suse-su-2020:2015-1
Vulnerability from csaf_suse
Published
2020-07-23 07:21
Modified
2020-07-23 07:21
Summary
Security update for qemu
Notes
Title of the patch
Security update for qemu
Description of the patch
This update for qemu to version 4.2.1 fixes the following issues:
- CVE-2020-10761: Fixed a denial of service in Network Block Device (nbd) support infrastructure (bsc#1172710).
- CVE-2020-13800: Fixed a denial of service possibility in ati-vga emulation (bsc#1172495).
- CVE-2020-13659: Fixed a null pointer dereference possibility in MegaRAID SAS 8708EM2 emulation (bsc#1172386).
- CVE-2020-13362: Fixed an OOB access possibility in MegaRAID SAS 8708EM2 emulation (bsc#1172383).
- CVE-2020-13361: Fixed an OOB access possibility in ES1370 audio device emulation (bsc#1172384).
Patchnames
SUSE-2020-2015,SUSE-SLE-Module-Basesystem-15-SP2-2020-2015,SUSE-SLE-Module-Server-Applications-15-SP2-2020-2015
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for qemu", "title": "Title of the patch" }, { "category": "description", "text": "This update for qemu to version 4.2.1 fixes the following issues:\n\n- CVE-2020-10761: Fixed a denial of service in Network Block Device (nbd) support infrastructure (bsc#1172710).\n- CVE-2020-13800: Fixed a denial of service possibility in ati-vga emulation (bsc#1172495).\n- CVE-2020-13659: Fixed a null pointer dereference possibility in MegaRAID SAS 8708EM2 emulation (bsc#1172386).\n- CVE-2020-13362: Fixed an OOB access possibility in MegaRAID SAS 8708EM2 emulation (bsc#1172383).\n- CVE-2020-13361: Fixed an OOB access possibility in ES1370 audio device emulation (bsc#1172384).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2020-2015,SUSE-SLE-Module-Basesystem-15-SP2-2020-2015,SUSE-SLE-Module-Server-Applications-15-SP2-2020-2015", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2015-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2020:2015-1", "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20202015-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2020:2015-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-July/007171.html" }, { "category": "self", "summary": "SUSE Bug 1172383", "url": "https://bugzilla.suse.com/1172383" }, { "category": "self", "summary": "SUSE Bug 1172384", "url": "https://bugzilla.suse.com/1172384" }, { "category": "self", "summary": "SUSE Bug 1172386", "url": "https://bugzilla.suse.com/1172386" }, { "category": "self", "summary": "SUSE Bug 1172495", "url": "https://bugzilla.suse.com/1172495" }, { "category": "self", "summary": "SUSE Bug 1172710", "url": "https://bugzilla.suse.com/1172710" }, { "category": "self", "summary": "SUSE CVE CVE-2020-10761 page", "url": "https://www.suse.com/security/cve/CVE-2020-10761/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-13361 page", "url": "https://www.suse.com/security/cve/CVE-2020-13361/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-13362 page", "url": "https://www.suse.com/security/cve/CVE-2020-13362/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-13659 page", "url": "https://www.suse.com/security/cve/CVE-2020-13659/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-13800 page", "url": "https://www.suse.com/security/cve/CVE-2020-13800/" } ], "title": "Security update for qemu", "tracking": { "current_release_date": "2020-07-23T07:21:35Z", "generator": { "date": "2020-07-23T07:21:35Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2020:2015-1", "initial_release_date": "2020-07-23T07:21:35Z", "revision_history": [ { "date": "2020-07-23T07:21:35Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "qemu-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-4.2.1-11.4.4.aarch64", "product_id": "qemu-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-arm-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-arm-4.2.1-11.4.4.aarch64", "product_id": "qemu-arm-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-audio-alsa-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-audio-alsa-4.2.1-11.4.4.aarch64", "product_id": "qemu-audio-alsa-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-audio-pa-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-audio-pa-4.2.1-11.4.4.aarch64", "product_id": "qemu-audio-pa-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-block-curl-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-block-curl-4.2.1-11.4.4.aarch64", "product_id": "qemu-block-curl-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-block-dmg-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-block-dmg-4.2.1-11.4.4.aarch64", "product_id": "qemu-block-dmg-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-block-iscsi-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-block-iscsi-4.2.1-11.4.4.aarch64", "product_id": "qemu-block-iscsi-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-block-rbd-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-block-rbd-4.2.1-11.4.4.aarch64", "product_id": "qemu-block-rbd-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-block-ssh-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-block-ssh-4.2.1-11.4.4.aarch64", "product_id": "qemu-block-ssh-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-extra-