Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:0878-1 Final 1 1 2023-03-23T07:53:32Z current 2023-03-23T07:53:32Z 2023-03-23T07:53:32Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - CVE-2022-4144: Fixed unsafe address translation can lead to out-of-bounds read in qxl_phys2virt (bsc#1205808). - CVE-2021-3507: Fixed heap buffer overflow in DMA read data transfers in fdc (bsc#1185000). The following non-security bugs were fixed: - Fix bsc#1202364. - Introduce max_hw_iov for use in scsi-generic (bsc#1190425) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-878,SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-878,SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-878,SUSE-SLE-Product-SLES_SAP-15-SP2-2023-878,SUSE-Storage-7-2023-878,openSUSE-SLE-15.4-2023-878 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20230878-1/ Link for SUSE-SU-2023:0878-1 https://lists.suse.com/pipermail/sle-security-updates/2023-March/014146.html E-Mail link for SUSE-SU-2023:0878-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1185000 SUSE Bug 1185000 https://bugzilla.suse.com/1190425 SUSE Bug 1190425 https://bugzilla.suse.com/1202364 SUSE Bug 1202364 https://bugzilla.suse.com/1205808 SUSE Bug 1205808 https://www.suse.com/security/cve/CVE-2021-3507/ SUSE CVE CVE-2021-3507 page https://www.suse.com/security/cve/CVE-2022-4144/ SUSE CVE CVE-2022-4144 page SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP2 openSUSE Leap 15.4 qemu-4.2.1-150200.72.2 qemu-arm-4.2.1-150200.72.2 qemu-audio-alsa-4.2.1-150200.72.2 qemu-audio-pa-4.2.1-150200.72.2 qemu-block-curl-4.2.1-150200.72.2 qemu-block-dmg-4.2.1-150200.72.2 qemu-block-iscsi-4.2.1-150200.72.2 qemu-block-rbd-4.2.1-150200.72.2 qemu-block-ssh-4.2.1-150200.72.2 qemu-extra-4.2.1-150200.72.2 qemu-guest-agent-4.2.1-150200.72.2 qemu-ipxe-1.0.0+-150200.72.2 qemu-kvm-4.2.1-150200.72.2 qemu-lang-4.2.1-150200.72.2 qemu-linux-user-4.2.1-150200.72.1 qemu-microvm-4.2.1-150200.72.2 qemu-ppc-4.2.1-150200.72.2 qemu-s390-4.2.1-150200.72.2 qemu-seabios-1.12.1+-150200.72.2 qemu-sgabios-8-150200.72.2 qemu-testsuite-4.2.1-150200.72.3 qemu-tools-4.2.1-150200.72.2 qemu-ui-curses-4.2.1-150200.72.2 qemu-ui-gtk-4.2.1-150200.72.2 qemu-ui-spice-app-4.2.1-150200.72.2 qemu-vgabios-1.12.1+-150200.72.2 qemu-vhost-user-gpu-4.2.1-150200.72.2 qemu-x86-4.2.1-150200.72.2 qemu-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-arm-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-audio-alsa-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-audio-pa-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-block-curl-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-block-iscsi-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-block-rbd-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-block-ssh-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-guest-agent-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-ipxe-1.0.0+-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-kvm-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-lang-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-microvm-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-seabios-1.12.1+-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-sgabios-8-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-tools-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-ui-curses-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-ui-gtk-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-ui-spice-app-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-vgabios-1.12.1+-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-x86-4.2.1-150200.72.2 as a component of SUSE Enterprise Storage 7 qemu-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-arm-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-audio-alsa-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-audio-pa-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-block-curl-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-block-iscsi-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-block-rbd-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-block-ssh-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-guest-agent-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-ipxe-1.0.0+-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-kvm-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-lang-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-microvm-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-seabios-1.12.1+-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-sgabios-8-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-tools-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-ui-curses-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-ui-gtk-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-ui-spice-app-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-vgabios-1.12.1+-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-x86-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS qemu-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-arm-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-audio-alsa-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-audio-pa-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-block-curl-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-block-iscsi-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-block-rbd-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-block-ssh-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-guest-agent-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-ipxe-1.0.0+-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-kvm-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-lang-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-microvm-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-ppc-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-s390-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-seabios-1.12.1+-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-sgabios-8-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-tools-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-ui-curses-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-ui-gtk-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-ui-spice-app-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-vgabios-1.12.1+-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-x86-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS qemu-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-audio-alsa-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-audio-pa-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-block-curl-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-block-iscsi-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-block-rbd-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-block-ssh-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-guest-agent-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-ipxe-1.0.0+-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-kvm-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-lang-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-microvm-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-ppc-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-seabios-1.12.1+-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-sgabios-8-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-tools-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-ui-curses-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-ui-gtk-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-ui-spice-app-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-vgabios-1.12.1+-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-x86-4.2.1-150200.72.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 qemu-s390-4.2.1-150200.72.2 as a component of openSUSE Leap 15.4 A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory. CVE-2021-3507 SUSE Enterprise Storage 7:qemu-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-arm-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-audio-alsa-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-audio-pa-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-block-curl-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-block-iscsi-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-block-rbd-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-block-ssh-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-guest-agent-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-ipxe-1.0.0+-150200.72.2 SUSE Enterprise Storage 7:qemu-kvm-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-lang-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-microvm-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-seabios-1.12.1+-150200.72.2 SUSE Enterprise Storage 7:qemu-sgabios-8-150200.72.2 SUSE Enterprise Storage 7:qemu-tools-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-ui-curses-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-ui-gtk-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-ui-spice-app-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-vgabios-1.12.1+-150200.72.2 SUSE Enterprise Storage 