gpp_maybe Security update for qemu

SUSE-SLE-Module-Basesystem-15-SP3-2021-3605

This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3713: Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702) - CVE-2021-3748: Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938) Non-security issues fixed: - Add transfer length item in block limits page of scsi vpd (bsc#1190425) - Fix qemu crash while deleting xen-block (bsc#1189234)

• Release Date
  Nov 3 2021
• References
  Bugzilla: 1189234, 1189702, 1190425, 1189938
  CVEs: CVE-2021-3748, CVE-2021-3713
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.3 aarch64

• Packages
  qemu
  Machine emulator and virtualizer

  5.2.0-106.4 lock src

  qemu-tools
  Tools for QEMU

  5.2.0-106.4 lock rpm

Basesystem Module 15.3 ppc64le

• Packages
  qemu
  Machine emulator and virtualizer

  5.2.0-106.4 lock src

  qemu-tools
  Tools for QEMU

  5.2.0-106.4 lock rpm

Basesystem Module 15.3 x86_64

• Packages
  qemu
  Machine emulator and virtualizer

  5.2.0-106.4 lock src

  qemu-tools
  Tools for QEMU

  5.2.0-106.4 lock rpm

Basesystem Module 15.3 s390x

• Packages
  qemu
  Machine emulator and virtualizer

  5.2.0-106.4 lock src

  qemu-tools
  Tools for QEMU

  5.2.0-106.4 lock rpm