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-extra-4.2.1-11.4.4.aarch64", "product_id": "qemu-extra-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-guest-agent-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-guest-agent-4.2.1-11.4.4.aarch64", "product_id": "qemu-guest-agent-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-lang-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-lang-4.2.1-11.4.4.aarch64", "product_id": "qemu-lang-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-linux-user-4.2.1-11.4.1.aarch64", "product": { "name": "qemu-linux-user-4.2.1-11.4.1.aarch64", "product_id": "qemu-linux-user-4.2.1-11.4.1.aarch64" } }, { "category": "product_version", "name": "qemu-ppc-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-ppc-4.2.1-11.4.4.aarch64", "product_id": "qemu-ppc-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-s390-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-s390-4.2.1-11.4.4.aarch64", "product_id": "qemu-s390-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-testsuite-4.2.1-11.4.6.aarch64", "product": { "name": "qemu-testsuite-4.2.1-11.4.6.aarch64", "product_id": "qemu-testsuite-4.2.1-11.4.6.aarch64" } }, { "category": "product_version", "name": "qemu-tools-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-tools-4.2.1-11.4.4.aarch64", "product_id": "qemu-tools-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-ui-curses-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-ui-curses-4.2.1-11.4.4.aarch64", "product_id": "qemu-ui-curses-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-ui-gtk-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-ui-gtk-4.2.1-11.4.4.aarch64", "product_id": "qemu-ui-gtk-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "product_id": "qemu-ui-spice-app-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-vhost-user-gpu-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-vhost-user-gpu-4.2.1-11.4.4.aarch64", "product_id": "qemu-vhost-user-gpu-4.2.1-11.4.4.aarch64" } }, { "category": "product_version", "name": "qemu-x86-4.2.1-11.4.4.aarch64", "product": { "name": "qemu-x86-4.2.1-11.4.4.aarch64", "product_id": "qemu-x86-4.2.1-11.4.4.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "qemu-4.2.1-11.4.4.i586", "product": { "name": "qemu-4.2.1-11.4.4.i586", "product_id": "qemu-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-arm-4.2.1-11.4.4.i586", "product": { "name": "qemu-arm-4.2.1-11.4.4.i586", "product_id": "qemu-arm-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-audio-alsa-4.2.1-11.4.4.i586", "product": { "name": "qemu-audio-alsa-4.2.1-11.4.4.i586", "product_id": "qemu-audio-alsa-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-audio-pa-4.2.1-11.4.4.i586", "product": { "name": "qemu-audio-pa-4.2.1-11.4.4.i586", "product_id": "qemu-audio-pa-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-block-curl-4.2.1-11.4.4.i586", "product": { "name": "qemu-block-curl-4.2.1-11.4.4.i586", "product_id": "qemu-block-curl-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-block-dmg-4.2.1-11.4.4.i586", "product": { "name": "qemu-block-dmg-4.2.1-11.4.4.i586", "product_id": "qemu-block-dmg-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-block-iscsi-4.2.1-11.4.4.i586", "product": { "name": "qemu-block-iscsi-4.2.1-11.4.4.i586", "product_id": "qemu-block-iscsi-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-block-ssh-4.2.1-11.4.4.i586", "product": { "name": "qemu-block-ssh-4.2.1-11.4.4.i586", "product_id": "qemu-block-ssh-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-extra-4.2.1-11.4.4.i586", "product": { "name": "qemu-extra-4.2.1-11.4.4.i586", "product_id": "qemu-extra-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-guest-agent-4.2.1-11.4.4.i586", "product": { "name": "qemu-guest-agent-4.2.1-11.4.4.i586", "product_id": "qemu-guest-agent-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-kvm-4.2.1-11.4.4.i586", "product": { "name": "qemu-kvm-4.2.1-11.4.4.i586", "product_id": "qemu-kvm-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-lang-4.2.1-11.4.4.i586", "product": { "name": "qemu-lang-4.2.1-11.4.4.i586", "product_id": "qemu-lang-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-linux-user-4.2.1-11.4.1.i586", "product": { "name": "qemu-linux-user-4.2.1-11.4.1.i586", "product_id": "qemu-linux-user-4.2.1-11.4.1.i586" } }, { "category": "product_version", "name": "qemu-ppc-4.2.1-11.4.4.i586", "product": { "name": "qemu-ppc-4.2.1-11.4.4.i586", "product_id": "qemu-ppc-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-s390-4.2.1-11.4.4.i586", "product": { "name": "qemu-s390-4.2.1-11.4.4.i586", "product_id": "qemu-s390-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-testsuite-4.2.1-11.4.6.i586", "product": { "name": "qemu-testsuite-4.2.1-11.4.6.i586", "product_id": "qemu-testsuite-4.2.1-11.4.6.i586" } }, { "category": "product_version", "name": "qemu-tools-4.2.1-11.4.4.i586", "product": { "name": "qemu-tools-4.2.1-11.4.4.i586", "product_id": "qemu-tools-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-ui-curses-4.2.1-11.4.4.i586", "product": { "name": "qemu-ui-curses-4.2.1-11.4.4.i586", "product_id": "qemu-ui-curses-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-ui-gtk-4.2.1-11.4.4.i586", "product": { "name": "qemu-ui-gtk-4.2.1-11.4.4.i586", "product_id": "qemu-ui-gtk-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-ui-spice-app-4.2.1-11.4.4.i586", "product": { "name": "qemu-ui-spice-app-4.2.1-11.4.4.i586", "product_id": "qemu-ui-spice-app-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-vhost-user-gpu-4.2.1-11.4.4.i586", "product": { "name": "qemu-vhost-user-gpu-4.2.1-11.4.4.i586", "product_id": "qemu-vhost-user-gpu-4.2.1-11.4.4.i586" } }, { "category": "product_version", "name": "qemu-x86-4.2.1-11.4.4.i586", "product": { "name": "qemu-x86-4.2.1-11.4.4.i586", "product_id": "qemu-x86-4.2.1-11.4.4.