< back to search

gpp_maybe Security update for qemu

SUSE-SLE-Module-Basesystem-15-SP4-2023-3234

This update for qemu fixes the following issues: - CVE-2023-2861: Fixed improper access control on special files in 9pfs (bsc#1212968). - CVE-2023-3301: Fixed NULL pointer dereference in vhost_vdpa_get_vhost_net() (bsc#1213414). - CVE-2023-3255: Fixed infinite loop in inflate_buffer() leads to denial of service (bsc#1213001).

Release Date

Aug 8 2023
References

Bugzilla: 1213001, 1213414, 1212968
CVEs: CVE-2023-3301, CVE-2023-2861, CVE-2023-3255
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.4 x86_64

Packages

qemu
Machine emulator and virtualizer

6.2.0-150400.37.20.1 lock src

qemu-tools
Tools for QEMU

6.2.0-150400.37.20.1 lock rpm

Basesystem Module 15.4 aarch64

Packages

qemu
Machine emulator and virtualizer

6.2.0-150400.37.20.1 lock src

qemu-tools
Tools for QEMU

6.2.0-150400.37.20.1 lock rpm

Basesystem Module 15.4 ppc64le

Packages

qemu
Machine emulator and virtualizer

6.2.0-150400.37.20.1 lock src

qemu-tools
Tools for QEMU

6.2.0-150400.37.20.1 lock rpm

Basesystem Module 15.4 s390x

Packages

qemu
Machine emulator and virtualizer

6.2.0-150400.37.20.1 lock src

qemu-tools
Tools for QEMU

6.2.0-150400.37.20.1 lock rpm