Security update for qemu
This update for qemu to version 4.2.1 fixes the following issues: - CVE-2020-10761: Fixed a denial of service in Network Block Device (nbd) support infrastructure (bsc#1172710). - CVE-2020-13800: Fixed a denial of service possibility in ati-vga emulation (bsc#1172495). - CVE-2020-13659: Fixed a null pointer dereference possibility in MegaRAID SAS 8708EM2 emulation (bsc#1172386). - CVE-2020-13362: Fixed an OOB access possibility in MegaRAID SAS 8708EM2 emulation (bsc#1172383). - CVE-2020-13361: Fixed an OOB access possibility in ES1370 audio device emulation (bsc#1172384).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for qemu to version 4.2.1 fixes the following issues: - CVE-2020-10761: Fixed a denial of service in Network Block Device (nbd) support infrastructure (bsc#1172710). - CVE-2020-13800: Fixed a denial of service possibility in ati-vga emulation (bsc#1172495). - CVE-2020-13659: Fixed a null pointer dereference possibility in MegaRAID SAS 8708EM2 emulation (bsc#1172386). - CVE-2020-13362: Fixed an OOB access possibility in MegaRAID SAS 8708EM2 emulation (bsc#1172383). - CVE-2020-13361: Fixed an OOB access possibility in ES1370 audio device emulation (bsc#1172384).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1172383
- https://bugzilla.suse.com/1172384
- https://bugzilla.suse.com/1172386
- https://bugzilla.suse.com/1172495
- https://bugzilla.suse.com/1172710
- https://www.suse.com/security/cve/CVE-2020-10761
- https://www.suse.com/security/cve/CVE-2020-13361
- https://www.suse.com/security/cve/CVE-2020-13362
- https://www.suse.com/security/cve/CVE-2020-13659
- https://www.suse.com/security/cve/CVE-2020-13800
- https://www.suse.com/support/update/announcement/2020/suse-su-20202015-1/