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "qemu-ipxe-1.0.0+-11.4.4.noarch", "product": { "name": "qemu-ipxe-1.0.0+-11.4.4.noarch", "product_id": "qemu-ipxe-1.0.0+-11.4.4.noarch" } }, { "category": "product_version", "name": "qemu-microvm-4.2.1-11.4.4.noarch", "product": { "name": "qemu-microvm-4.2.1-11.4.4.noarch", "product_id": "qemu-microvm-4.2.1-11.4.4.noarch" } }, { "category": "product_version", "name": "qemu-seabios-1.12.1+-11.4.4.noarch", "product": { "name": "qemu-seabios-1.12.1+-11.4.4.noarch", "product_id": "qemu-seabios-1.12.1+-11.4.4.noarch" } }, { "category": "product_version", "name": "qemu-sgabios-8-11.4.4.noarch", "product": { "name": "qemu-sgabios-8-11.4.4.noarch", "product_id": "qemu-sgabios-8-11.4.4.noarch" } }, { "category": "product_version", "name": "qemu-vgabios-1.12.1+-11.4.4.noarch", "product": { "name": "qemu-vgabios-1.12.1+-11.4.4.noarch", "product_id": "qemu-vgabios-1.12.1+-11.4.4.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "qemu-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-4.2.1-11.4.4.ppc64le", "product_id": "qemu-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-arm-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-arm-4.2.1-11.4.4.ppc64le", "product_id": "qemu-arm-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-audio-alsa-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-audio-alsa-4.2.1-11.4.4.ppc64le", "product_id": "qemu-audio-alsa-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-audio-pa-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-audio-pa-4.2.1-11.4.4.ppc64le", "product_id": "qemu-audio-pa-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-block-curl-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-block-curl-4.2.1-11.4.4.ppc64le", "product_id": "qemu-block-curl-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-block-dmg-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-block-dmg-4.2.1-11.4.4.ppc64le", "product_id": "qemu-block-dmg-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "product_id": "qemu-block-iscsi-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-block-rbd-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-block-rbd-4.2.1-11.4.4.ppc64le", "product_id": "qemu-block-rbd-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-block-ssh-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-block-ssh-4.2.1-11.4.4.ppc64le", "product_id": "qemu-block-ssh-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-extra-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-extra-4.2.1-11.4.4.ppc64le", "product_id": "qemu-extra-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-guest-agent-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-guest-agent-4.2.1-11.4.4.ppc64le", "product_id": "qemu-guest-agent-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-lang-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-lang-4.2.1-11.4.4.ppc64le", "product_id": "qemu-lang-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-linux-user-4.2.1-11.4.1.ppc64le", "product": { "name": "qemu-linux-user-4.2.1-11.4.1.ppc64le", "product_id": "qemu-linux-user-4.2.1-11.4.1.ppc64le" } }, { "category": "product_version", "name": "qemu-ppc-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-ppc-4.2.1-11.4.4.ppc64le", "product_id": "qemu-ppc-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-s390-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-s390-4.2.1-11.4.4.ppc64le", "product_id": "qemu-s390-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-testsuite-4.2.1-11.4.6.ppc64le", "product": { "name": "qemu-testsuite-4.2.1-11.4.6.ppc64le", "product_id": "qemu-testsuite-4.2.1-11.4.6.ppc64le" } }, { "category": "product_version", "name": "qemu-tools-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-tools-4.2.1-11.4.4.ppc64le", "product_id": "qemu-tools-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-ui-curses-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-ui-curses-4.2.1-11.4.4.ppc64le", "product_id": "qemu-ui-curses-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-ui-gtk-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-ui-gtk-4.2.1-11.4.4.ppc64le", "product_id": "qemu-ui-gtk-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "product_id": "qemu-ui-spice-app-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-vhost-user-gpu-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-vhost-user-gpu-4.2.1-11.4.4.ppc64le", "product_id": "qemu-vhost-user-gpu-4.2.1-11.4.4.ppc64le" } }, { "category": "product_version", "name": "qemu-x86-4.2.1-11.4.4.ppc64le", "product": { "name": "qemu-x86-4.2.1-11.4.4.ppc64le", "product_id": "qemu-x86-4.2.1-11.4.4.