Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:0877-1 Final 1 1 2023-03-23T07:53:02Z current 2023-03-23T07:53:02Z 2023-03-23T07:53:02Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - CVE-2022-4144: Fixed unsafe address translation that can lead to out-of-bounds read in qxl_phys2virt (bsc#1205808). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-877,SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-877,SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-877,SUSE-SLE-Product-SLES_SAP-15-SP1-2023-877 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20230877-1/ Link for SUSE-SU-2023:0877-1 https://lists.suse.com/pipermail/sle-security-updates/2023-March/014147.html E-Mail link for SUSE-SU-2023:0877-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1205808 SUSE Bug 1205808 https://www.suse.com/security/cve/CVE-2022-4144/ SUSE CVE CVE-2022-4144 page SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-3.1.1.1-150100.80.46.1 qemu-arm-3.1.1.1-150100.80.46.1 qemu-audio-alsa-3.1.1.1-150100.80.46.1 qemu-audio-oss-3.1.1.1-150100.80.46.1 qemu-audio-pa-3.1.1.1-150100.80.46.1 qemu-block-curl-3.1.1.1-150100.80.46.1 qemu-block-dmg-3.1.1.1-150100.80.46.1 qemu-block-iscsi-3.1.1.1-150100.80.46.1 qemu-block-rbd-3.1.1.1-150100.80.46.1 qemu-block-ssh-3.1.1.1-150100.80.46.1 qemu-extra-3.1.1.1-150100.80.46.1 qemu-guest-agent-3.1.1.1-150100.80.46.1 qemu-ipxe-1.0.0+-150100.80.46.1 qemu-kvm-3.1.1.1-150100.80.46.1 qemu-lang-3.1.1.1-150100.80.46.1 qemu-linux-user-3.1.1.1-150100.80.46.1 qemu-ppc-3.1.1.1-150100.80.46.1 qemu-s390-3.1.1.1-150100.80.46.1 qemu-seabios-1.12.0_0_ga698c89-150100.80.46.1 qemu-sgabios-8-150100.80.46.1 qemu-testsuite-3.1.1.1-150100.80.46.1 qemu-tools-3.1.1.1-150100.80.46.1 qemu-ui-curses-3.1.1.1-150100.80.46.1 qemu-ui-gtk-3.1.1.1-150100.80.46.1 qemu-vgabios-1.12.0_0_ga698c89-150100.80.46.1 qemu-x86-3.1.1.1-150100.80.46.1 qemu-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-arm-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-audio-alsa-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-audio-oss-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-audio-pa-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-block-curl-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-block-iscsi-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-block-rbd-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-block-ssh-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-guest-agent-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-ipxe-1.0.0+-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-kvm-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-lang-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-seabios-1.12.0_0_ga698c89-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-sgabios-8-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-tools-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-ui-curses-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-ui-gtk-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-vgabios-1.12.0_0_ga698c89-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-x86-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS qemu-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-arm-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-audio-alsa-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-audio-oss-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-audio-pa-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-block-curl-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-block-iscsi-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-block-rbd-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-block-ssh-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-guest-agent-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-ipxe-1.0.0+-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-kvm-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-lang-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-ppc-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-s390-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-seabios-1.12.0_0_ga698c89-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-sgabios-8-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-tools-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-ui-curses-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-ui-gtk-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-vgabios-1.12.0_0_ga698c89-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-x86-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS qemu-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-audio-alsa-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-audio-oss-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-audio-pa-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-block-curl-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-block-iscsi-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-block-rbd-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-block-ssh-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-guest-agent-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-ipxe-1.0.0+-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-kvm-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-lang-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-ppc-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-seabios-1.12.0_0_ga698c89-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-sgabios-8-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-tools-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-ui-curses-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-ui-gtk-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-vgabios-1.12.0_0_ga698c89-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 qemu-x86-3.1.1.1-150100.80.46.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use this flaw to crash the QEMU process on the host causing a denial of service condition. CVE-2022-4144 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-arm-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-audio-alsa-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-audio-oss-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-audio-pa-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-block-curl-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-block-iscsi-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-block-rbd-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-block-ssh-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-guest-agent-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-ipxe-1.0.0+-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-kvm-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-lang-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-seabios-1.12.0_0_ga698c89-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-sgabios-8-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-tools-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-ui-curses-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-ui-gtk-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-vgabios-1.12.0_0_ga698c89-150100.80.46.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:qemu-x86-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-arm-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-audio-alsa-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-audio-oss-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-audio-pa-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-block-curl-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-block-iscsi-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-block-rbd-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-block-ssh-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-guest-agent-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-ipxe-1.0.0+-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-kvm-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-lang-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-ppc-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-s390-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-seabios-1.12.0_0_ga698c89-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-sgabios-8-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-tools-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-ui-curses-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-ui-gtk-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-vgabios-1.12.0_0_ga698c89-150100.80.46.1 SUSE Linux Enterprise Server 15 SP1-LTSS:qemu-x86-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-audio-alsa-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-audio-oss-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-audio-pa-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-block-curl-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-block-iscsi-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-block-rbd-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-block-ssh-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-guest-agent-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-ipxe-1.0.0+-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-kvm-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-lang-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-ppc-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-seabios-1.12.0_0_ga698c89-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-sgabios-8-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-tools-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-ui-curses-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-ui-gtk-3.1.1.1-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-vgabios-1.12.0_0_ga698c89-150100.80.46.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:qemu-x86-3.1.1.1-150100.80.46.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230877-1/ https://www.suse.com/security/cve/CVE-2022-4144.html CVE-2022-4144 https://bugzilla.suse.com/1205808 SUSE Bug 1205808