:libslirp0-4.3.1-150300.2.7.1 Container suse/sles/15.4/virt-launcher:0.49.0:libslirp0-4.3.1-150300.2.7.1 SUSE Linux Enterprise Micro 5.1:libslirp0-4.3.1-150300.2.7.1 SUSE Linux Enterprise Micro 5.2:libslirp0-4.3.1-150300.2.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:libslirp-devel-4.3.1-150300.2.7.1 SUSE Linux Enterprise Module for Server Applications 15 SP3:libslirp0-4.3.1-150300.2.7.1 openSUSE Leap 15.3:libslirp-devel-4.3.1-150300.2.7.1 openSUSE Leap 15.3:libslirp0-4.3.1-150300.2.7.1 openSUSE Leap 15.4:libslirp-devel-4.3.1-150300.2.7.1 openSUSE Leap 15.4:libslirp0-4.3.1-150300.2.7.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221465-1/ https://www.suse.com/security/cve/CVE-2021-3595.html CVE-2021-3595 https://bugzilla.suse.com/1187366 SUSE Bug 1187366 https://bugzilla.suse.com/1187376 SUSE Bug 1187376