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "qemu-4.2.1-11.4.4.s390x", "product": { "name": "qemu-4.2.1-11.4.4.s390x", "product_id": "qemu-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-arm-4.2.1-11.4.4.s390x", "product": { "name": "qemu-arm-4.2.1-11.4.4.s390x", "product_id": "qemu-arm-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-audio-alsa-4.2.1-11.4.4.s390x", "product": { "name": "qemu-audio-alsa-4.2.1-11.4.4.s390x", "product_id": "qemu-audio-alsa-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-audio-pa-4.2.1-11.4.4.s390x", "product": { "name": "qemu-audio-pa-4.2.1-11.4.4.s390x", "product_id": "qemu-audio-pa-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-block-curl-4.2.1-11.4.4.s390x", "product": { "name": "qemu-block-curl-4.2.1-11.4.4.s390x", "product_id": "qemu-block-curl-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-block-dmg-4.2.1-11.4.4.s390x", "product": { "name": "qemu-block-dmg-4.2.1-11.4.4.s390x", "product_id": "qemu-block-dmg-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-block-iscsi-4.2.1-11.4.4.s390x", "product": { "name": "qemu-block-iscsi-4.2.1-11.4.4.s390x", "product_id": "qemu-block-iscsi-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-block-rbd-4.2.1-11.4.4.s390x", "product": { "name": "qemu-block-rbd-4.2.1-11.4.4.s390x", "product_id": "qemu-block-rbd-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-block-ssh-4.2.1-11.4.4.s390x", "product": { "name": "qemu-block-ssh-4.2.1-11.4.4.s390x", "product_id": "qemu-block-ssh-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-extra-4.2.1-11.4.4.s390x", "product": { "name": "qemu-extra-4.2.1-11.4.4.s390x", "product_id": "qemu-extra-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-guest-agent-4.2.1-11.4.4.s390x", "product": { "name": "qemu-guest-agent-4.2.1-11.4.4.s390x", "product_id": "qemu-guest-agent-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-kvm-4.2.1-11.4.4.s390x", "product": { "name": "qemu-kvm-4.2.1-11.4.4.s390x", "product_id": "qemu-kvm-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-lang-4.2.1-11.4.4.s390x", "product": { "name": "qemu-lang-4.2.1-11.4.4.s390x", "product_id": "qemu-lang-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-linux-user-4.2.1-11.4.1.s390x", "product": { "name": "qemu-linux-user-4.2.1-11.4.1.s390x", "product_id": "qemu-linux-user-4.2.1-11.4.1.s390x" } }, { "category": "product_version", "name": "qemu-ppc-4.2.1-11.4.4.s390x", "product": { "name": "qemu-ppc-4.2.1-11.4.4.s390x", "product_id": "qemu-ppc-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-s390-4.2.1-11.4.4.s390x", "product": { "name": "qemu-s390-4.2.1-11.4.4.s390x", "product_id": "qemu-s390-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-testsuite-4.2.1-11.4.6.s390x", "product": { "name": "qemu-testsuite-4.2.1-11.4.6.s390x", "product_id": "qemu-testsuite-4.2.1-11.4.6.s390x" } }, { "category": "product_version", "name": "qemu-tools-4.2.1-11.4.4.s390x", "product": { "name": "qemu-tools-4.2.1-11.4.4.s390x", "product_id": "qemu-tools-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-ui-curses-4.2.1-11.4.4.s390x", "product": { "name": "qemu-ui-curses-4.2.1-11.4.4.s390x", "product_id": "qemu-ui-curses-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-ui-gtk-4.2.1-11.4.4.s390x", "product": { "name": "qemu-ui-gtk-4.2.1-11.4.4.s390x", "product_id": "qemu-ui-gtk-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-ui-spice-app-4.2.1-11.4.4.s390x", "product": { "name": "qemu-ui-spice-app-4.2.1-11.4.4.s390x", "product_id": "qemu-ui-spice-app-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-vhost-user-gpu-4.2.1-11.4.4.s390x", "product": { "name": "qemu-vhost-user-gpu-4.2.1-11.4.4.s390x", "product_id": "qemu-vhost-user-gpu-4.2.1-11.4.4.s390x" } }, { "category": "product_version", "name": "qemu-x86-4.2.1-11.4.4.s390x", "product": { "name": "qemu-x86-4.2.1-11.4.4.s390x", "product_id": "qemu-x86-4.2.1-11.4.4.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "qemu-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-4.2.1-11.4.4.x86_64", "product_id": "qemu-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-arm-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-arm-4.2.1-11.4.4.x86_64", "product_id": "qemu-arm-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-audio-alsa-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-audio-alsa-4.2.1-11.4.4.x86_64", "product_id": "qemu-audio-alsa-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-audio-pa-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-audio-pa-4.2.1-11.4.4.x86_64", "product_id": "qemu-audio-pa-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-block-curl-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-block-curl-4.2.1-11.4.4.x86_64", "product_id": "qemu-block-curl-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-block-dmg-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-block-dmg-4.2.1-11.4.4.x86_64", "product_id": "qemu-block-dmg-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-block-iscsi-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-block-iscsi-4.2.