Security update for qemu (important)

An update that solves four vulnerabilities and has four
fixes is now available.

Description:

This update for qemu fixes the following issues:

• Fixed potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
• Fixed out-of-bound access in iscsi (CVE-2020-11947 bsc#1180523)
• Fixed out-of-bound access in vmxnet3 emulation (CVE-2021-20203
  bsc#1181639)
• Fixed out-of-bound access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
• Fixed vfio-pci device on s390 enters error state (bsc#1179717
  bsc#1179719)
• Fixed “Failed to try-restart [email protected]” error while updating the
  qemu-guest-agent. (bsc#1178565)
• Apply fixes to qemu scsi passthrough with respect to timeout and error
  conditions, including using more correct status codes. Add more qemu
  tracing which helped track down these issues (bsc#1178049)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.2:

  zypper in -t patch openSUSE-2021-363=1