qemu-7.1.0-10.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:12685 Final 1 1 2024-06-17T21:45:33Z current 2024-06-17T21:45:33Z 2024-06-17T21:45:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z qemu-7.1.0-10.1 on GA media These are all security issues fixed in the qemu-7.1.0-10.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-12685 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) E-Mail link for openSUSE-SU-2024:12685 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2022-4144/ SUSE CVE CVE-2022-4144 page https://www.suse.com/security/cve/CVE-2022-4172/ SUSE CVE CVE-2022-4172 page openSUSE Tumbleweed qemu-7.1.0-10.1 qemu-SLOF-7.1.0-10.1 qemu-accel-qtest-7.1.0-10.1 qemu-accel-tcg-x86-7.1.0-10.1 qemu-arm-7.1.0-10.1 qemu-audio-alsa-7.1.0-10.1 qemu-audio-dbus-7.1.0-10.1 qemu-audio-jack-7.1.0-10.1 qemu-audio-oss-7.1.0-10.1 qemu-audio-pa-7.1.0-10.1 qemu-audio-spice-7.1.0-10.1 qemu-block-curl-7.1.0-10.1 qemu-block-dmg-7.1.0-10.1 qemu-block-gluster-7.1.0-10.1 qemu-block-iscsi-7.1.0-10.1 qemu-block-nfs-7.1.0-10.1 qemu-block-rbd-7.1.0-10.1 qemu-block-ssh-7.1.0-10.1 qemu-chardev-baum-7.1.0-10.1 qemu-chardev-spice-7.1.0-10.1 qemu-extra-7.1.0-10.1 qemu-guest-agent-7.1.0-10.1 qemu-hw-display-qxl-7.1.0-10.1 qemu-hw-display-virtio-gpu-7.1.0-10.1 qemu-hw-display-virtio-gpu-pci-7.1.0-10.1 qemu-hw-display-virtio-vga-7.1.0-10.1 qemu-hw-s390x-virtio-gpu-ccw-7.1.0-10.1 qemu-hw-usb-host-7.1.0-10.1 qemu-hw-usb-redirect-7.1.0-10.1 qemu-hw-usb-smartcard-7.1.0-10.1 qemu-ipxe-1.0.0+-10.1 qemu-ivshmem-tools-7.1.0-10.1 qemu-ksm-7.1.0-10.1 qemu-kvm-7.1.0-10.1 qemu-lang-7.1.0-10.1 qemu-microvm-7.1.0-10.1 qemu-ppc-7.1.0-10.1 qemu-s390x-7.1.0-10.1 qemu-seabios-1.16.0_0_gd239552-10.1 qemu-sgabios-8-10.1 qemu-skiboot-7.1.0-10.1 qemu-tools-7.1.0-10.1 qemu-ui-curses-7.1.0-10.1 qemu-ui-dbus-7.1.0-10.1 qemu-ui-gtk-7.1.0-10.1 qemu-ui-opengl-7.1.0-10.1 qemu-ui-spice-app-7.1.0-10.1 qemu-ui-spice-core-7.1.0-10.1 qemu-vgabios-1.16.0_0_gd239552-10.1 qemu-vhost-user-gpu-7.1.0-10.1 qemu-x86-7.1.0-10.1 qemu-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-SLOF-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-accel-qtest-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-accel-tcg-x86-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-arm-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-audio-alsa-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-audio-dbus-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-audio-jack-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-audio-oss-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-audio-pa-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-audio-spice-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-block-curl-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-block-dmg-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-block-gluster-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-block-iscsi-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-block-nfs-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-block-rbd-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-block-ssh-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-chardev-baum-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-chardev-spice-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-extra-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-guest-agent-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-hw-display-qxl-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-gpu-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-gpu-pci-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-vga-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-hw-s390x-virtio-gpu-ccw-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-hw-usb-host-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-hw-usb-redirect-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-hw-usb-smartcard-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-ipxe-1.0.0+-10.1 as a component of openSUSE Tumbleweed qemu-ivshmem-tools-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-ksm-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-kvm-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-lang-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-microvm-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-ppc-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-s390x-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-seabios-1.16.0_0_gd239552-10.1 as a component of openSUSE Tumbleweed qemu-sgabios-8-10.1 as a component of openSUSE Tumbleweed qemu-skiboot-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-tools-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-ui-curses-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-ui-dbus-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-ui-gtk-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-ui-opengl-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-ui-spice-app-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-ui-spice-core-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-vgabios-1.16.0_0_gd239552-10.1 as a component of openSUSE Tumbleweed qemu-vhost-user-gpu-7.1.0-10.1 as a component of openSUSE Tumbleweed qemu-x86-7.1.0-10.1 as a component of openSUSE Tumbleweed An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use this flaw to crash the QEMU process on the host causing a denial of service condition. CVE-2022-4144 openSUSE Tumbleweed:qemu-7.1.0-10.1 openSUSE Tumbleweed:qemu-SLOF-7.1.0-10.1 openSUSE Tumbleweed:qemu-accel-qtest-7.1.0-10.