Security update for qemu SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2021:2442-1 Final 1 1 2021-07-21T12:01:33Z current 2021-07-21T12:01:33Z 2021-07-21T12:01:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499) - CVE-2021-3607: Ensure correct input on ring init (bsc#1187539) - CVE-2021-3608: Fix the ring init error flow (bsc#1187538) - CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-SLE-15.3-2021-2442 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ER233YMIXQ2HKJ4RY4ISGXE5VKXBEVPA/ E-Mail link for openSUSE-SU-2021:2442-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1187499 SUSE Bug 1187499 https://bugzilla.suse.com/1187529 SUSE Bug 1187529 https://bugzilla.suse.com/1187538 SUSE Bug 1187538 https://bugzilla.suse.com/1187539 SUSE Bug 1187539 https://www.suse.com/security/cve/CVE-2021-3582/ SUSE CVE CVE-2021-3582 page https://www.suse.com/security/cve/CVE-2021-3607/ SUSE CVE CVE-2021-3607 page https://www.suse.com/security/cve/CVE-2021-3608/ SUSE CVE CVE-2021-3608 page https://www.suse.com/security/cve/CVE-2021-3611/ SUSE CVE CVE-2021-3611 page openSUSE Leap 15.3 qemu-5.2.0-23.1 qemu-arm-5.2.0-23.1 qemu-audio-alsa-5.2.0-23.1 qemu-audio-pa-5.2.0-23.1 qemu-audio-spice-5.2.0-23.1 qemu-block-curl-5.2.0-23.1 qemu-block-dmg-5.2.0-23.1 qemu-block-gluster-5.2.0-23.1 qemu-block-iscsi-5.2.0-23.1 qemu-block-nfs-5.2.0-23.1 qemu-block-rbd-5.2.0-23.1 qemu-block-ssh-5.2.0-23.1 qemu-chardev-baum-5.2.0-23.1 qemu-chardev-spice-5.2.0-23.1 qemu-extra-5.2.0-23.1 qemu-guest-agent-5.2.0-23.1 qemu-hw-display-qxl-5.2.0-23.1 qemu-hw-display-virtio-gpu-5.2.0-23.1 qemu-hw-display-virtio-gpu-pci-5.2.0-23.1 qemu-hw-display-virtio-vga-5.2.0-23.1 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-23.1 qemu-hw-usb-redirect-5.2.0-23.1 qemu-hw-usb-smartcard-5.2.0-23.1 qemu-ipxe-1.0.0+-23.1 qemu-ivshmem-tools-5.2.0-23.1 qemu-ksm-5.2.0-23.1 qemu-kvm-5.2.0-23.1 qemu-lang-5.2.0-23.1 qemu-microvm-5.2.0-23.1 qemu-ppc-5.2.0-23.1 qemu-s390x-5.2.0-23.1 qemu-seabios-1.14.0_0_g155821a-23.1 qemu-sgabios-8-23.1 qemu-skiboot-5.2.0-23.1 qemu-tools-5.2.0-23.1 qemu-ui-curses-5.2.0-23.1 qemu-ui-gtk-5.2.0-23.1 qemu-ui-opengl-5.2.0-23.1 qemu-ui-spice-app-5.2.0-23.1 qemu-ui-spice-core-5.2.0-23.1 qemu-vgabios-1.14.0_0_g155821a-23.1 qemu-vhost-user-gpu-5.2.0-23.1 qemu-x86-5.2.0-23.1 qemu-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-arm-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-audio-alsa-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-audio-pa-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-audio-spice-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-block-curl-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-block-dmg-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-block-gluster-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-block-iscsi-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-block-nfs-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-block-rbd-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-block-ssh-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-chardev-baum-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-chardev-spice-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-extra-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-guest-agent-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-hw-display-qxl-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-hw-display-virtio-gpu-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-hw-display-virtio-gpu-pci-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-hw-display-virtio-vga-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-hw-s390x-virtio-gpu-ccw-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-hw-usb-redirect-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-hw-usb-smartcard-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-ipxe-1.0.0+-23.1 as a component of openSUSE Leap 15.3 qemu-ivshmem-tools-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-ksm-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-kvm-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-lang-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-microvm-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-ppc-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-s390x-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-seabios-1.14.0_0_g155821a-23.1 as a component of openSUSE Leap 15.3 qemu-sgabios-8-23.1 as a component of openSUSE Leap 15.3 qemu-skiboot-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-tools-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-ui-curses-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-ui-gtk-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-ui-opengl-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-ui-spice-app-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-ui-spice-core-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-vgabios-1.14.0_0_g155821a-23.1 as a component of openSUSE Leap 15.3 