Oval Definition:	oval:org.opensuse.security:def:50905
Revision Date: 2020-12-01 Version: 1 Title: Security update for qemu (Important) Description: This update for qemu fixes the following issues: - CVE-2020-7039: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and other protocols (bsc#1161066). - CVE-2019-15034: Fixed a buffer overflow in hw/display/bochs-display.c due to improper PCI config space allocation (bsc#1166379). - CVE-2020-1711: Fixed an out of bounds heap buffer access iscsi_co_block_status() routine which could have allowed a remote denial of service or arbitrary code with privileges of the QEMU process on the host (bsc#1166240). - CVE-2019-6778: Fixed a heap buffer overflow in tcp_emu() routine while emulating the identification protocol and copying message data to a socket buffer (bsc#1123156). - CVE-2020-8608: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and other protocols (bsc#1163018). - CVE-2019-20382: Fixed a memory leak in the VNC display driver which could have led to exhaustion of the host memory leading to a potential Denial of service (bsc#1165776). - Fixed a live migration error (bsc#1154790). - Fixed an issue where migrating VMs on KVM gets missing features:ospke error (bsc#1162729). Family: unix Class: patch Status: Reference(s): 1013721 1013732 1047238 1050911 1051510 1054914 1055117 1056686 1060662 1061840 1061843 1064597 1064701 1065600 1065729 1066369 1071009 1071306 1078248 1082555 1082635 1085030 1085536 1085539 1086103 1087092 1090734 1091171 1093205 1102097 1103203 1103990 1104353 1104427 1104745 1104902 1106061 1106284 1106434 1108382 1109837 1111666 1112178 1112374 1112894 1112899 1112902 1112903 1112905 1112906 1112907 1113722 1113994 1114279 1114542 1118689 1118935 1119086 1119113 1120046 1120876 1120902 1123105 1123156 1123959 1124370 1129424 1129519 1129664 1129991 1131107 1131281 1131489 1131565 1133021 1134291 1134476 1134881 1134882 1135219 1135642 1135897 1135990 1136039 1136261 1136346 1136349 1136352 1136496 1136498 1136502 1136682 1137322 1137323 1137884 1138099 1138100 1138539 1139020 1139021 1139101 1139500 1140012 1140426 1140487 1141340 1141450 1141543 1141554 1142019 1142076 1142109 1142117 1142118 1142119 1142496 1142541 1142635 1142685 1142701 1142857 1143300 1143331 1143466 1143706 1143738 1143765 1143841 1143843 1143962 1144123 1144333 1144375 1144474 1144518 1144582 1144718 1144813 1144880 1144886 1144912 1144920 1144979 1145010 1145018 1145051 1145059 1145189 1145235 1145256 1145300 1145302 1145357 1145388 1145389 1145390 1145391 1145392 1145393 1145394 1145395 1145396 1145397 1145408 1145409 1145446 1145661 1145678 1145687 1145920 1145922 1145934 1145937 1145940 1145941 1145942 1145946 1146074 1146084 1146141 1146163 1146215 1146285 1146346 1146351 1146352 1146361 1146368 1146376 1146378 1146381 1146391 1146399 1146413 1146425 1146516 1146519 1146524 1146526 1146529 1146531 1146543 1146547 1146550 1146575 1146589 1146678 1146938 1148031 1148032 1148033 1148034 1148035 1148093 1148133 1148192 1148196 1148198 1148202 1148219 1148297 1148303 1148308 1148363 1148379 1148394 1148527 1148570 1148574 1148616 1148617 1148619 1148698 1148859 1148868 1149053 1149083 1149104 1149105 1149106 1149197 1149214 1149224 1149325 1149376 1149413 1149418 1149424 1149522 1149527 1149539 1149552 1149591 1149602 1149612 1149626 1149652 1149713 1149940 1149976 1150025 1150033 1150112 1150562 1150727 1150860 1150861 1150933 1152763 1153921 1154790 1160467 1160468 1161066 1162729 1163018 1163985 1165776 1166240 1166379 1166844 1171496 1171497 1171498 1171499 1172356 1172524 1172743 1172745 1173477 