< back to search

gpp_maybe Security update for qemu

SUSE-SLE-Module-Basesystem-15-SP3-2022-2254

This update for qemu fixes the following issues: - CVE-2022-26354: Fixed missing virtqueue detach on error can lead to memory leak (bsc#1198712) - CVE-2021-4207: Fixed double fetch in qxl_cursor() can lead to heap buffer overflow (bsc#1198037) - CVE-2021-4206: Fixed integer overflow in cursor_alloc() can lead to heap buffer overflow (bsc#1198035)

Release Date

Jul 4 2022
References

Bugzilla: 1198037, 1199924, 1199018, 1198035, 1197084, 1198712
CVEs: CVE-2021-4207, CVE-2021-4206, CVE-2022-26354
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.3 aarch64

Packages

qemu
Machine emulator and virtualizer

5.2.0-150300.115.2 lock src

qemu-tools
Tools for QEMU

5.2.0-150300.115.2 lock rpm

Basesystem Module 15.3 ppc64le

Packages

qemu
Machine emulator and virtualizer

5.2.0-150300.115.2 lock src

qemu-tools
Tools for QEMU

5.2.0-150300.115.2 lock rpm

Basesystem Module 15.3 s390x

Packages

qemu
Machine emulator and virtualizer

5.2.0-150300.115.2 lock src

qemu-tools
Tools for QEMU

5.2.0-150300.115.2 lock rpm

Basesystem Module 15.3 x86_64

Packages

qemu
Machine emulator and virtualizer

5.2.0-150300.115.2 lock src

qemu-tools
Tools for QEMU

5.2.0-150300.115.2 lock rpm