Oval Definition:	oval:org.opensuse.security:def:89472
Revision Date: 2021-11-09 Version: 1 Title: Security update for qemu (Important) Description: This update for qemu fixes the following issues: Security issues fixed: - Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938, CVE-2021-3748) - Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702, CVE-2021-3713) - usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682) - NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506) - NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) - eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255) - usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527) Family: unix Class: patch Status: Reference(s): 1180432 1180433 1180434 1180435 1182651 1186012 1189145 1189702 1189938 CVE-2020-35503 CVE-2020-35504 CVE-2020-35505 CVE-2020-35506 CVE-2021-20255 CVE-2021-3527 CVE-2021-3682 CVE-2021-3713 CVE-2021-3748 SUSE-SU-2021:3635-1 Platform(s): SUSE Linux Enterprise Server 12 SP4-LTSS Product(s): Definition Synopsis SUSE Linux Enterprise Server 12 SP4-LTSS is installed AND Package Information qemu-2.11.2-5.40.2 is installed OR qemu-arm-2.11.2-5.40.2 is installed OR qemu-block-curl-2.11.2-5.40.2 is installed OR qemu-block-iscsi-2.11.2-5.40.2 is installed OR qemu-block-rbd-2.11.2-5.40.2 is installed OR qemu-block-ssh-2.11.2-5.40.2 is installed OR qemu-guest-agent-2.11.2-5.40.2 is installed OR qemu-ipxe-1.0.0+-5.40.2 is installed OR qemu-kvm-2.11.2-5.40.2 is installed OR qemu-lang-2.11.2-5.40.2 is installed OR qemu-ppc-2.11.2-5.40.2 is installed OR qemu-s390-2.11.2-5.40.2 is installed OR qemu-seabios-1.11.0_0_g63451fc-5.40.2 is installed OR qemu-sgabios-8-5.40.2 is installed OR qemu-tools-2.11.2-5.40.2 is installed OR qemu-vgabios-1.11.0_0_g63451fc-5.40.2 is installed OR qemu-x86-2.11.2-5.40.2 is installed
BACK