Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:0432-1 Final 1 1 2025-02-11T14:14:11Z current 2025-02-11T14:14:11Z 2025-02-11T14:14:11Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - CVE-2021-3611: Fixed segmentation fault due to stack overflow (bsc#1193914). Other fixes: - qemu.spec: mark bridge.conf as noreplace (bsc#1201944). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro-rancher/5.3:latest-2025-432,Container suse/sle-micro-rancher/5.4:latest-2025-432,SUSE-2025-432,SUSE-SLE-Micro-5.3-2025-432,SUSE-SLE-Micro-5.4-2025-432 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20250432-1/ Link for SUSE-SU-2025:0432-1 https://lists.suse.com/pipermail/sle-security-updates/2025-February/020313.html E-Mail link for SUSE-SU-2025:0432-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1193914 SUSE Bug 1193914 https://bugzilla.suse.com/1201944 SUSE Bug 1201944 https://www.suse.com/security/cve/CVE-2021-3611/ SUSE CVE CVE-2021-3611 page Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 qemu-guest-agent-6.2.0-150400.37.40.1 qemu-6.2.0-150400.37.40.1 qemu-SLOF-6.2.0-150400.37.40.1 qemu-accel-qtest-6.2.0-150400.37.40.1 qemu-accel-tcg-x86-6.2.0-150400.37.40.1 qemu-arm-6.2.0-150400.37.40.1 qemu-audio-alsa-6.2.0-150400.37.40.1 qemu-audio-jack-6.2.0-150400.37.40.1 qemu-audio-oss-6.2.0-150400.37.40.1 qemu-audio-pa-6.2.0-150400.37.40.1 qemu-audio-spice-6.2.0-150400.37.40.1 qemu-block-curl-6.2.0-150400.37.40.1 qemu-block-dmg-6.2.0-150400.37.40.1 qemu-block-gluster-6.2.0-150400.37.40.1 qemu-block-iscsi-6.2.0-150400.37.40.1 qemu-block-nfs-6.2.0-150400.37.40.1 qemu-block-rbd-6.2.0-150400.37.40.1 qemu-block-ssh-6.2.0-150400.37.40.1 qemu-chardev-baum-6.2.0-150400.37.40.1 qemu-chardev-spice-6.2.0-150400.37.40.1 qemu-extra-6.2.0-150400.37.40.1 qemu-hw-display-qxl-6.2.0-150400.37.40.1 qemu-hw-display-virtio-gpu-6.2.0-150400.37.40.1 qemu-hw-display-virtio-gpu-pci-6.2.0-150400.37.40.1 qemu-hw-display-virtio-vga-6.2.0-150400.37.40.1 qemu-hw-s390x-virtio-gpu-ccw-6.2.0-150400.37.40.1 qemu-hw-usb-host-6.2.0-150400.37.40.1 qemu-hw-usb-redirect-6.2.0-150400.37.40.1 qemu-hw-usb-smartcard-6.2.0-150400.37.40.1 qemu-ipxe-1.0.0+-150400.37.40.1 qemu-ivshmem-tools-6.2.0-150400.37.40.1 qemu-ksm-6.2.0-150400.37.40.1 qemu-kvm-6.2.0-150400.37.40.1 qemu-lang-6.2.0-150400.37.40.1 qemu-linux-user-6.2.0-150400.37.40.1 qemu-microvm-6.2.0-150400.37.40.1 qemu-ppc-6.2.0-150400.37.40.1 qemu-s390x-6.2.0-150400.37.40.1 qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.40.1 qemu-sgabios-8-150400.37.40.1 qemu-skiboot-6.2.0-150400.37.40.1 qemu-tools-6.2.0-150400.37.40.1 qemu-ui-curses-6.2.0-150400.37.40.1 qemu-ui-gtk-6.2.0-150400.37.40.1 qemu-ui-opengl-6.2.0-150400.37.40.1 qemu-ui-spice-app-6.2.0-150400.37.40.1 qemu-ui-spice-core-6.2.0-150400.37.40.1 qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.40.1 qemu-vhost-user-gpu-6.2.0-150400.37.40.1 qemu-x86-6.2.0-150400.37.40.1 qemu-guest-agent-6.2.0-150400.37.40.1 as a component of Container suse/sle-micro-rancher/5.3:latest qemu-guest-agent-6.2.0-150400.37.40.1 as a component of Container suse/sle-micro-rancher/5.4:latest qemu-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-accel-tcg-x86-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-arm-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-audio-spice-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-chardev-spice-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-guest-agent-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-hw-display-qxl-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-hw-display-virtio-gpu-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-hw-display-virtio-vga-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-hw-usb-redirect-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-ipxe-1.0.0+-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-s390x-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-sgabios-8-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-tools-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-ui-opengl-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-ui-spice-core-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-x86-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.3 qemu-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-accel-tcg-x86-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-arm-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-audio-spice-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-chardev-spice-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-guest-agent-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-hw-display-qxl-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-hw-display-virtio-gpu-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-hw-display-virtio-vga-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-hw-usb-redirect-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-ipxe-1.0.0+-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-s390x-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-sgabios-8-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-tools-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-ui-opengl-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-ui-spice-core-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 qemu-x86-6.2.0-150400.37.40.1 as a component of SUSE Linux Enterprise Micro 5.4 A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0. CVE-2021-3611 Container suse/sle-micro-rancher/5.3:latest:qemu-guest-agent-6.2.0-150400.37.40.1 Container suse/sle-micro-rancher/5.4:latest:qemu-guest-agent-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-accel-tcg-x86-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-arm-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-audio-spice-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-chardev-spice-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-guest-agent-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-hw-display-qxl-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-hw-display-virtio-gpu-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-hw-display-virtio-vga-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-hw-usb-redirect-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-ipxe-1.0.0+-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-s390x-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-sgabios-8-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-tools-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-ui-opengl-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-ui-spice-core-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.40.1 SUSE Linux Enterprise Micro 5.3:qemu-x86-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-accel-tcg-x86-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-arm-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-audio-spice-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-chardev-spice-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-guest-agent-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-hw-display-qxl-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-hw-display-virtio-gpu-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-hw-display-virtio-vga-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-hw-usb-redirect-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-ipxe-1.0.0+-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-s390x-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-sgabios-8-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-tools-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-ui-opengl-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-ui-spice-core-6.2.0-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.40.1 SUSE Linux Enterprise Micro 5.4:qemu-x86-6.2.0-150400.37.40.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250432-1/ https://www.suse.com/security/cve/CVE-2021-3611.html CVE-2021-3611 https://bugzilla.suse.com/1187529 SUSE Bug 1187529 https://bugzilla.suse.com/1193914 SUSE Bug 1193914