1-11.4.4.x86_64", "product_id": "qemu-block-iscsi-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-block-rbd-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-block-rbd-4.2.1-11.4.4.x86_64", "product_id": "qemu-block-rbd-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-block-ssh-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-block-ssh-4.2.1-11.4.4.x86_64", "product_id": "qemu-block-ssh-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-extra-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-extra-4.2.1-11.4.4.x86_64", "product_id": "qemu-extra-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-guest-agent-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-guest-agent-4.2.1-11.4.4.x86_64", "product_id": "qemu-guest-agent-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-kvm-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-kvm-4.2.1-11.4.4.x86_64", "product_id": "qemu-kvm-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-lang-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-lang-4.2.1-11.4.4.x86_64", "product_id": "qemu-lang-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-linux-user-4.2.1-11.4.1.x86_64", "product": { "name": "qemu-linux-user-4.2.1-11.4.1.x86_64", "product_id": "qemu-linux-user-4.2.1-11.4.1.x86_64" } }, { "category": "product_version", "name": "qemu-ppc-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-ppc-4.2.1-11.4.4.x86_64", "product_id": "qemu-ppc-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-s390-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-s390-4.2.1-11.4.4.x86_64", "product_id": "qemu-s390-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-testsuite-4.2.1-11.4.6.x86_64", "product": { "name": "qemu-testsuite-4.2.1-11.4.6.x86_64", "product_id": "qemu-testsuite-4.2.1-11.4.6.x86_64" } }, { "category": "product_version", "name": "qemu-tools-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-tools-4.2.1-11.4.4.x86_64", "product_id": "qemu-tools-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-ui-curses-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-ui-curses-4.2.1-11.4.4.x86_64", "product_id": "qemu-ui-curses-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-ui-gtk-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-ui-gtk-4.2.1-11.4.4.x86_64", "product_id": "qemu-ui-gtk-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "product_id": "qemu-ui-spice-app-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-vhost-user-gpu-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-vhost-user-gpu-4.2.1-11.4.4.x86_64", "product_id": "qemu-vhost-user-gpu-4.2.1-11.4.4.x86_64" } }, { "category": "product_version", "name": "qemu-x86-4.2.1-11.4.4.x86_64", "product": { "name": "qemu-x86-4.2.1-11.4.4.x86_64", "product_id": "qemu-x86-4.2.1-11.4.4.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Module for Basesystem 15 SP2", "product": { "name": "SUSE Linux Enterprise Module for Basesystem 15 SP2", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp2" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Module for Server Applications 15 SP2", "product": { "name": "SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-module-server-applications:15:sp2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "qemu-tools-4.2.1-11.4.4.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64" }, "product_reference": "qemu-tools-4.2.1-11.4.4.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-tools-4.2.1-11.4.4.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le" }, "product_reference": "qemu-tools-4.2.1-11.4.4.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-tools-4.2.1-11.4.4.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x" }, "product_reference": "qemu-tools-4.2.1-11.4.4.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-tools-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2", "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-tools-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-4.2.1-11.4.4.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64" }, "product_reference": "qemu-4.2.1-11.4.4.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-4.2.1-11.4.4.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le" }, "product_reference": "qemu-4.2.1-11.4.4.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-4.2.1-11.4.4.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x" }, "product_reference": "qemu-4.2.1-11.4.4.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-arm-4.2.1-11.4.4.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64" }, "product_reference": "qemu-arm-4.2.1-11.4.4.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-audio-alsa-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-audio-alsa-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-audio-pa-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-audio-pa-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-4.2.1-11.4.4.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64" }, "product_reference": "qemu-block-curl-4.2.1-11.4.4.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-4.2.1-11.4.4.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le" }, "product_reference": "qemu-block-curl-4.2.1-11.4.4.