Security update for qemu
This update for qemu fixes the following issues: - CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. (bsc#1182282) - CVE-2021-4206: Fixed an integer overflow in cursor_alloc which can lead to heap buffer overflow. (bsc#1198035) - CVE-2021-4207: Fixed a double fetch in qxl_cursor ehich can lead to heap buffer overflow. (bsc#1198037) - CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038) - CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for qemu fixes the following issues: - CVE-2021-3409: Fixed an incomplete fix for CVE-2020-17380 and CVE-2020-25085 in sdhi controller. (bsc#1182282) - CVE-2021-4206: Fixed an integer overflow in cursor_alloc which can lead to heap buffer overflow. (bsc#1198035) - CVE-2021-4207: Fixed a double fetch in qxl_cursor ehich can lead to heap buffer overflow. (bsc#1198037) - CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038) - CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1175144
- https://bugzilla.suse.com/1182282
- https://bugzilla.suse.com/1192115
- https://bugzilla.suse.com/1198035
- https://bugzilla.suse.com/1198037
- https://bugzilla.suse.com/1198038
- https://www.suse.com/security/cve/CVE-2021-3409
- https://www.suse.com/security/cve/CVE-2021-4206
- https://www.suse.com/security/cve/CVE-2021-4207
- https://www.suse.com/security/cve/CVE-2022-0216
- https://www.suse.com/security/cve/CVE-2022-35414
- https://www.suse.com/support/update/announcement/2022/suse-su-20223594-1/