gpp_maybe Security update for qemu

SUSE-SLE-Module-Basesystem-15-SP4-2023-4056

This update for qemu fixes the following issues: - CVE-2023-3180: Fixed a buffer overflow in the virtio-crypto device (bsc#1213925). - CVE-2021-3750: Fixed a DMA reentrancy in the USB EHCI device that could lead to use-after-free (bsc#1190011). - CVE-2021-3638: Fixed a buffer overflow in the ati-vga device (bsc#1188609). - CVE-2023-3354: Fixed an issue when performing a TLS handshake that could lead to remote denial of service via VNC connection (bsc#1212850). - CVE-2023-0330: Fixed a DMA reentrancy issue in the lsi53c895a device that could lead to a stack overflow (bsc#1207205). Non-security fixes: - Fixed a potential build issue in the librm subcomponent (bsc#1215311). - Fixed a potential crash during VM migration (bsc#1213663). - Fixed potential issues during installation on a Xen host (bsc#1179993, bsc#1181740).

Release Date

Oct 12 2023
References

Bugzilla: 1207205, 1212850, 1213925, 1190011, 1181740, 1188609, 1215311, 1213663, 1179993
CVEs: CVE-2023-3354, CVE-2021-3638, CVE-2021-3750, CVE-2023-0330, CVE-2023-3180
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.4 ppc64le

Packages

qemu
Machine emulator and virtualizer

6.2.0-150400.37.23.1 lock src

qemu-tools
Tools for QEMU

6.2.0-150400.37.23.1 lock rpm

Basesystem Module 15.4 x86_64

Packages

qemu
Machine emulator and virtualizer

6.2.0-150400.37.23.1 lock src

qemu-tools
Tools for QEMU

6.2.0-150400.37.23.1 lock rpm

Basesystem Module 15.4 s390x

Packages

qemu
Machine emulator and virtualizer

6.2.0-150400.37.23.1 lock src

qemu-tools
Tools for QEMU

6.2.0-150400.37.23.1 lock rpm

Basesystem Module 15.4 aarch64

Packages

qemu
Machine emulator and virtualizer

6.2.0-150400.37.23.1 lock src

qemu-tools
Tools for QEMU

6.2.0-150400.37.23.1 lock rpm