Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2254-1 Final 1 1 2022-07-04T10:13:04Z current 2022-07-04T10:13:04Z 2022-07-04T10:13:04Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - CVE-2022-26354: Fixed missing virtqueue detach on error can lead to memory leak (bsc#1198712) - CVE-2021-4207: Fixed double fetch in qxl_cursor() can lead to heap buffer overflow (bsc#1198037) - CVE-2021-4206: Fixed integer overflow in cursor_alloc() can lead to heap buffer overflow (bsc#1198035) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro-rancher/5.2:latest-2022-2254,SUSE-2022-2254,SUSE-SLE-Module-Basesystem-15-SP3-2022-2254,SUSE-SLE-Module-Server-Applications-15-SP3-2022-2254,SUSE-SUSE-MicroOS-5.1-2022-2254,SUSE-SUSE-MicroOS-5.2-2022-2254,openSUSE-SLE-15.3-2022-2254 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222254-1/ Link for SUSE-SU-2022:2254-1 https://lists.suse.com/pipermail/sle-security-updates/2022-July/011388.html E-Mail link for SUSE-SU-2022:2254-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1197084 SUSE Bug 1197084 https://bugzilla.suse.com/1198035 SUSE Bug 1198035 https://bugzilla.suse.com/1198037 SUSE Bug 1198037 https://bugzilla.suse.com/1198712 SUSE Bug 1198712 https://bugzilla.suse.com/1199018 SUSE Bug 1199018 https://bugzilla.suse.com/1199924 SUSE Bug 1199924 https://www.suse.com/security/cve/CVE-2021-4206/ SUSE CVE CVE-2021-4206 page https://www.suse.com/security/cve/CVE-2021-4207/ SUSE CVE CVE-2021-4207 page https://www.suse.com/security/cve/CVE-2022-26354/ SUSE CVE CVE-2022-26354 page Container suse/sle-micro-rancher/5.2:latest SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 openSUSE Leap 15.3 qemu-guest-agent-5.2.0-150300.115.2 qemu-5.2.0-150300.115.2 qemu-SLOF-5.2.0-150300.115.2 qemu-arm-5.2.0-150300.115.2 qemu-audio-alsa-5.2.0-150300.115.2 qemu-audio-pa-5.2.0-150300.115.2 qemu-audio-spice-5.2.0-150300.115.2 qemu-block-curl-5.2.0-150300.115.2 qemu-block-dmg-5.2.0-150300.115.2 qemu-block-gluster-5.2.0-150300.115.2 qemu-block-iscsi-5.2.0-150300.115.2 qemu-block-nfs-5.2.0-150300.115.2 qemu-block-rbd-5.2.0-150300.115.2 qemu-block-ssh-5.2.0-150300.115.2 qemu-chardev-baum-5.2.0-150300.115.2 qemu-chardev-spice-5.2.0-150300.115.2 qemu-extra-5.2.0-150300.115.2 qemu-hw-display-qxl-5.2.0-150300.115.2 qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 qemu-hw-display-virtio-gpu-pci-5.2.0-150300.115.2 qemu-hw-display-virtio-vga-5.2.0-150300.115.2 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.115.2 qemu-hw-usb-redirect-5.2.0-150300.115.2 qemu-hw-usb-smartcard-5.2.0-150300.115.2 qemu-ipxe-1.0.0+-150300.115.2 qemu-ivshmem-tools-5.2.0-150300.115.2 qemu-ksm-5.2.0-150300.115.2 qemu-kvm-5.2.0-150300.115.2 qemu-lang-5.2.0-150300.115.2 qemu-linux-user-5.2.0-150300.115.2 qemu-microvm-5.2.0-150300.115.2 qemu-ppc-5.2.0-150300.115.2 qemu-s390x-5.2.0-150300.115.2 qemu-seabios-1.14.0_0_g155821a-150300.115.2 qemu-sgabios-8-150300.115.2 qemu-skiboot-5.2.0-150300.115.2 qemu-testsuite-5.2.0-150300.115.4 qemu-tools-5.2.0-150300.115.2 qemu-ui-curses-5.2.0-150300.115.2 qemu-ui-gtk-5.2.0-150300.115.2 qemu-ui-opengl-5.2.0-150300.115.2 qemu-ui-spice-app-5.2.0-150300.115.2 qemu-ui-spice-core-5.2.0-150300.115.2 qemu-vgabios-1.14.0_0_g155821a-150300.115.2 qemu-vhost-user-gpu-5.2.0-150300.115.2 qemu-x86-5.2.0-150300.115.2 qemu-guest-agent-5.2.0-150300.115.2 as a component of Container suse/sle-micro-rancher/5.2:latest qemu-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-arm-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-ipxe-1.0.0+-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-s390x-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-seabios-1.14.0_0_g155821a-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-sgabios-8-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-tools-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-vgabios-1.14.0_0_g155821a-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-x86-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.1 qemu-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-arm-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-audio-spice-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-chardev-spice-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-guest-agent-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-hw-display-qxl-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-hw-display-virtio-vga-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-hw-usb-redirect-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-ipxe-1.0.0+-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-s390x-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-seabios-1.14.0_0_g155821a-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-sgabios-8-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-tools-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-ui-opengl-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-ui-spice-core-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-vgabios-1.14.0_0_g155821a-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-x86-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Micro 5.2 qemu-tools-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 qemu-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-SLOF-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-arm-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-alsa-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-pa-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-audio-spice-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-curl-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-iscsi-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-rbd-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-block-ssh-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-chardev-baum-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-chardev-spice-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-guest-agent-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-qxl-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-gpu-pci-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-display-virtio-vga-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-hw-usb-redirect-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ipxe-1.0.0+-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ksm-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-kvm-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-lang-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ppc-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-s390x-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-seabios-1.14.0_0_g155821a-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-sgabios-8-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-skiboot-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-curses-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-gtk-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-opengl-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-spice-app-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-ui-spice-core-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-vgabios-1.14.0_0_g155821a-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-x86-5.2.0-150300.115.2 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 qemu-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-SLOF-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-arm-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-audio-alsa-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-audio-pa-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-audio-spice-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-block-curl-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-block-dmg-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-block-gluster-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-block-iscsi-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-block-nfs-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-block-rbd-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-block-ssh-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-chardev-baum-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-chardev-spice-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-extra-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-guest-agent-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-hw-display-qxl-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-hw-display-virtio-gpu-pci-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-hw-display-virtio-vga-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-hw-usb-redirect-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-hw-usb-smartcard-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-ipxe-1.0.0+-150300.115.2 