shield Security update for qemu

SUSE-SLE-Module-Basesystem-15-SP3-2021-2858

This update for qemu fixes the following issues: Security issues fixed: - usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682) - NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506) - NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) - eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255) - usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527) Non-security issues fixed: - Use max host physical address if -cpu max is used (bsc#1188299)

• Release Date
  Aug 27 2021
• References
  Bugzilla: 1188299, 1186012, 1180433, 1180434, 1180435, 1180432, 1182651, 1189145
  CVEs: CVE-2020-35506, CVE-2020-35505, CVE-2020-35503, CVE-2021-3527, CVE-2021-3682, CVE-2021-20255, CVE-2020-35504
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.3 aarch64

• Packages
  qemu
  Machine emulator and virtualizer

  5.2.0-103.2 lock src

  qemu-tools
  Tools for QEMU

  5.2.0-103.2 lock rpm

Basesystem Module 15.3 ppc64le

• Packages
  qemu
  Machine emulator and virtualizer

  5.2.0-103.2 lock src

  qemu-tools
  Tools for QEMU

  5.2.0-103.2 lock rpm

Basesystem Module 15.3 s390x

• Packages
  qemu
  Machine emulator and virtualizer

  5.2.0-103.2 lock src

  qemu-tools
  Tools for QEMU

  5.2.0-103.2 lock rpm

Basesystem Module 15.3 x86_64

• Packages
  qemu
  Machine emulator and virtualizer

  5.2.0-103.2 lock src

  qemu-tools
  Tools for QEMU

  5.2.0-103.2 lock rpm