Security update for qemu (important)

An update that solves four vulnerabilities and has two
fixes is now available.

Description:

This update for qemu fixes the following issues:

• CVE-2020-14364: Fixed an OOB access while processing USB packets
  (bsc#1175441,bsc#1176494).
• CVE-2020-16092: Fixed a denial of service in packet processing of
  various emulated NICs (bsc#1174641).
• CVE-2020-15863: Fixed a buffer overflow in the XGMAC device
  (bsc#1174386).
• CVE-2020-24352: Fixed an out-of-bounds read/write in ati-vga device
  emulation in ati_2d_blt (bsc#1175370).
• Allow to IPL secure guests with -no-reboot (bsc#1174863)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.2:

  zypper in -t patch openSUSE-2020-1664=1