as a component of openSUSE Leap 15.3 qemu-ivshmem-tools-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-ksm-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-kvm-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-lang-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-linux-user-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-microvm-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-ppc-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-s390x-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-seabios-1.14.0_0_g155821a-150300.115.2 as a component of openSUSE Leap 15.3 qemu-sgabios-8-150300.115.2 as a component of openSUSE Leap 15.3 qemu-skiboot-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-testsuite-5.2.0-150300.115.4 as a component of openSUSE Leap 15.3 qemu-tools-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-ui-curses-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-ui-gtk-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-ui-opengl-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-ui-spice-app-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-ui-spice-core-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-vgabios-1.14.0_0_g155821a-150300.115.2 as a component of openSUSE Leap 15.3 qemu-vhost-user-gpu-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 qemu-x86-5.2.0-150300.115.2 as a component of openSUSE Leap 15.3 A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. This flaw allows a malicious privileged guest user to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process. CVE-2021-4206 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-arm-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-ipxe-1.0.0+-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-s390x-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-seabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-sgabios-8-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-tools-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-vgabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-x86-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-arm-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-audio-spice-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-chardev-spice-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-guest-agent-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-hw-display-qxl-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-hw-display-virtio-vga-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-hw-usb-redirect-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-ipxe-1.0.0+-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-s390x-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-seabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-sgabios-8-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-tools-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-ui-opengl-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-ui-spice-core-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-vgabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-x86-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-SLOF-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-SLOF-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-arm-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-audio-alsa-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-audio-pa-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-audio-spice-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-curl-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-dmg-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-gluster-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-iscsi-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-nfs-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-rbd-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-ssh-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-chardev-baum-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-chardev-spice-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-extra-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-guest-agent-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-display-qxl-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-pci-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-display-virtio-vga-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-usb-redirect-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-usb-smartcard-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ipxe-1.0.0+-150300.115.2 openSUSE Leap 15.3:qemu-ivshmem-tools-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ksm-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-kvm-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-lang-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-linux-user-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-microvm-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ppc-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-s390x-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-seabios-1.14.0_0_g155821a-150300.115.2 openSUSE Leap 15.3:qemu-sgabios-8-150300.115.2 openSUSE Leap 15.3:qemu-skiboot-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-testsuite-5.2.0-150300.115.4 openSUSE Leap 15.3:qemu-tools-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-curses-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-gtk-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-opengl-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-spice-app-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-spice-core-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-vgabios-1.14.0_0_g155821a-150300.115.2 openSUSE Leap 15.3:qemu-vhost-user-gpu-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-x86-5.2.0-150300.115.2 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222254-1/ https://www.suse.com/security/cve/CVE-2021-4206.html CVE-2021-4206 https://bugzilla.suse.com/1198035 SUSE Bug 1198035 https://bugzilla.suse.com/1211582 SUSE Bug 1211582 A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use this flaw to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process. CVE-2021-4207 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-arm-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-ipxe-1.0.0+-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-s390x-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-seabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-sgabios-8-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-tools-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-vgabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-x86-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-arm-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-audio-spice-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-chardev-spice-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-guest-agent-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-hw-display-qxl-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-hw-display-virtio-vga-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-hw-usb-redirect-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-ipxe-1.0.0+-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-s390x-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-seabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-sgabios-8-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-tools-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-ui-opengl-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-ui-spice-core-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-vgabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-x86-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-SLOF-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-SLOF-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-arm-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-audio-alsa-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-audio-pa-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-audio-spice-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-curl-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-dmg-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-gluster-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-iscsi-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-nfs-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-rbd-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-ssh-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-chardev-baum-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-chardev-spice-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-extra-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-guest-agent-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-display-qxl-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-pci-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-display-virtio-vga-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-usb-redirect-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-usb-smartcard-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ipxe-1.0.0+-150300.115.2 