gpp_maybe Security update for qemu

SUSE-SLE-Module-Basesystem-15-SP2-2021-3604

This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3713: Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702) - CVE-2021-3748: Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938) Non-security issues fixed: - Add transfer length item in block limits page of scsi vpd (bsc#1190425) - Fix qemu crash while deleting xen-block (bsc#1189234)

• Release Date
  Nov 3 2021
• References
  Bugzilla: 1190425, 1189234, 1189702, 1189938
  CVEs: CVE-2021-3748, CVE-2021-3713
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.2 aarch64

• Packages
  qemu
  Machine emulator and virtualizer

  4.2.1-11.31.3 lock src

  qemu-tools
  Tools for QEMU

  4.2.1-11.31.3 lock rpm

Basesystem Module 15.2 ppc64le

• Packages
  qemu
  Machine emulator and virtualizer

  4.2.1-11.31.3 lock src

  qemu-tools
  Tools for QEMU

  4.2.1-11.31.3 lock rpm

Basesystem Module 15.2 s390x

• Packages
  qemu
  Machine emulator and virtualizer

  4.2.1-11.31.3 lock src

  qemu-tools
  Tools for QEMU

  4.2.1-11.31.3 lock rpm

Basesystem Module 15.2 x86_64

• Packages
  qemu
  Machine emulator and virtualizer

  4.2.1-11.31.3 lock src

  qemu-tools
  Tools for QEMU

  4.2.1-11.31.3 lock rpm