gpp_maybe
Security update for qemu
SUSE-SLE-SAP-12-SP4-2021-1241
This update for qemu fixes the following issues: - Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385) - Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362, bsc#1172383) - Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934) - Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673) - Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682) - Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684) - Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174) - Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468) - Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108) - Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612) - Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577) - Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968) - Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416) - Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467) - Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659, bsc#1172386) - Fix OOB access in iscsi (CVE-2020-11947, bsc#1180523) - Fix OOB access in vmxnet3 emulation (CVE-2021-20203, bsc#1181639) - Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386) - Fix DoS in packet processing of various emulated NICs (CVE-2020-16092, bsc#1174641) - Fix OOB access while processing USB packets (CVE-2020-14364, bsc#1175441) - Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425) - Fix potential privilege escalation in virtfs (CVE-2021-20181, bsc#1182137) - Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361, bsc#1172384) - Fix OOB access in ROM loading (CVE-2020-13765, bsc#1172478) - Fix qemu-testsuite failure - Fix vm migration is failing with input/output error when nfs server is disconnected (bsc#1119115) - Fix OOB access in ARM interrupt handling (CVE-2021-20221, bsc#1181933) - Fix slowness in arm32 emulation (bsc#1112499) - Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385) - Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362, bsc#1172383) - Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934) - Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673) - Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682) - Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684) - Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174) - Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468) - Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108) - Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612) - Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577) - Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968) - Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416) - Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467) - Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659, bsc#1172386) - Fix OOB access in iscsi (CVE-2020-11947, bsc#1180523) - Fix OOB access in vmxnet3 emulation (CVE-2021-20203, bsc#1181639) - Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386) - Fix DoS in packet processing of various emulated NICs (CVE-2020-16092, bsc#1174641) - Fix OOB access while processing USB packets (CVE-2020-14364, bsc#1175441) - Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425) - Fix potential privilege escalation in virtfs (CVE-2021-20181, bsc#1182137) - Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361, bsc#1172384) - Fix OOB access in ROM loading (CVE-2020-13765, bsc#1172478) - Fix qemu-testsuite failure - Fix vm migration is failing with input/output error when nfs server is disconnected (bsc#1119115) - Fix OOB access in ARM interrupt handling (CVE-2021-20221, bsc#1181933) - Fix slowness in arm32 emulation (bsc#1112499)
-
Release DateApr 16 2021
-
ReferencesBugzilla: 1178934, 1112499, 1176673, 1179466, 1176682, 1182968, 1174641, 1172384, 1176684, 1172383, 1119115, 1182577, 1174386, 1181108, 1181639, 1178174, 1172386, 1181933, 1175441, 1180523, 1173612, 1179468, 1172478, 1172385, 1182425, 1179467, 1182137
CVEs: CVE-2020-25084, CVE-2020-13361, CVE-2020-28916, CVE-2020-14364, CVE-2020-29443, CVE-2020-27617, CVE-2021-20257, CVE-2020-25723, CVE-2021-3416, CVE-2021-20181, CVE-2020-25625, CVE-2020-29129, CVE-2020-25624, CVE-2020-13362, CVE-2020-11947, CVE-2020-15863, CVE-2020-29130, CVE-2020-13765, CVE-2020-15469, CVE-2021-20221, CVE-2020-12829, CVE-2021-20203, CVE-2020-13659, CVE-2020-16092 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le
-
Packagesqemu
Machine emulator and virtualizerqemu-block-curl2.11.2-5.29.1lock rpmlock src
cURL block support for QEMUqemu-block-iscsi2.11.2-5.29.1lock rpm
iSCSI block support for QEMUqemu-block-ssh2.11.2-5.29.1lock rpm
SSH (SFTP) block support for QEMUqemu-guest-agent2.11.2-5.29.1lock rpm
Guest agent for QEMUqemu-ipxe2.11.2-5.29.1lock rpm
PXE ROMs for QEMU NICsqemu-lang1.0.0+-5.29.1lock rpm
Translations for QEMUqemu-ppc2.11.2-5.29.1lock rpm
Machine emulator and virtualizer for Power architecturesqemu-tools2.11.2-5.29.1lock rpm
Tools for QEMUqemu-vgabios2.11.2-5.29.1lock rpm
VGA BIOSes for QEMU1.11.0_0_g63451fc-5.29.1lock rpm
SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64
-
Packagesqemu
Machine emulator and virtualizerqemu-block-curl2.11.2-5.29.1lock rpmlock src
cURL block support for QEMUqemu-block-iscsi2.11.2-5.29.1lock rpm
iSCSI block support for QEMUqemu-block-rbd2.11.2-5.29.1lock rpm
Rados Block Device (Ceph) support for QEMUqemu-block-ssh2.11.2-5.29.1lock rpm
SSH (SFTP) block support for QEMUqemu-guest-agent2.11.2-5.29.1lock rpm
Guest agent for QEMUqemu-ipxe2.11.2-5.29.1lock rpm
PXE ROMs for QEMU NICsqemu-kvm1.0.0+-5.29.1lock rpm
Wrapper to enable KVM acceleration under QEMUqemu-lang2.11.2-5.29.1lock rpm
Translations for QEMUqemu-seabios2.11.2-5.29.1lock rpm
x86 Legacy BIOS for QEMUqemu-sgabios1.11.0_0_g63451fc-5.29.1lock rpm
Serial Graphics Adapter BIOS for QEMUqemu-tools8-5.29.1lock rpm
Tools for QEMUqemu-vgabios2.11.2-5.29.1lock rpm
VGA BIOSes for QEMUqemu-x861.11.0_0_g63451fc-5.29.1lock rpm
Machine emulator and virtualizer for x86 architectures2.11.2-5.29.1lock rpm