openSUSE Leap 15.3:qemu-ivshmem-tools-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ksm-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-kvm-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-lang-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-linux-user-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-microvm-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ppc-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-s390x-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-seabios-1.14.0_0_g155821a-150300.115.2 openSUSE Leap 15.3:qemu-sgabios-8-150300.115.2 openSUSE Leap 15.3:qemu-skiboot-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-testsuite-5.2.0-150300.115.4 openSUSE Leap 15.3:qemu-tools-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-curses-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-gtk-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-opengl-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-spice-app-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-spice-core-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-vgabios-1.14.0_0_g155821a-150300.115.2 openSUSE Leap 15.3:qemu-vhost-user-gpu-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-x86-5.2.0-150300.115.2 important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222254-1/ https://www.suse.com/security/cve/CVE-2021-4207.html CVE-2021-4207 https://bugzilla.suse.com/1198037 SUSE Bug 1198037 A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions <= 6.2.0. CVE-2022-26354 Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-arm-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-ipxe-1.0.0+-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-s390x-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-seabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-sgabios-8-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-tools-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-vgabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Micro 5.1:qemu-x86-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-arm-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-audio-spice-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-chardev-spice-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-guest-agent-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-hw-display-qxl-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-hw-display-virtio-vga-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-hw-usb-redirect-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-ipxe-1.0.0+-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-s390x-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-seabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-sgabios-8-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-tools-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-ui-opengl-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-ui-spice-core-5.2.0-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-vgabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Micro 5.2:qemu-x86-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Basesystem 15 SP3:qemu-tools-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-SLOF-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-arm-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-alsa-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-pa-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-audio-spice-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-curl-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-iscsi-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-rbd-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-block-ssh-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-baum-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-chardev-spice-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-guest-agent-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-qxl-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-gpu-pci-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-display-virtio-vga-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-hw-usb-redirect-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ipxe-1.0.0+-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ksm-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-kvm-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-lang-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ppc-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-s390x-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-seabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-sgabios-8-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-skiboot-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-curses-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-gtk-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-opengl-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-app-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-ui-spice-core-5.2.0-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-vgabios-1.14.0_0_g155821a-150300.115.2 SUSE Linux Enterprise Module for Server Applications 15 SP3:qemu-x86-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-SLOF-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-arm-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-audio-alsa-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-audio-pa-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-audio-spice-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-curl-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-dmg-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-gluster-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-iscsi-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-nfs-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-rbd-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-block-ssh-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-chardev-baum-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-chardev-spice-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-extra-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-guest-agent-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-display-qxl-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-pci-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-display-virtio-vga-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-usb-redirect-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-hw-usb-smartcard-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ipxe-1.0.0+-150300.115.2 openSUSE Leap 15.3:qemu-ivshmem-tools-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ksm-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-kvm-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-lang-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-linux-user-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-microvm-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ppc-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-s390x-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-seabios-1.14.0_0_g155821a-150300.115.2 openSUSE Leap 15.3:qemu-sgabios-8-150300.115.2 openSUSE Leap 15.3:qemu-skiboot-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-testsuite-5.2.0-150300.115.4 openSUSE Leap 15.3:qemu-tools-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-curses-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-gtk-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-opengl-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-spice-app-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-ui-spice-core-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-vgabios-1.14.0_0_g155821a-150300.115.2 openSUSE Leap 15.3:qemu-vhost-user-gpu-5.2.0-150300.115.2 openSUSE Leap 15.3:qemu-x86-5.2.0-150300.115.2 important 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222254-1/ https://www.suse.com/security/cve/CVE-2022-26354.html CVE-2022-26354 https://bugzilla.suse.com/1198712 SUSE Bug 1198712