Oval Definition:oval:org.opensuse.security:def:66896
Revision Date:2021-08-20Version:1
Title:Security update for qemu (Moderate)
Description:

This update for qemu fixes the following issues:

Security issues fixed:

- usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682) - NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506) - NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) - eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255) - usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)
Family:unixClass:patch
Status:Reference(s):1168669
1173032
1180432
1180433
1180434
1180435
1182651
1186012
1189145
CVE-2016-2183
CVE-2019-3816
CVE-2019-3833
CVE-2020-12402
CVE-2020-35503
CVE-2020-35504
CVE-2020-35505
CVE-2020-35506
CVE-2021-20255
CVE-2021-3527
CVE-2021-3682
SUSE-SU-2020:1850-1
Platform(s):SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Server Applications 15 SP2
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
  • AND Package Information
  • libfreebl3-3.53.1-3.45 is installed
  • OR libfreebl3-32bit-3.53.1-3.45 is installed
  • OR libsoftokn3-3.53.1-3.45 is installed
  • OR libsoftokn3-32bit-3.53.1-3.45 is installed
  • OR mozilla-nss-3.53.1-3.45 is installed
  • OR mozilla-nss-32bit-3.53.1-3.45 is installed
  • OR mozilla-nss-certs-3.53.1-3.45 is installed
  • OR mozilla-nss-certs-32bit-3.53.1-3.45 is installed
  • OR mozilla-nss-devel-3.53.1-3.45 is installed
  • OR mozilla-nss-sysinit-3.53.1-3.45 is installed
  • OR mozilla-nss-tools-3.53.1-3.45 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
  • AND Package Information
  • libwsman-devel-2.6.7-3.6 is installed
  • OR libwsman3-2.6.7-3.6 is installed
  • OR openwsman-server-2.6.7-3.6 is installed
  • BACK