{"id":"CVE-2021-3419","aliases":["EUVD-2021-26747","SUSE-SU-2021:14702-1","SUSE-SU-2021:1829-1","SUSE-SU-2021:1837-1","SUSE-SU-2021:1893-1","SUSE-SU-2021:1894-1","SUSE-SU-2021:1895-1","SUSE-SU-2021:1918-1","SUSE-SU-2021:1942-1","SUSE-SU-2021:1947-1","openSUSE-SU-2021:1043-1","openSUSE-SU-2021:1942-1"],"status":"rejected","title":"Security update for xen","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2021-03-03T15:59:51Z","modified":"2026-10-18T01:10:00Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.4_48-61.64.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-41.65.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-51.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-51.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-11.19.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-11.19.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-11.19.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.50.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.50.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.50.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.50.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.50.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.50.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-9.46.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-9.46.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-9.46.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-9.46.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-9.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-9.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-9.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-9.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-9.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-9.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-9.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-9.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-9.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-9.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-17.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-5.32.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-5.32.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-5.32.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-5.32.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-lp152.9.16.2"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"qemu-linux-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-lp152.9.16.1"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"qemu-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-lp152.9.16.7"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-17.1"}]}],"bundled":14}],"references":[{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114702-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1182155","tags":["report"]},{"url":"https://bugzilla.suse.com/1182846","tags":["report"]},{"url":"https://bugzilla.suse.com/1182975","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3419","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211829-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1031692","tags":["report"]},{"url":"https://bugzilla.suse.com/1094725","tags":["report"]},{"url":"https://bugzilla.suse.com/1126455","tags":["report"]},{"url":"https://bugzilla.suse.com/1149813","tags":["report"]},{"url":"https://bugzilla.suse.com/1163019","tags":["report"]},{"url":"https://bugzilla.suse.com/1172380","tags":["report"]},{"url":"https://bugzilla.suse.com/1172382","tags":["report"]},{"url":"https://bugzilla.suse.com/1175534","tags":["report"]},{"url":"https://bugzilla.suse.com/1178935","tags":["report"]},{"url":"https://bugzilla.suse.com/1179477","tags":["report"]},{"url":"https://bugzilla.suse.com/1181933","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20221","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211837-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1176681","tags":["report"]},{"url":"https://bugzilla.suse.com/1178683","tags":["report"]},{"url":"https://bugzilla.suse.com/1179484","tags":["report"]},{"url":"https://bugzilla.suse.com/1179725","tags":["report"]},{"url":"https://bugzilla.suse.com/1186290","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29129","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211893-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183979","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211894-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211895-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211918-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211942-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1175144","tags":["report"]},{"url":"https://bugzilla.suse.com/1179686","tags":["report"]},{"url":"https://bugzilla.suse.com/1181103","tags":["report"]},{"url":"https://bugzilla.suse.com/1182282","tags":["report"]},{"url":"https://bugzilla.suse.com/1182425","tags":["report"]},{"url":"https://bugzilla.suse.com/1182968","tags":["report"]},{"url":"https://bugzilla.suse.com/1183373","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3416","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211947-1/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SVDDMT7IUGYOEFTYO3UWD73PJMJL4FSY/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1184574","tags":["report"]},{"url":"https://bugzilla.suse.com/1185591","tags":["report"]},{"url":"https://bugzilla.suse.com/1185981","tags":["report"]},{"url":"https://bugzilla.suse.com/1185990","tags":["report"]},{"url":"https://bugzilla.suse.com/1186010","tags":["report"]},{"url":"https://bugzilla.suse.com/1187013","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3546","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IEKBDJBTGKO53MSKM3SRYVUQDWIJ2N5I/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-3419","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none","status":"rejected","published":"2021-03-03T15:59:51Z","modified":"2021-03-03T15:59:51Z","updated_at":"2026-11-02T14:33:03.671751Z"}],"euvd":[{"id":"EUVD-2021-26747","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none","status":"published","published":"2021-03-03T15:59:51Z","modified":"2021-03-03T15:59:51Z","updated_at":"2026-11-03T03:51:17.445809Z"}],"nvd":[{"id":"CVE-2021-3419","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none","status":"rejected","published":"2021-03-03T16:15:13.323Z","modified":"2026-10-18T01:10:00.117Z","updated_at":"2026-11-02T14:06:50.399901Z"}],"osv":[{"id":"openSUSE-SU-2021:1043-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-3546: Fix out-of-bounds write in virgl_cmd_get_capset (bsc#1185981)\n- CVE-2021-3544: Fix memory leaks found in the virtio vhost-user GPU device (bsc#1186010)\n- CVE-2021-3545: Fix information disclosure due to uninitialized memory read (bsc#1185990)\n- CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)\n- CVE-2020-10756: Fix out-of-bounds read information disclosure in icmp6_send_echoreply(bsc#1172380)\n- For the record, these issues are fixed in this package already.\n  Most are alternate references to previously mentioned issues:\n  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,\n  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,\n  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,\n  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,\n  CVE-2021-3419, bsc#1182975)\n\nNon-security issues fixed:\n\n- Fix issue where s390 guest fails to find zipl boot menu index (bsc#1183979)\n- QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)\n- Host CPU microcode revision will be visible inside VMs when the proper CPU-model is used (jsc#SLE-17785):\n- Fix testsuite error (bsc#1184574)\n- Fix qemu crash with iothread when block commit after snapshot (bsc#1187013)\n- Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)\n- Use RCU to avoid race during scsi hotplug/hotunplug (bsc#1184574)\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-07-13T22:06:05Z","modified":"2026-02-04T03:13:51.977385Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:1942-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream (bsc#1181103)\n- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144, CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)\n- Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263, bsc#1183373)\n- Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)\n- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)\n- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)\n- QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)\n- For the record, these issues are fixed in this package already.