Oval Definition:	oval:org.opensuse.security:def:73663
Revision Date: 2021-06-30 Version: 1 Title: Security update for qemu (Moderate) Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3546: Fix out-of-bounds write in virgl_cmd_get_capset (bsc#1185981) - CVE-2021-3544: Fix memory leaks found in the virtio vhost-user GPU device (bsc#1186010) - CVE-2021-3545: Fix information disclosure due to uninitialized memory read (bsc#1185990) Non-security issues fixed: - Fix testsuite error (bsc#1184574) - Fix qemu crash with iothread when block commit after snapshot (bsc#1187013) - Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591) - Use RCU to avoid race during scsi hotplug/hotunplug (bsc#1184574) Family: unix Class: patch Status: Reference(s): 1166066 1184574 1185591 1185981 1185990 1186010 1187013 CVE-2014-9221 CVE-2015-3991 CVE-2015-4171 CVE-2015-8023 CVE-2017-11185 CVE-2017-9022 CVE-2017-9023 CVE-2018-10811 CVE-2018-16151 CVE-2018-16152 CVE-2018-17540 CVE-2018-5388 CVE-2018-6459 CVE-2020-0034 CVE-2021-3544 CVE-2021-3545 CVE-2021-3546 SUSE-SU-2020:1297-2 SUSE-SU-2021:2212-1 Platform(s): SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Manager Proxy 4.1 SUSE Manager Server 4.1 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND Package Information libvpx-1.6.1-6.6 is installed OR libvpx-devel-1.6.1-6.6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND strongswan-nm-5.8.2-9 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND qemu-tools-4.2.1-11.22.1 is installed
BACK