Security update for qemu
This update for qemu fixes the following issues: - CVE-2022-26354: Fixed missing virtqueue detach on error can lead to memory leak (bsc#1198712) - CVE-2022-26353: Fixed map leaking on error during receive (bsc#1198711) - CVE-2021-4207: Fixed double fetch in qxl_cursor() can lead to heap buffer overflow (bsc#1198037) - CVE-2021-4206: Fixed integer overflow in cursor_alloc() can lead to heap buffer overflow (bsc#1198035)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for qemu fixes the following issues: - CVE-2022-26354: Fixed missing virtqueue detach on error can lead to memory leak (bsc#1198712) - CVE-2022-26353: Fixed map leaking on error during receive (bsc#1198711) - CVE-2021-4207: Fixed double fetch in qxl_cursor() can lead to heap buffer overflow (bsc#1198037) - CVE-2021-4206: Fixed integer overflow in cursor_alloc() can lead to heap buffer overflow (bsc#1198035)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1197084
- https://bugzilla.suse.com/1198035
- https://bugzilla.suse.com/1198037
- https://bugzilla.suse.com/1198711
- https://bugzilla.suse.com/1198712
- https://bugzilla.suse.com/1199015
- https://bugzilla.suse.com/1199018
- https://bugzilla.suse.com/1199625
- https://bugzilla.suse.com/1199924
- https://www.suse.com/security/cve/CVE-2021-4206
- https://www.suse.com/security/cve/CVE-2021-4207
- https://www.suse.com/security/cve/CVE-2022-26353
- https://www.suse.com/security/cve/CVE-2022-26354
- https://www.suse.com/support/update/announcement/2022/suse-su-20222260-1/