\n  Most are alternate references to previously mentioned issues:\n  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,\n  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,\n  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,\n  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)\n","status":"published","published":"2021-07-11T09:13:24Z","modified":"2025-05-07T18:10:46.174369Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"SUSE-SU-2021:14702-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2021-3419: Fixed a stack overflow induced by infinite recursion issue (bsc#1182975).\n- CVE-2021-20257: Fixed an infinite loop in the e1000 NIC emulator (bsc#1182846)\n- xenstored crashing with segfault (bsc#1182155).\n","status":"published","published":"2021-04-19T14:36:41Z","modified":"2026-02-04T03:43:49.874815Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1829-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- Fix OOB access during mmio operations (CVE-2020-13754, bsc#1172382)\n- Fix sPAPR emulator leaks the host hardware identity (CVE-2019-8934, bsc#1126455)\n- Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380)\n- Fix out-of-bound heap buffer access via an interrupt ID field (CVE-2021-20221, bsc#1181933)\n- For the record, these issues are fixed in this package already.\n  Most are alternate references to previously mentioned issues:\n  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,\n  CVE-2020-14364, bsc#1175534, CVE-2020-25723, bsc#1178935,\n  CVE-2020-29130, bsc#1179477, CVE-2021-20257, bsc#1182846,\n  CVE-2021-3419, bsc#1182975, bsc#1031692, bsc#1094725)\n","status":"published","published":"2021-06-02T12:21:01Z","modified":"2025-05-02T04:08:57.592814Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1837-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- Fix out-of-bounds access issue while doing multi block SDMA (CVE-2020-25085, bsc#1176681)\n- Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380)\n- QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)\n- Change dependency from CONFIG_VFIO back to CONFIG_LINUX (bsc#1179725)\n- For the record, these issues are fixed in this package already.\n  Most are alternate references to previously mentioned issues:\n  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,\n  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,\n  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,\n  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,\n  CVE-2021-3419, bsc#1182975)\n","status":"published","published":"2021-06-02T14:28:16Z","modified":"2026-02-04T04:00:41.020162Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1893-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)\n- CVE-2020-10756: Fix out-of-bounds read information disclosure in icmp6_send_echoreply(bsc#1172380)\n- Fix issue where s390 guest fails to find zipl boot menu index (bsc#1183979)\n- QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)\n- Host CPU microcode revision will be visible inside VMs when the proper CPU-model is used (jsc#SLE-17785):\n- For the record, these issues are fixed in this package already.\n  Most are alternate references to previously mentioned issues:\n  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,\n  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,\n  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,\n  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,\n  CVE-2021-3419, bsc#1182975)\n","status":"published","published":"2021-06-08T13:16:45Z","modified":"2026-02-04T03:47:42.256108Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1894-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- Fix OOB access during mmio operations (CVE-2020-13754, bsc#1172382)\n- Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380)\n- Fix out-of-bound heap buffer access via an interrupt ID field (CVE-2021-20221, bsc#1181933)\n- For the record, these issues are fixed in this package already.\n  Most are alternate references to previously mentioned issues:\n  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,\n  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,\n  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,\n  CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975,\n  bsc#1094725)\n","status":"published","published":"2021-06-08T13:16:49Z","modified":"2026-02-04T04:13:29.710502Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1895-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- Fix OOB access during mmio operations (CVE-2020-13754, bsc#1172382)\n- Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380)\n- For the record, these issues are fixed in this package already.\n  Most are alternate references to previously mentioned issues:\n  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,\n  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,\n  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,\n  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,\n  CVE-2021-3419, bsc#1182975)\n","status":"published","published":"2021-06-08T14:06:35Z","modified":"2026-02-04T03:10:06.161672Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1918-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- CVE-2020-10756: Fix out-of-bounds read information disclosure in icmp6_send_echoreply (bsc#1172380)\n","status":"published","published":"2021-06-09T13:20:36Z","modified":"2026-02-04T02:43:11.53983Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1942-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream (bsc#1181103)\n- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144, CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)\n- Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263, bsc#1183373)\n- Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)\n- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)\n- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)\n- QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)\n- For the record, these issues are fixed in this package already.\n  Most are alternate references to previously mentioned issues:\n  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,\n  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,\n  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,\n  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)\n","status":"published","published":"2021-06-10T08:50:33Z","modified":"2026-02-04T02:14:19.470204Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1947-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- Fix OOB access during mmio operations (CVE-2020-13754, bsc#1172382)\n- Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380)\n- For the record, these issues are fixed in this package already.\n  Most are alternate references to previously mentioned issues:\n  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,\n  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,\n  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,\n  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,\n  CVE-2021-3419, bsc#1182975)\n","status":"published","published":"2021-06-10T10:31:38Z","modified":"2026-02-04T03:39:43.224076Z","updated_at":"2026-11-02T15:53:49.138643Z"}]}}