This update for qemu fixes the following issues :

Fix out-of-bounds access issue while doing multi block SDMA (CVE-2020-25085, bsc#1176681)

Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380)

QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)

Change dependency from CONFIG_VFIO back to CONFIG_LINUX (bsc#1179725)

For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues:
(CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLES12 Security Update : qemu (SUSE-SU-2021:1837-1)

medium Nessus Plugin ID 150220

Version 1.4