Oval Definition:oval:org.opensuse.security:def:67304
Revision Date:2021-11-03Version:1
Title:Security update for qemu (Important)
Description:

This update for qemu fixes the following issues:

Security issues fixed:

- CVE-2021-3713: Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702) - CVE-2021-3748: Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938)

Non-security issues fixed:

- Add transfer length item in block limits page of scsi vpd (bsc#1190425) - Fix qemu crash while deleting xen-block (bsc#1189234)
Family:unixClass:patch
Status:Reference(s):1153165
1154217
1177914
1189234
1189702
1189938
1190425
CVE-2019-14853
CVE-2019-14859
CVE-2020-15999
CVE-2021-3713
CVE-2021-3748
SUSE-SU-2019:2891-2
Platform(s):SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 is installed
  • AND Package Information
  • python-ecdsa-0.13.3-3.3 is installed
  • OR python2-ecdsa-0.13.3-3.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
  • AND Package Information
  • freetype2-2.10.1-4.8 is installed
  • OR freetype2-devel-32bit-2.10.1-4.8 is installed
  • OR freetype2-profile-tti35-2.10.1-4.8 is installed
  • OR ft2demos-2.10.1-4.8 is installed
  • OR ftbench-2.10.1-4.8 is installed
  • OR ftdiff-2.10.1-4.8 is installed
  • OR ftdump-2.10.1-4.8 is installed
  • OR ftgamma-2.10.1-4.8 is installed
  • OR ftgrid-2.10.1-4.8 is installed
  • OR ftinspect-2.10.1-4.8 is installed
  • OR ftlint-2.10.1-4.8 is installed
  • OR ftmulti-2.10.1-4.8 is installed
  • OR ftstring-2.10.1-4.8 is installed
  • OR ftvalid-2.10.1-4.8 is installed
  • OR ftview-2.10.1-4.8 is installed
  • BACK