Security update for qemu
This update for qemu fixes the following issues: - CVE-2022-4144: Fixed qxl_phys2virt unsafe address translation that can lead to out-of-bounds read (bsc#1205808). - CVE-2022-3165: Fixed integer underflow in vnc_client_cut_text_ext() (bsc#1203788). - CVE-2022-1050: Fixed use-after-free issue in pvrdma_exec_cmd() (bsc#1197653). Bugfixes: - Fixed deviation of guest clock (bsc#1206527). - Fixed broken 'block limits' VPD emulation (bsc#1202364).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for qemu fixes the following issues: - CVE-2022-4144: Fixed qxl_phys2virt unsafe address translation that can lead to out-of-bounds read (bsc#1205808). - CVE-2022-3165: Fixed integer underflow in vnc_client_cut_text_ext() (bsc#1203788). - CVE-2022-1050: Fixed use-after-free issue in pvrdma_exec_cmd() (bsc#1197653). Bugfixes: - Fixed deviation of guest clock (bsc#1206527). - Fixed broken 'block limits' VPD emulation (bsc#1202364).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1197653
- https://bugzilla.suse.com/1202364
- https://bugzilla.suse.com/1203788
- https://bugzilla.suse.com/1205808
- https://bugzilla.suse.com/1206527
- https://www.suse.com/security/cve/CVE-2022-1050
- https://www.suse.com/security/cve/CVE-2022-3165
- https://www.suse.com/security/cve/CVE-2022-4144
- https://www.suse.com/support/update/announcement/2023/suse-su-20230671-1/