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-7.1.0-10.1 openSUSE Tumbleweed:qemu-arm-7.1.0-10.1 openSUSE Tumbleweed:qemu-audio-alsa-7.1.0-10.1 openSUSE Tumbleweed:qemu-audio-dbus-7.1.0-10.1 openSUSE Tumbleweed:qemu-audio-jack-7.1.0-10.1 openSUSE Tumbleweed:qemu-audio-oss-7.1.0-10.1 openSUSE Tumbleweed:qemu-audio-pa-7.1.0-10.1 openSUSE Tumbleweed:qemu-audio-spice-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-curl-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-dmg-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-gluster-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-iscsi-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-nfs-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-rbd-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-ssh-7.1.0-10.1 openSUSE Tumbleweed:qemu-chardev-baum-7.1.0-10.1 openSUSE Tumbleweed:qemu-chardev-spice-7.1.0-10.1 openSUSE Tumbleweed:qemu-extra-7.1.0-10.1 openSUSE Tumbleweed:qemu-guest-agent-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-display-qxl-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-usb-host-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-7.1.0-10.1 openSUSE Tumbleweed:qemu-ipxe-1.0.0+-10.1 openSUSE Tumbleweed:qemu-ivshmem-tools-7.1.0-10.1 openSUSE Tumbleweed:qemu-ksm-7.1.0-10.1 openSUSE Tumbleweed:qemu-kvm-7.1.0-10.1 openSUSE Tumbleweed:qemu-lang-7.1.0-10.1 openSUSE Tumbleweed:qemu-microvm-7.1.0-10.1 openSUSE Tumbleweed:qemu-ppc-7.1.0-10.1 openSUSE Tumbleweed:qemu-s390x-7.1.0-10.1 openSUSE Tumbleweed:qemu-seabios-1.16.0_0_gd239552-10.1 openSUSE Tumbleweed:qemu-sgabios-8-10.1 openSUSE Tumbleweed:qemu-skiboot-7.1.0-10.1 openSUSE Tumbleweed:qemu-tools-7.1.0-10.1 openSUSE Tumbleweed:qemu-ui-curses-7.1.0-10.1 openSUSE Tumbleweed:qemu-ui-dbus-7.1.0-10.1 openSUSE Tumbleweed:qemu-ui-gtk-7.1.0-10.1 openSUSE Tumbleweed:qemu-ui-opengl-7.1.0-10.1 openSUSE Tumbleweed:qemu-ui-spice-app-7.1.0-10.1 openSUSE Tumbleweed:qemu-ui-spice-core-7.1.0-10.1 openSUSE Tumbleweed:qemu-vgabios-1.16.0_0_gd239552-10.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-7.1.0-10.1 openSUSE Tumbleweed:qemu-x86-7.1.0-10.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-4144.html CVE-2022-4144 https://bugzilla.suse.com/1205808 SUSE Bug 1205808 An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host. CVE-2022-4172 openSUSE Tumbleweed:qemu-7.1.0-10.1 openSUSE Tumbleweed:qemu-SLOF-7.1.0-10.1 openSUSE Tumbleweed:qemu-accel-qtest-7.1.0-10.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-7.1.0-10.1 openSUSE Tumbleweed:qemu-arm-7.1.0-10.1 openSUSE Tumbleweed:qemu-audio-alsa-7.1.0-10.1 openSUSE Tumbleweed:qemu-audio-dbus-7.1.0-10.1 openSUSE Tumbleweed:qemu-audio-jack-7.1.0-10.1 openSUSE Tumbleweed:qemu-audio-oss-7.1.0-10.1 openSUSE Tumbleweed:qemu-audio-pa-7.1.0-10.1 openSUSE Tumbleweed:qemu-audio-spice-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-curl-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-dmg-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-gluster-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-iscsi-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-nfs-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-rbd-7.1.0-10.1 openSUSE Tumbleweed:qemu-block-ssh-7.1.0-10.1 openSUSE Tumbleweed:qemu-chardev-baum-7.1.0-10.1 openSUSE Tumbleweed:qemu-chardev-spice-7.1.0-10.1 openSUSE Tumbleweed:qemu-extra-7.1.0-10.1 openSUSE Tumbleweed:qemu-guest-agent-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-display-qxl-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-usb-host-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-7.1.0-10.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-7.1.0-10.1 openSUSE Tumbleweed:qemu-ipxe-1.0.0+-10.1 openSUSE Tumbleweed:qemu-ivshmem-tools-7.1.0-10.1 openSUSE Tumbleweed:qemu-ksm-7.1.0-10.1 openSUSE Tumbleweed:qemu-kvm-7.1.0-10.1 openSUSE Tumbleweed:qemu-lang-7.1.0-10.1 openSUSE Tumbleweed:qemu-microvm-7.1.0-10.1 openSUSE Tumbleweed:qemu-ppc-7.1.0-10.1 openSUSE Tumbleweed:qemu-s390x-7.1.0-10.1 openSUSE Tumbleweed:qemu-seabios-1.16.0_0_gd239552-10.1 openSUSE Tumbleweed:qemu-sgabios-8-10.1 openSUSE Tumbleweed:qemu-skiboot-7.1.0-10.1 openSUSE Tumbleweed:qemu-tools-7.1.0-10.1 openSUSE Tumbleweed:qemu-ui-curses-7.1.0-10.1 openSUSE Tumbleweed:qemu-ui-dbus-7.1.0-10.1 openSUSE Tumbleweed:qemu-ui-gtk-7.1.0-10.1 openSUSE Tumbleweed:qemu-ui-opengl-7.1.0-10.1 openSUSE Tumbleweed:qemu-ui-spice-app-7.1.0-10.1 openSUSE Tumbleweed:qemu-ui-spice-core-7.1.0-10.1 openSUSE Tumbleweed:qemu-vgabios-1.16.0_0_gd239552-10.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-7.1.0-10.1 openSUSE Tumbleweed:qemu-x86-7.1.0-10.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2022-4172.html CVE-2022-4172 https://bugzilla.suse.com/1205847 SUSE Bug 1205847