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-4.2.1-11.4.4.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x" }, "product_reference": "qemu-block-curl-4.2.1-11.4.4.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-block-curl-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-4.2.1-11.4.4.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64" }, "product_reference": "qemu-block-iscsi-4.2.1-11.4.4.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-4.2.1-11.4.4.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le" }, "product_reference": "qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-4.2.1-11.4.4.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x" }, "product_reference": "qemu-block-iscsi-4.2.1-11.4.4.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-block-iscsi-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-rbd-4.2.1-11.4.4.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64" }, "product_reference": "qemu-block-rbd-4.2.1-11.4.4.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-rbd-4.2.1-11.4.4.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le" }, "product_reference": "qemu-block-rbd-4.2.1-11.4.4.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-rbd-4.2.1-11.4.4.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x" }, "product_reference": "qemu-block-rbd-4.2.1-11.4.4.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-rbd-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-block-rbd-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-4.2.1-11.4.4.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64" }, "product_reference": "qemu-block-ssh-4.2.1-11.4.4.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-4.2.1-11.4.4.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le" }, "product_reference": "qemu-block-ssh-4.2.1-11.4.4.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-4.2.1-11.4.4.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x" }, "product_reference": "qemu-block-ssh-4.2.1-11.4.4.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-block-ssh-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-4.2.1-11.4.4.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64" }, "product_reference": "qemu-guest-agent-4.2.1-11.4.4.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-4.2.1-11.4.4.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le" }, "product_reference": "qemu-guest-agent-4.2.1-11.4.4.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-4.2.1-11.4.4.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x" }, "product_reference": "qemu-guest-agent-4.2.1-11.4.4.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-guest-agent-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ipxe-1.0.0+-11.4.4.noarch as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch" }, "product_reference": "qemu-ipxe-1.0.0+-11.4.4.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-4.2.1-11.4.4.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x" }, "product_reference": "qemu-kvm-4.2.1-11.4.4.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-kvm-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-lang-4.2.1-11.4.4.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64" }, "product_reference": "qemu-lang-4.2.1-11.4.4.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-lang-4.2.1-11.4.4.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le" }, "product_reference": "qemu-lang-4.2.1-11.4.4.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-lang-4.2.1-11.4.4.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x" }, "product_reference": "qemu-lang-4.2.1-11.4.4.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-lang-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-lang-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-microvm-4.2.1-11.4.4.noarch as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch" }, "product_reference": "qemu-microvm-4.2.1-11.4.4.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ppc-4.2.1-11.4.4.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le" }, "product_reference": "qemu-ppc-4.2.1-11.4.4.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-s390-4.2.1-11.4.4.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x" }, "product_reference": "qemu-s390-4.2.1-11.4.4.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-seabios-1.12.1+-11.4.4.noarch as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch" }, "product_reference": "qemu-seabios-1.12.1+-11.4.4.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-sgabios-8-11.4.4.noarch as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch" }, "product_reference": "qemu-sgabios-8-11.4.4.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ui-curses-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-ui-curses-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ui-gtk-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-ui-gtk-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ui-spice-app-4.2.1-11.4.4.aarch64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64" }, "product_reference": "qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ui-spice-app-4.2.1-11.4.4.ppc64le as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le" }, "product_reference": "qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ui-spice-app-4.2.1-11.4.4.s390x as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x" }, "product_reference": "qemu-ui-spice-app-4.2.1-11.4.4.