openSUSE-SU-2021:3604-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:3604-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/openSUSE-SU-2021:3604-1
- Upstream
- Related
- Published
- 2021-11-03T13:59:31Z
- Modified
- 2026-03-11T07:33:19.812891Z
- Summary
- Security update for qemu
- Details
-
This update for qemu fixes the following issues:
Security issues fixed:
- CVE-2021-3713: Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702)
- CVE-2021-3748: Fix heap use-after-free in virtionetreceive_rcu (bsc#1189938)
Non-security issues fixed:
- Add transfer length item in block limits page of scsi vpd (bsc#1190425)
- Fix qemu crash while deleting xen-block (bsc#1189234)
- References
-
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VSD5Q5DPWCTYJNLRUS2DHTA3G6VDKLMV/
- https://bugzilla.suse.com/1189234
- https://bugzilla.suse.com/1189702
- https://bugzilla.suse.com/1189938
- https://bugzilla.suse.com/1190425
- https://www.suse.com/security/cve/CVE-2021-3713
- https://www.suse.com/security/cve/CVE-2021-3748