1174421 1174543 1175239 1178171 945190 CVE-2014-3577 CVE-2015-5262 CVE-2016-9800 CVE-2016-9801 CVE-2017-18551 CVE-2017-18922 CVE-2018-20976 CVE-2018-21008 CVE-2019-10207 CVE-2019-14814 CVE-2019-14815 CVE-2019-14816 CVE-2019-14835 CVE-2019-14896 CVE-2019-14897 CVE-2019-15030 CVE-2019-15031 CVE-2019-15034 CVE-2019-15090 CVE-2019-15098 CVE-2019-15099 CVE-2019-15117 CVE-2019-15118 CVE-2019-15211 CVE-2019-15212 CVE-2019-15214 CVE-2019-15215 CVE-2019-15216 CVE-2019-15217 CVE-2019-15218 CVE-2019-15219 CVE-2019-15220 CVE-2019-15221 CVE-2019-15222 CVE-2019-15239 CVE-2019-15290 CVE-2019-15292 CVE-2019-15538 CVE-2019-15666 CVE-2019-15902 CVE-2019-15917 CVE-2019-15919 CVE-2019-15920 CVE-2019-15921 CVE-2019-15924 CVE-2019-15926 CVE-2019-15927 CVE-2019-20382 CVE-2019-3695 CVE-2019-3696 CVE-2019-6778 CVE-2019-9456 CVE-2020-10531 CVE-2020-11863 CVE-2020-11864 CVE-2020-11865 CVE-2020-11866 CVE-2020-12861 CVE-2020-12862 CVE-2020-12863 CVE-2020-12864 CVE-2020-12865 CVE-2020-12866 CVE-2020-12867 CVE-2020-13867 CVE-2020-14363 CVE-2020-15705 CVE-2020-1711 CVE-2020-1720 CVE-2020-7039 CVE-2020-8608 SUSE-SU-2018:4189-1 SUSE-SU-2018:4215-1 SUSE-SU-2019:2424-1 SUSE-SU-2020:0357-1 SUSE-SU-2020:0752-1 SUSE-SU-2020:0819-1 SUSE-SU-2020:0844-1 SUSE-SU-2020:1873-1 SUSE-SU-2020:2101-1 SUSE-SU-2020:2158-1 SUSE-SU-2020:2474-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Python2 packages 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information java-1_7_0-openjdk-1.7.0.91-0.14 is installed OR java-1_7_0-openjdk-demo-1.7.0.91-0.14 is installed OR java-1_7_0-openjdk-devel-1.7.0.91-0.14 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND bogofilter-1.2.4-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information java-1_7_0-openjdk-1.7.0.91-21 is installed OR java-1_7_0-openjdk-headless-1.7.0.91-21 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information freerdp-2.0.0~git.1463131968.4e66df7-11 is installed OR libfreerdp2-2.0.0~git.1463131968.4e66df7-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information cyrus-sasl-2.1.26-7 is installed OR cyrus-sasl-32bit-2.1.26-7 is installed OR cyrus-sasl-crammd5-2.1.26-7 is installed OR cyrus-sasl-crammd5-32bit-2.1.26-7 is installed OR cyrus-sasl-digestmd5-2.1.26-7 is installed OR cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed OR cyrus-sasl-gssapi-2.1.26-7 is installed OR cyrus-sasl-gssapi-32bit-2.1.26-7 is installed OR cyrus-sasl-plain-2.1.26-7 is installed OR cyrus-sasl-plain-32bit-2.1.26-7 is installed OR cyrus-sasl-saslauthd-2.1.26-7 is installed OR libsasl2-3-2.1.26-7 is installed OR libsasl2-3-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information MozillaFirefox-52.9.0esr-109.38 is installed OR MozillaFirefox-translations-52.9.0esr-109.38 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 is installed AND Package Information LibVNCServer-0.9.10-4.19 is installed OR libvncserver0-0.9.10-4.19 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information qemu-3.1.1.1-9.14 is installed OR qemu-tools-3.1.1.1-9.14 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND Package Information libX11-1.6.5-3.12 is installed OR libX11-6-1.6.5-3.12 is installed OR libX11-6-32bit-1.6.5-3.12 is installed OR libX11-data-1.6.5-3.12 is installed OR libX11-devel-1.6.5-3.12 is installed OR libX11-xcb1-1.6.5-3.12 is installed OR libX11-xcb1-32bit-1.6.5-3.12 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.18 is installed OR reiserfs-kmp-default-4.12.14-197.18 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_26-default-2-2 is installed OR