qemu-vhost-user-gpu-5.2.0-23.1 as a component of openSUSE Leap 15.3 qemu-x86-5.2.0-23.1 as a component of openSUSE Leap 15.3 A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA_CMD_CREATE_MR" command due to improper memory remapping (mremap). This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this vulnerability is to system availability. CVE-2021-3582 openSUSE Leap 15.3:qemu-5.2.0-23.1 openSUSE Leap 15.3:qemu-arm-5.2.0-23.1 openSUSE Leap 15.3:qemu-audio-alsa-5.2.0-23.1 openSUSE Leap 15.3:qemu-audio-pa-5.2.0-23.1 openSUSE Leap 15.3:qemu-audio-spice-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-curl-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-dmg-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-gluster-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-iscsi-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-nfs-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-rbd-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-ssh-5.2.0-23.1 openSUSE Leap 15.3:qemu-chardev-baum-5.2.0-23.1 openSUSE Leap 15.3:qemu-chardev-spice-5.2.0-23.1 openSUSE Leap 15.3:qemu-extra-5.2.0-23.1 openSUSE Leap 15.3:qemu-guest-agent-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-qxl-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-pci-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-virtio-vga-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-usb-redirect-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-usb-smartcard-5.2.0-23.1 openSUSE Leap 15.3:qemu-ipxe-1.0.0+-23.1 openSUSE Leap 15.3:qemu-ivshmem-tools-5.2.0-23.1 openSUSE Leap 15.3:qemu-ksm-5.2.0-23.1 openSUSE Leap 15.3:qemu-kvm-5.2.0-23.1 openSUSE Leap 15.3:qemu-lang-5.2.0-23.1 openSUSE Leap 15.3:qemu-microvm-5.2.0-23.1 openSUSE Leap 15.3:qemu-ppc-5.2.0-23.1 openSUSE Leap 15.3:qemu-s390x-5.2.0-23.1 openSUSE Leap 15.3:qemu-seabios-1.14.0_0_g155821a-23.1 openSUSE Leap 15.3:qemu-sgabios-8-23.1 openSUSE Leap 15.3:qemu-skiboot-5.2.0-23.1 openSUSE Leap 15.3:qemu-tools-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-curses-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-gtk-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-opengl-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-spice-app-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-spice-core-5.2.0-23.1 openSUSE Leap 15.3:qemu-vgabios-1.14.0_0_g155821a-23.1 openSUSE Leap 15.3:qemu-vhost-user-gpu-5.2.0-23.1 openSUSE Leap 15.3:qemu-x86-5.2.0-23.1 low 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ER233YMIXQ2HKJ4RY4ISGXE5VKXBEVPA/ https://www.suse.com/security/cve/CVE-2021-3582.html CVE-2021-3582 https://bugzilla.suse.com/1187499 SUSE Bug 1187499 An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability. CVE-2021-3607 openSUSE Leap 15.3:qemu-5.2.0-23.1 openSUSE Leap 15.3:qemu-arm-5.2.0-23.1 openSUSE Leap 15.3:qemu-audio-alsa-5.2.0-23.1 openSUSE Leap 15.3:qemu-audio-pa-5.2.0-23.1 openSUSE Leap 15.3:qemu-audio-spice-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-curl-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-dmg-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-gluster-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-iscsi-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-nfs-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-rbd-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-ssh-5.2.0-23.1 openSUSE Leap 15.3:qemu-chardev-baum-5.2.0-23.1 openSUSE Leap 15.3:qemu-chardev-spice-5.2.0-23.1 openSUSE Leap 15.3:qemu-extra-5.2.0-23.1 openSUSE Leap 15.3:qemu-guest-agent-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-qxl-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-pci-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-virtio-vga-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-usb-redirect-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-usb-smartcard-5.2.0-23.1 openSUSE Leap 15.3:qemu-ipxe-1.0.0+-23.1 openSUSE Leap 15.3:qemu-ivshmem-tools-5.2.0-23.1 openSUSE Leap 15.3:qemu-ksm-5.2.0-23.1 openSUSE Leap 15.3:qemu-kvm-5.2.0-23.1 openSUSE Leap 15.3:qemu-lang-5.2.0-23.1 openSUSE Leap 15.3:qemu-microvm-5.2.0-23.1 openSUSE Leap 15.3:qemu-ppc-5.2.0-23.1 openSUSE Leap 15.3:qemu-s390x-5.2.0-23.1 openSUSE Leap 15.3:qemu-seabios-1.14.0_0_g155821a-23.1 openSUSE Leap 15.3:qemu-sgabios-8-23.1 openSUSE Leap 15.3:qemu-skiboot-5.2.0-23.1 openSUSE Leap 15.3:qemu-tools-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-curses-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-gtk-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-opengl-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-spice-app-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-spice-core-5.2.0-23.1 openSUSE Leap 15.3:qemu-vgabios-1.14.0_0_g155821a-23.1 openSUSE Leap 15.3:qemu-vhost-user-gpu-5.2.0-23.1 openSUSE Leap 15.3:qemu-x86-5.2.0-23.1 low 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ER233YMIXQ2HKJ4RY4ISGXE5VKXBEVPA/ https://www.suse.com/security/cve/CVE-2021-3607.html