{"affected":[{"ecosystem_specific":{"binaries":[{"qemu-tools":"4.2.1-11.22.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","name":"qemu","purl":"purl:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.2.1-11.22.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"qemu":"4.2.1-11.22.1","qemu-arm":"4.2.1-11.22.1","qemu-audio-alsa":"4.2.1-11.22.1","qemu-audio-pa":"4.2.1-11.22.1","qemu-block-curl":"4.2.1-11.22.1","qemu-block-iscsi":"4.2.1-11.22.1","qemu-block-rbd":"4.2.1-11.22.1","qemu-block-ssh":"4.2.1-11.22.1","qemu-guest-agent":"4.2.1-11.22.1","qemu-ipxe":"1.0.0+-11.22.1","qemu-kvm":"4.2.1-11.22.1","qemu-lang":"4.2.1-11.22.1","qemu-microvm":"4.2.1-11.22.1","qemu-ppc":"4.2.1-11.22.1","qemu-s390":"4.2.1-11.22.1","qemu-seabios":"1.12.1+-11.22.1","qemu-sgabios":"8-11.22.1","qemu-ui-curses":"4.2.1-11.22.1","qemu-ui-gtk":"4.2.1-11.22.1","qemu-ui-spice-app":"4.2.1-11.22.1","qemu-vgabios":"1.12.1+-11.22.1","qemu-x86":"4.2.1-11.22.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","name":"qemu","purl":"purl:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.2.1-11.22.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"qemu":"4.2.1-11.22.1","qemu-arm":"4.2.1-11.22.1","qemu-ipxe":"1.0.0+-11.22.1","qemu-seabios":"1.12.1+-11.22.1","qemu-sgabios":"8-11.22.1","qemu-tools":"4.2.1-11.22.1","qemu-vgabios":"1.12.1+-11.22.1","qemu-x86":"4.2.1-11.22.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","name":"qemu","purl":"purl:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Micro%205.0"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.2.1-11.22.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for qemu fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-3546: Fix out-of-bounds write in virgl_cmd_get_capset (bsc#1185981)\n- CVE-2021-3544: Fix memory leaks found in the virtio vhost-user GPU device (bsc#1186010)\n- CVE-2021-3545: Fix information disclosure due to uninitialized memory read (bsc#1185990)\n\nNon-security issues fixed:\n\n- Fix testsuite error (bsc#1184574)\n- Fix qemu crash with iothread when block commit after snapshot (bsc#1187013)\n- Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)\n- Use RCU to avoid race during scsi hotplug/hotunplug (bsc#1184574)\n","id":"SUSE-SU-2021:2212-1","modified":"2021-06-30T13:59:10Z","published":"2021-06-30T13:59:10Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2021/suse-su-20212212-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1184574"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185591"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185981"},{"type":"REPORT","url":"https://bugzilla.suse.com/1185990"},{"type":"REPORT","url":"https://bugzilla.suse.com/1186010"},{"type":"REPORT","url":"https://bugzilla.suse.com/1187013"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-3544"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-3545"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-3546"}],"related":["CVE-2021-3544","CVE-2021-3545","CVE-2021-3546"],"summary":"Security update for qemu"}