kernel-livepatch-SLE15-SP1_Update_7-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information sane-backends-1.0.31-6.3 is installed OR sane-backends-32bit-1.0.31-6.3 is installed OR sane-backends-devel-32bit-1.0.31-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information libEMF-1.0.7-3.3 is installed OR libEMF-devel-1.0.7-3.3 is installed OR libEMF-utils-1.0.7-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP2 is installed AND Package Information python2-targetcli-fb-2.1.52-3.3 is installed OR targetcli-fb-2.1.52-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information xen-4.12.3_06-3.25 is installed OR xen-devel-4.12.3_06-3.25 is installed OR xen-tools-4.12.3_06-3.25 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information libgcrypt20-1.6.1-16 is installed OR libgcrypt20-32bit-1.6.1-16 is installed OR libgcrypt20-hmac-1.6.1-16 is installed OR libgcrypt20-hmac-32bit-1.6.1-16 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information xorg-x11-server-7.6_1.15.2-53.3 is installed OR xorg-x11-server-extra-7.6_1.15.2-53.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information libdcerpc-binding0-4.4.2-29 is installed OR libdcerpc-binding0-32bit-4.4.2-29 is installed OR libdcerpc0-4.4.2-29 is installed OR libdcerpc0-32bit-4.4.2-29 is installed OR libndr-krb5pac0-4.4.2-29 is installed OR libndr-krb5pac0-32bit-4.4.2-29 is installed OR libndr-nbt0-4.4.2-29 is installed OR libndr-nbt0-32bit-4.4.2-29 is installed OR libndr-standard0-4.4.2-29 is installed OR libndr-standard0-32bit-4.4.2-29 is installed OR libndr0-4.4.2-29 is installed OR libndr0-32bit-4.4.2-29 is installed OR libnetapi0-4.4.2-29 is installed OR libnetapi0-32bit-4.4.2-29 is installed OR libsamba-credentials0-4.4.2-29 is installed OR libsamba-credentials0-32bit-4.4.2-29 is installed OR libsamba-errors0-4.4.2-29 is installed OR libsamba-errors0-32bit-4.4.2-29 is installed OR libsamba-hostconfig0-4.4.2-29 is installed OR libsamba-hostconfig0-32bit-4.4.2-29 is installed OR libsamba-passdb0-4.4.2-29 is installed OR libsamba-passdb0-32bit-4.4.2-29 is installed OR libsamba-util0-4.4.2-29 is installed OR libsamba-util0-32bit-4.4.2-29 is installed OR libsamdb0-4.4.2-29 is installed OR libsamdb0-32bit-4.4.2-29 is installed OR libsmbclient0-4.4.2-29 is installed OR libsmbclient0-32bit-4.4.2-29 is installed OR libsmbconf0-4.4.2-29 is installed OR libsmbconf0-32bit-4.4.2-29 is installed OR libsmbldap0-4.4.2-29 is installed OR libsmbldap0-32bit-4.4.2-29 is installed OR libtevent-util0-4.4.2-29 is installed OR libtevent-util0-32bit-4.4.2-29 is installed OR libwbclient0-4.4.2-29 is installed OR libwbclient0-32bit-4.4.2-29 is installed OR samba-4.4.2-29 is installed OR samba-client-4.4.2-29 is installed OR samba-client-32bit-4.4.2-29 is installed OR samba-doc-4.4.2-29 is installed OR samba-libs-4.4.2-29 is installed OR samba-libs-32bit-4.4.2-29 is installed OR samba-winbind-4.4.2-29 is installed OR samba-winbind-32bit-4.4.2-29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information apache2-2.4.23-29.24 is installed OR apache2-doc-2.4.23-29.24 is installed OR apache2-example-pages-2.4.23-29.24 is installed OR apache2-prefork-2.4.23-29.24 is installed OR apache2-utils-2.4.23-29.24 is installed OR apache2-worker-2.4.23-29.24 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kernel-firmware-20170530-21.22 is installed OR ucode-amd-20170530-21.22 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_121-92_80-default-2-2 is installed OR kgraft-patch-SLE12-SP2_Update_22-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information at-3.1.14-7 is installed OR flex-2.5.37-8 is installed OR flex-32bit-2.5.37-8 