CVE-2021-3607 https://bugzilla.suse.com/1187539 SUSE Bug 1187539 A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The highest threat from this vulnerability is to system availability. CVE-2021-3608 openSUSE Leap 15.3:qemu-5.2.0-23.1 openSUSE Leap 15.3:qemu-arm-5.2.0-23.1 openSUSE Leap 15.3:qemu-audio-alsa-5.2.0-23.1 openSUSE Leap 15.3:qemu-audio-pa-5.2.0-23.1 openSUSE Leap 15.3:qemu-audio-spice-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-curl-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-dmg-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-gluster-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-iscsi-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-nfs-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-rbd-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-ssh-5.2.0-23.1 openSUSE Leap 15.3:qemu-chardev-baum-5.2.0-23.1 openSUSE Leap 15.3:qemu-chardev-spice-5.2.0-23.1 openSUSE Leap 15.3:qemu-extra-5.2.0-23.1 openSUSE Leap 15.3:qemu-guest-agent-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-qxl-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-pci-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-virtio-vga-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-usb-redirect-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-usb-smartcard-5.2.0-23.1 openSUSE Leap 15.3:qemu-ipxe-1.0.0+-23.1 openSUSE Leap 15.3:qemu-ivshmem-tools-5.2.0-23.1 openSUSE Leap 15.3:qemu-ksm-5.2.0-23.1 openSUSE Leap 15.3:qemu-kvm-5.2.0-23.1 openSUSE Leap 15.3:qemu-lang-5.2.0-23.1 openSUSE Leap 15.3:qemu-microvm-5.2.0-23.1 openSUSE Leap 15.3:qemu-ppc-5.2.0-23.1 openSUSE Leap 15.3:qemu-s390x-5.2.0-23.1 openSUSE Leap 15.3:qemu-seabios-1.14.0_0_g155821a-23.1 openSUSE Leap 15.3:qemu-sgabios-8-23.1 openSUSE Leap 15.3:qemu-skiboot-5.2.0-23.1 openSUSE Leap 15.3:qemu-tools-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-curses-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-gtk-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-opengl-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-spice-app-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-spice-core-5.2.0-23.1 openSUSE Leap 15.3:qemu-vgabios-1.14.0_0_g155821a-23.1 openSUSE Leap 15.3:qemu-vhost-user-gpu-5.2.0-23.1 openSUSE Leap 15.3:qemu-x86-5.2.0-23.1 low 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ER233YMIXQ2HKJ4RY4ISGXE5VKXBEVPA/ https://www.suse.com/security/cve/CVE-2021-3608.html CVE-2021-3608 https://bugzilla.suse.com/1187538 SUSE Bug 1187538 A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0. CVE-2021-3611 openSUSE Leap 15.3:qemu-5.2.0-23.1 openSUSE Leap 15.3:qemu-arm-5.2.0-23.1 openSUSE Leap 15.3:qemu-audio-alsa-5.2.0-23.1 openSUSE Leap 15.3:qemu-audio-pa-5.2.0-23.1 openSUSE Leap 15.3:qemu-audio-spice-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-curl-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-dmg-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-gluster-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-iscsi-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-nfs-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-rbd-5.2.0-23.1 openSUSE Leap 15.3:qemu-block-ssh-5.2.0-23.1 openSUSE Leap 15.3:qemu-chardev-baum-5.2.0-23.1 openSUSE Leap 15.3:qemu-chardev-spice-5.2.0-23.1 openSUSE Leap 15.3:qemu-extra-5.2.0-23.1 openSUSE Leap 15.3:qemu-guest-agent-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-qxl-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-virtio-gpu-pci-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-display-virtio-vga-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-s390x-virtio-gpu-ccw-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-usb-redirect-5.2.0-23.1 openSUSE Leap 15.3:qemu-hw-usb-smartcard-5.2.0-23.1 openSUSE Leap 15.3:qemu-ipxe-1.0.0+-23.1 openSUSE Leap 15.3:qemu-ivshmem-tools-5.2.0-23.1 openSUSE Leap 15.3:qemu-ksm-5.2.0-23.1 openSUSE Leap 15.3:qemu-kvm-5.2.0-23.1 openSUSE Leap 15.3:qemu-lang-5.2.0-23.1 openSUSE Leap 15.3:qemu-microvm-5.2.0-23.1 openSUSE Leap 15.3:qemu-ppc-5.2.0-23.1 openSUSE Leap 15.3:qemu-s390x-5.2.0-23.1 openSUSE Leap 15.3:qemu-seabios-1.14.0_0_g155821a-23.1 openSUSE Leap 15.3:qemu-sgabios-8-23.1 openSUSE Leap 15.3:qemu-skiboot-5.2.0-23.1 openSUSE Leap 15.3:qemu-tools-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-curses-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-gtk-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-opengl-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-spice-app-5.2.0-23.1 openSUSE Leap 15.3:qemu-ui-spice-core-5.2.0-23.1 openSUSE Leap 15.3:qemu-vgabios-1.14.0_0_g155821a-23.1 openSUSE Leap 15.3:qemu-vhost-user-gpu-5.2.0-23.1 openSUSE Leap 15.3:qemu-x86-5.2.0-23.1 moderate 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ER233YMIXQ2HKJ4RY4ISGXE5VKXBEVPA/ https://www.suse.com/security/cve/CVE-2021-3611.html CVE-2021-3611 https://bugzilla.suse.com/1187529 SUSE Bug 1187529 https://bugzilla.suse.com/1193914 SUSE Bug 1193914