Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:3605-1 Final 1 1 2021-11-03T13:59:50Z current 2021-11-03T13:59:50Z 2021-11-03T13:59:50Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3713: Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702) - CVE-2021-3748: Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938) Non-security issues fixed: - Add transfer length item in block limits page of scsi vpd (bsc#1190425) - Fix qemu crash while deleting xen-block (bsc#1189234) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro-rancher/5.2:latest-2021-3605,Container suse/sles/15.3/libguestfs-tools:0.45.0-2021-3605,Container suse/sles/15.3/virt-handler:0.45.0-2021-3605,Container suse/sles/15.3/virt-launcher:0.45.0-2021-3605,Image SLES15-SP3-EC2-ECS-HVM-2021-3605,SUSE-2021-3605,SUSE-SLE-Module-Basesystem-15-SP3-2021-3605,SUSE-SLE-Module-Server-Applications-15-SP3-2021-3605,SUSE-SUSE-MicroOS-5.1-2021-3605 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20213605-1/ Link for SUSE-SU-2021:3605-1 https://lists.suse.com/pipermail/sle-security-updates/2021-November/009693.html E-Mail link for SUSE-SU-2021:3605-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1189234 SUSE Bug 1189234 https://bugzilla.suse.com/1189702 SUSE Bug 1189702 https://bugzilla.suse.com/1189938 SUSE Bug 1189938 https://bugzilla.suse.com/1190425 SUSE Bug 1190425 https://www.suse.com/security/cve/CVE-2021-3713/ SUSE CVE CVE-2021-3713 page https://www.suse.com/security/cve/CVE-2021-3748/ SUSE CVE CVE-2021-3748 page Container suse/sle-micro-rancher/5.2:latest Container suse/sles/15.3/libguestfs-tools:0.45.0 Container suse/sles/15.3/virt-handler:0.45.0 Container suse/sles/15.3/virt-launcher:0.45.0 Image SLES15-SP3-EC2-ECS-HVM SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-guest-agent-5.2.0-106.4 qemu-5.2.0-106.4 qemu-ipxe-1.0.0+-106.4 qemu-seabios-1.14.0_0_g155821a-106.4 qemu-sgabios-8-106.4 qemu-tools-5.2.0-106.4 qemu-vgabios-1.14.0_0_g155821a-106.4 qemu-x86-5.2.0-106.4 qemu-arm-5.2.0-106.4 qemu-audio-alsa-5.2.0-106.4 qemu-audio-pa-5.2.0-106.4 qemu-audio-spice-5.2.0-106.4 qemu-block-curl-5.2.0-106.4 qemu-block-dmg-5.2.0-106.4 qemu-block-gluster-5.2.0-106.4 qemu-block-iscsi-5.2.0-106.4 qemu-block-nfs-5.2.0-106.4 qemu-block-rbd-5.2.0-106.4 qemu-block-ssh-5.2.0-106.4 qemu-chardev-baum-5.2.0-106.4 qemu-chardev-spice-5.2.0-106.4 qemu-extra-5.2.0-106.4 qemu-hw-display-qxl-5.2.0-106.4 qemu-hw-display-virtio-gpu-5.2.0-106.4 qemu-hw-display-virtio-gpu-pci-5.2.0-106.4 qemu-hw-display-virtio-vga-5.2.0-106.4 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-106.4 qemu-hw-usb-redirect-5.2.0-106.4 qemu-hw-usb-smartcard-5.2.0-106.4 qemu-ivshmem-tools-5.2.0-106.4 qemu-ksm-5.2.0-106.4 qemu-kvm-5.2.0-106.4 qemu-lang-5.2.0-106.4 qemu-linux-user-5.2.0-106.3 qemu-microvm-5.2.0-106.4 qemu-ppc-5.2.0-106.4 qemu-s390x-5.2.0-106.4 qemu-skiboot-5.2.0-106.4 qemu-testsuite-5.2.0-106.3 qemu-ui-curses-5.2.0-106.4 qemu-ui-gtk-5.2.0-106.4 qemu-ui-opengl-5.2.0-106.4 qemu-ui-spice-app-5.2.0-106.4 qemu-ui-spice-core-5.2.0-106.4 qemu-vhost-user-gpu-5.2.0-106.4 qemu-guest-agent-5.2.0-106.4 as a component of Container suse/sle-micro-rancher/5.2:latest qemu-5.2.0-106.4 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-ipxe-1.0.0+-106.4 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-seabios-1.14.0_0_g155821a-106.4 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-sgabios-8-106.4 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-tools-5.2.0-106.4 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-vgabios-1.14.0_0_g155821a-106.4 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-x86-5.2.0-106.4 as a component of Container suse/sles/15.3/libguestfs-tools:0.45.0 qemu-tools-5.2.0-106.4 as a component of Container suse/sles/15.3/virt-handler:0.45.0 qemu-5.2.0-106.4 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-ipxe-1.0.0+-106.4 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-seabios-1.14.0_0_g155821a-106.4 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-sgabios-8-106.4 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-tools-5.2.0-106.4 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-vgabios-1.14.0_0_g155821a-106.4 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-x86-5.2.0-106.4 as a component of Container suse/sles/15.3/virt-launcher:0.45.0 qemu-tools-5.2.0-106.4 as a component of Image SLES15-SP3-EC2-ECS-HVM qemu-5.2.0-106.4 as a component of SUSE Linux Enterprise Micro 5.1 qemu-arm-5.2.0-106.4 as a component of SUSE Linux Enterprise Micro 5.1 qemu-ipxe-1.0.0+-106.4 as a component of SUSE Linux Enterprise Micro 5.1 qemu-s390x-5.2.0-106.4 as a component of SUSE Linux Enterprise Micro 5.1 qemu-seabios-1.14.0_0_g155821a-106.4 as a component of SUSE Linux Enterprise Micro 5.1 qemu-sgabios-8-106.4 as a component of SUSE Linux Enterprise Micro 5.1 qemu-tools-5.2.0-106.4 as a component of SUSE Linux Enterprise Micro 5.1 qemu-vgabios-1.14.0_0_g155821a-106.4 as a component of SUSE Linux Enterprise Micro 5.1 qemu-x86-5.2.0-106.4 as a component of SUSE Linux Enterprise Micro 5.1 qemu-tools-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 