is installed OR libQtWebKit4-4.8.6+2.3.3-3 is installed OR libQtWebKit4-32bit-4.8.6+2.3.3-3 is installed OR libbonobo-2.32.1-16 is installed OR libbonobo-32bit-2.32.1-16 is installed OR libbonobo-doc-2.32.1-16 is installed OR libbonobo-lang-2.32.1-16 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libpython2_7-1_0-2.7.13-28.31 is installed OR libpython2_7-1_0-32bit-2.7.13-28.31 is installed OR python-2.7.13-28.31 is installed OR python-32bit-2.7.13-28.31 is installed OR python-base-2.7.13-28.31 is installed OR python-base-32bit-2.7.13-28.31 is installed OR python-curses-2.7.13-28.31 is installed OR python-demo-2.7.13-28.31 is installed OR python-devel-2.7.13-28.31 is installed OR python-doc-2.7.13-28.31 is installed OR python-doc-pdf-2.7.13-28.31 is installed OR python-gdbm-2.7.13-28.31 is installed OR python-idle-2.7.13-28.31 is installed OR python-tk-2.7.13-28.31 is installed OR python-xml-2.7.13-28.31 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information libecpg6-10.9-1.12 is installed OR libpq5-10.9-1.12 is installed OR libpq5-32bit-10.9-1.12 is installed OR postgresql10-10.9-1.12 is installed OR postgresql10-contrib-10.9-1.12 is installed OR postgresql10-docs-10.9-1.12 is installed OR postgresql10-libs-10.9-1.12 is installed OR postgresql10-plperl-10.9-1.12 is installed OR postgresql10-plpython-10.9-1.12 is installed OR postgresql10-pltcl-10.9-1.12 is installed OR postgresql10-server-10.9-1.12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libwireshark9-2.4.10-48.32 is installed OR libwiretap7-2.4.10-48.32 is installed OR libwscodecs1-2.4.10-48.32 is installed OR libwsutil8-2.4.10-48.32 is installed OR wireshark-2.4.10-48.32 is installed OR wireshark-gtk-2.4.10-48.32 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND rsync-3.1.0-13.13 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information libpcp-devel-3.11.9-5.8 is installed OR libpcp3-3.11.9-5.8 is installed OR libpcp_gui2-3.11.9-5.8 is installed OR libpcp_import1-3.11.9-5.8 is installed OR libpcp_mmv1-3.11.9-5.8 is installed OR libpcp_trace2-3.11.9-5.8 is installed OR libpcp_web1-3.11.9-5.8 is installed OR pcp-3.11.9-5.8 is installed OR pcp-conf-3.11.9-5.8 is installed OR pcp-devel-3.11.9-5.8 is installed OR pcp-doc-3.11.9-5.8 is installed OR pcp-import-iostat2pcp-3.11.9-5.8 is installed OR pcp-import-mrtg2pcp-3.11.9-5.8 is installed OR pcp-import-sar2pcp-3.11.9-5.8 is installed OR perl-PCP-LogImport-3.11.9-5.8 is installed OR perl-PCP-LogSummary-3.11.9-5.8 is installed OR perl-PCP-MMV-3.11.9-5.8 is installed OR perl-PCP-PMDA-3.11.9-5.8 is installed OR python-pcp-3.11.9-5.8 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information icu-60.2-3.9 is installed OR libicu-devel-60.2-3.9 is installed OR libicu60_2-60.2-3.9 is installed OR libicu60_2-ledata-60.2-3.9 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information bluez-5.48-5.8 is installed OR bluez-cups-5.48-5.8 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND python-Pillow-2.7.0-1 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND ucode-intel-20180425-13.20 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information libsolv-0.6.36-2.27.19 is installed OR libsolv-tools-0.6.36-2.27.19 is installed OR libzypp-16.20.2-27.60 is installed OR perl-solv-0.6.36-2.27.19 is installed OR python-solv-0.6.36-2.27.19 is installed OR zypper-1.13.54-18.40 is installed OR zypper-log-1.13.54-18.40 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information libshibsp-lite6-2.5.5-6.6 is installed OR libshibsp6-2.5.5-6.6 is installed OR shibboleth-sp-2.5.5-6.6 is installed
BACK