7:qemu-x86-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-arm-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-audio-alsa-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-audio-pa-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-block-curl-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-block-iscsi-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-block-rbd-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-block-ssh-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-guest-agent-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-ipxe-1.0.0+-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-kvm-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-lang-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-microvm-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-seabios-1.12.1+-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-sgabios-8-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-tools-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-ui-curses-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-ui-gtk-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-ui-spice-app-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-vgabios-1.12.1+-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-x86-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-arm-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-audio-alsa-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-audio-pa-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-block-curl-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-block-iscsi-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-block-rbd-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-block-ssh-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-guest-agent-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-ipxe-1.0.0+-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-kvm-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-lang-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-microvm-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-ppc-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-s390-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-seabios-1.12.1+-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-sgabios-8-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-tools-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-ui-curses-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-ui-gtk-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-ui-spice-app-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-vgabios-1.12.1+-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-x86-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-audio-alsa-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-audio-pa-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-block-curl-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-block-iscsi-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-block-rbd-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-block-ssh-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-guest-agent-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-ipxe-1.0.0+-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-kvm-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-lang-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-microvm-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-ppc-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-seabios-1.12.1+-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-sgabios-8-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-tools-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-ui-curses-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-ui-gtk-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-ui-spice-app-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-vgabios-1.12.1+-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-x86-4.2.1-150200.72.2 openSUSE Leap 15.4:qemu-s390-4.2.1-150200.72.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230878-1/ https://www.suse.com/security/cve/CVE-2021-3507.html CVE-2021-3507 https://bugzilla.suse.com/1185000 SUSE Bug 1185000 An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use this flaw to crash the QEMU process on the host causing a denial of service condition. CVE-2022-4144 SUSE Enterprise Storage 7:qemu-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-arm-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-audio-alsa-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-audio-pa-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-block-curl-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-block-iscsi-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-block-rbd-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-block-ssh-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-guest-agent-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-ipxe-1.0.0+-150200.72.2 SUSE Enterprise Storage 7:qemu-kvm-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-lang-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-microvm-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-seabios-1.12.1+-150200.72.2 SUSE Enterprise Storage 7:qemu-sgabios-8-150200.72.2 SUSE Enterprise Storage 7:qemu-tools-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-ui-curses-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-ui-gtk-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-ui-spice-app-4.2.1-150200.72.2 SUSE Enterprise Storage 7:qemu-vgabios-1.12.1+-150200.72.2 SUSE Enterprise Storage 7:qemu-x86-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-arm-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-audio-alsa-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-audio-pa-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-block-curl-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-block-iscsi-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-block-rbd-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-block-ssh-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-guest-agent-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-ipxe-1.0.0+-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-kvm-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-lang-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-microvm-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-seabios-1.12.1+-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-sgabios-8-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-tools-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-ui-curses-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-ui-gtk-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-ui-spice-app-4.2.1-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-vgabios-1.12.1+-150200.72.2 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:qemu-x86-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-arm-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-audio-alsa-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-audio-pa-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-block-curl-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-block-iscsi-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-block-rbd-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-block-ssh-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-guest-agent-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-ipxe-1.0.0+-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-kvm-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-lang-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-microvm-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-ppc-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-s390-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-seabios-1.12.1+-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-sgabios-8-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-tools-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-ui-curses-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-ui-gtk-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-ui-spice-app-4.2.1-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-vgabios-1.12.1+-150200.72.2 SUSE Linux Enterprise Server 15 SP2-LTSS:qemu-x86-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-audio-alsa-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-audio-pa-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-block-curl-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-block-iscsi-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-block-rbd-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-block-ssh-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-guest-agent-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-ipxe-1.0.0+-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-kvm-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-lang-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-microvm-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-ppc-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-seabios-1.12.1+-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-sgabios-8-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-tools-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-ui-curses-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-ui-gtk-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-ui-spice-app-4.2.1-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-vgabios-1.12.1+-150200.72.2 SUSE Linux Enterprise Server for SAP Applications 15 SP2:qemu-x86-4.2.1-150200.72.2 openSUSE Leap 15.4:qemu-s390-4.2.1-150200.72.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20230878-1/ https://www.suse.com/security/cve/CVE-2022-4144.html CVE-2022-4144 https://bugzilla.suse.com/1205808 SUSE Bug 1205808