gpp_maybe Security update for qemu

SUSE-SLE-Module-Basesystem-15-SP2-2021-1243

This update for qemu fixes the following issues: - CVE-2020-12829: Fix OOB access in sm501 device emulation (bsc#1172385) - CVE-2020-25723: Fix use-after-free in usb xhci packet handling (bsc#1178934) - CVE-2020-25084: Fix use-after-free in usb ehci packet handling (bsc#1176673) - CVE-2020-25625: Fix infinite loop (DoS) in usb hcd-ohci emulation (bsc#1176684) - CVE-2020-25624: Fix OOB access in usb hcd-ohci emulation (bsc#1176682) - CVE-2020-27617: Fix guest triggerable assert in shared network handling code (bsc#1178174) - CVE-2020-28916: Fix infinite loop (DoS) in e1000e device emulation (bsc#1179468) - CVE-2020-29443: Fix OOB access in atapi emulation (bsc#1181108) - CVE-2020-27821: Fix heap overflow in MSIx emulation (bsc#1179686) - CVE-2020-15469: Fix null pointer deref. (DoS) in mmio ops (bsc#1173612) - CVE-2021-20257: Fix infinite loop (DoS) in e1000 device emulation (bsc#1182577) - CVE-2021-3416: Fix OOB access (stack overflow) in rtl8139 NIC emulation (bsc#1182968) - CVE-2021-3416: Fix OOB access (stack overflow) in other NIC emulations (bsc#1182968) - CVE-2020-27616: Fix OOB access in ati-vga emulation (bsc#1178400) - CVE-2020-29129: Fix OOB access in SLIRP ARP/NCSI packet processing (bsc#1179466, CVE-2020-29130, bsc#1179467) - Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425) - Add split-provides through forsplits/13 to cover updates of SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (bsc#1184064) - Added a few more usability improvements for our git packaging workflow

Release Date

Apr 16 2021
References

Bugzilla: 1179466, 1178934, 1179467, 1182577, 1178400, 1179686, 1182425, 1184064, 1176684, 1181108, 1176673, 1179468, 1176682, 1173612, 1172385, 1178174, 1182968
CVEs: CVE-2020-29443, CVE-2020-25625, CVE-2020-28916, CVE-2021-20257, CVE-2020-27617, CVE-2021-3416, CVE-2020-27616, CVE-2020-15469, CVE-2020-29130, CVE-2020-29129, CVE-2020-25723, CVE-2020-27821, CVE-2020-12829, CVE-2020-25084, CVE-2020-25624
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.2 aarch64

Packages

qemu
Machine emulator and virtualizer

4.2.1-11.16.3 lock src

qemu-tools
Tools for QEMU

4.2.1-11.16.3 lock rpm

Basesystem Module 15.2 s390x

Packages

qemu
Machine emulator and virtualizer

4.2.1-11.16.3 lock src

qemu-tools
Tools for QEMU

4.2.1-11.16.3 lock rpm

Basesystem Module 15.2 ppc64le

Packages

qemu
Machine emulator and virtualizer

4.2.1-11.16.3 lock src

qemu-tools
Tools for QEMU

4.2.1-11.16.3 lock rpm

Basesystem Module 15.2 x86_64

Packages

qemu
Machine emulator and virtualizer

4.2.1-11.16.3 lock src

qemu-tools
Tools for QEMU

4.2.1-11.16.3 lock rpm