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ui-spice-app-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-vgabios-1.12.1+-11.4.4.noarch as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch" }, "product_reference": "qemu-vgabios-1.12.1+-11.4.4.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-x86-4.2.1-11.4.4.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", "product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" }, "product_reference": "qemu-x86-4.2.1-11.4.4.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP2" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-10761", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-10761" } ], "notes": [ { "category": "general", "text": "An assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting in a denial of service.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-10761", "url": "https://www.suse.com/security/cve/CVE-2020-10761" }, { "category": "external", "summary": "SUSE Bug 1172710 for CVE-2020-10761", "url": "https://bugzilla.suse.com/1172710" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-07-23T07:21:35Z", "details": "important" } ], "title": "CVE-2020-10761" }, { "cve": "CVE-2020-13361", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-13361" } ], "notes": [ { "category": "general", "text": "In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-13361", "url": "https://www.suse.com/security/cve/CVE-2020-13361" }, { "category": "external", "summary": "SUSE Bug 1172384 for CVE-2020-13361", "url": "https://bugzilla.suse.com/1172384" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.9, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-07-23T07:21:35Z", "details": "low" } ], "title": "CVE-2020-13361" }, { "cve": "CVE-2020-13362", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-13362" } ], "notes": [ { "category": "general", "text": "In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-13362", "url": "https://www.suse.com/security/cve/CVE-2020-13362" }, { "category": "external", "summary": "SUSE Bug 1172383 for CVE-2020-13362", "url": "https://bugzilla.suse.com/1172383" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.2, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-07-23T07:21:35Z", "details": "low" } ], "title": "CVE-2020-13362" }, { "cve": "CVE-2020-13659", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-13659" } ], "notes": [ { "category": "general", "text": "address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-13659", "url": "https://www.suse.com/security/cve/CVE-2020-13659" }, { "category": "external", "summary": "SUSE Bug 1172386 for CVE-2020-13659", "url": "https://bugzilla.suse.com/1172386" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-07-23T07:21:35Z", "details": "moderate" } ], "title": "CVE-2020-13659" }, { "cve": "CVE-2020-13800", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-13800" } ], "notes": [ { "category": "general", "text": "ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-13800", "url": "https://www.suse.com/security/cve/CVE-2020-13800" }, { "category": "external", "summary": "SUSE Bug 1172495 for CVE-2020-13800", "url": "https://bugzilla.suse.com/1172495" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Basesystem 15 SP2:qemu-tools-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-arm-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-alsa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-audio-pa-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-curl-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-iscsi-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-rbd-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-block-ssh-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-guest-agent-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ipxe-1.0.0+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-kvm-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-lang-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-microvm-4.2.1-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ppc-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-s390-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-seabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-sgabios-8-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-curses-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-gtk-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.aarch64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.ppc64le", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.s390x", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-ui-spice-app-4.2.1-11.4.4.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-vgabios-1.12.1+-11.4.4.noarch", "SUSE Linux Enterprise Module for Server Applications 15 SP2:qemu-x86-4.2.1-11.4.4.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2020-07-23T07:21:35Z", "details": "moderate" } ], "title": "CVE-2020-13800" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…