Oval Definition:	oval:org.opensuse.security:def:73732
Revision Date: 2021-11-03 Version: 1 Title: Security update for qemu (Important) Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3713: Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702) - CVE-2021-3748: Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938) Non-security issues fixed: - Add transfer length item in block limits page of scsi vpd (bsc#1190425) - Fix qemu crash while deleting xen-block (bsc#1189234) Family: unix Class: patch Status: Reference(s): 1175132 1176086 1176181 1176671 1178750 1178752 1178753 1189234 1189702 1189938 1190425 CVE-2020-24659 CVE-2020-28362 CVE-2020-28366 CVE-2020-28367 CVE-2021-3713 CVE-2021-3748 SUSE-SU-2020:2864-1 SUSE-SU-2020:3368-1 SUSE-SU-2021:3604-1 Platform(s): SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.1 SUSE Manager Server 4.1 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND qemu-tools-4.2.1-11.31.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed AND Package Information gnutls-3.6.7-14.4 is installed OR libgnutls-devel-3.6.7-14.4 is installed OR libgnutls30-3.6.7-14.4 is installed OR libgnutls30-32bit-3.6.7-14.4 is installed OR libgnutls30-hmac-3.6.7-14.4 is installed OR libgnutls30-hmac-32bit-3.6.7-14.4 is installed OR libgnutlsxx-devel-3.6.7-14.4 is installed OR libgnutlsxx28-3.6.7-14.4 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed AND Package Information go1.15-1.15.5-1.11 is installed OR go1.15-doc-1.15.5-1.11 is installed
BACK