qemu-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-arm-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-alsa-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-pa-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-spice-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-curl-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-iscsi-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-rbd-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-ssh-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-chardev-baum-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-chardev-spice-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-guest-agent-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-qxl-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-gpu-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-gpu-pci-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-vga-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-usb-redirect-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ipxe-1.0.0+-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ksm-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-kvm-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-lang-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ppc-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-s390x-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-seabios-1.14.0_0_g155821a-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-sgabios-8-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-skiboot-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-curses-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-gtk-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-opengl-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-spice-app-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-spice-core-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-vgabios-1.14.0_0_g155821a-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-x86-5.2.0-106.4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host. CVE-2021-3713 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-106.4 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-106.4 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-106.4 SUSE Linux Enterprise Micro 5.1:qemu-5.2.0-106.4 SUSE Linux Enterprise Micro 5.1:qemu-arm-5.2.0-106.4 SUSE Linux Enterprise Micro 5.1:qemu-ipxe-1.0.0+-106.4 SUSE Linux Enterprise Micro 5.1:qemu-s390x-5.2.0-106.4 SUSE Linux Enterprise Micro 5.1:qemu-seabios-1.14.0_0_g155821a-106.4 SUSE Linux Enterprise Micro 5.1:qemu-sgabios-8-106.4 SUSE Linux Enterprise Micro 5.1:qemu-tools-5.2.0-106.4 SUSE Linux Enterprise Micro 5.1:qemu-vgabios-1.14.0_0_g155821a-106.4 SUSE Linux Enterprise Micro 5.1:qemu-x86-5.2.0-106.4 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-106.4 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213605-1/ https://www.suse.com/security/cve/CVE-2021-3713.html CVE-2021-3713 https://bugzilla.suse.com/1189702 SUSE Bug 1189702 A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to num_buffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a denial of service condition, or potentially execute code on the host with the privileges of the QEMU process. CVE-2021-3748 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-5.2.0-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-ipxe-1.0.0+-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-seabios-1.14.0_0_g155821a-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-sgabios-8-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-tools-5.2.0-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-vgabios-1.14.0_0_g155821a-106.4 Container suse/sles/15.3/libguestfs-tools:0.45.0:qemu-x86-5.2.0-106.4 Container suse/sles/15.3/virt-handler:0.45.0:qemu-tools-5.2.0-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-5.2.0-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-ipxe-1.0.0+-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-seabios-1.14.0_0_g155821a-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-sgabios-8-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-tools-5.2.0-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-vgabios-1.14.0_0_g155821a-106.4 Container suse/sles/15.3/virt-launcher:0.45.0:qemu-x86-5.2.0-106.4 Image SLES15-SP3-EC2-ECS-HVM:qemu-tools-5.2.0-106.4 SUSE Linux Enterprise Micro 5.1:qemu-5.2.0-106.4 SUSE Linux Enterprise Micro 5.1:qemu-arm-5.2.0-106.4 SUSE Linux Enterprise Micro 5.1:qemu-ipxe-1.0.0+-106.4 SUSE Linux Enterprise Micro 5.1:qemu-s390x-5.2.0-106.4 SUSE Linux Enterprise Micro 5.1:qemu-seabios-1.14.0_0_g155821a-106.4 SUSE Linux Enterprise Micro 5.1:qemu-sgabios-8-106.4 SUSE Linux Enterprise Micro 5.1:qemu-tools-5.2.0-106.4 SUSE Linux Enterprise Micro 5.1:qemu-vgabios-1.14.0_0_g155821a-106.4 SUSE Linux Enterprise Micro 5.1:qemu-x86-5.2.0-106.4 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-106.4 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-106.4 moderate 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20213605-1/ https://www.suse.com/security/cve/CVE-2021-3748.html CVE-2021-3748 https://bugzilla.suse.com/1189938 SUSE Bug 1189938