gpp_maybe Security update for qemu

SUSE-SLE-Module-Basesystem-15-SP4-2023-671

This update for qemu fixes the following issues: - CVE-2022-4144: Fixed qxl_phys2virt unsafe address translation that can lead to out-of-bounds read (bsc#1205808). - CVE-2022-3165: Fixed integer underflow in vnc_client_cut_text_ext() (bsc#1203788). - CVE-2022-1050: Fixed use-after-free issue in pvrdma_exec_cmd() (bsc#1197653). Bugfixes: - Fixed deviation of guest clock (bsc#1206527). - Fixed broken "block limits" VPD emulation (bsc#1202364).

• Release Date
  Mar 8 2023
• References
  Bugzilla: 1203788, 1205808, 1202364, 1206527, 1197653
  CVEs: CVE-2022-3165, CVE-2022-4144, CVE-2022-1050
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.4 aarch64

• Packages
  qemu
  Machine emulator and virtualizer

  6.2.0-150400.37.11.1 lock src

  qemu-tools
  Tools for QEMU

  6.2.0-150400.37.11.1 lock rpm

Basesystem Module 15.4 s390x

• Packages
  qemu
  Machine emulator and virtualizer

  6.2.0-150400.37.11.1 lock src

  qemu-tools
  Tools for QEMU

  6.2.0-150400.37.11.1 lock rpm

Basesystem Module 15.4 ppc64le

• Packages
  qemu
  Machine emulator and virtualizer

  6.2.0-150400.37.11.1 lock src

  qemu-tools
  Tools for QEMU

  6.2.0-150400.37.11.1 lock rpm

Basesystem Module 15.4 x86_64

• Packages
  qemu
  Machine emulator and virtualizer

  6.2.0-150400.37.11.1 lock src

  qemu-tools
  Tools for QEMU

  6.2.0-150400.37.11.1 lock rpm