Security update for qemu (important)

An update that solves 14 vulnerabilities and has three
fixes is now available.

Description:

This update for qemu fixes the following issues:

• Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to
  what was accepted upstream (bsc#1181103)
• Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
• Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263,
  bsc#1183373)
• Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416,
  bsc#1182968)
• Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
• Fix package scripts to not use hard coded paths for temporary working
  directories and log files (bsc#1182425)
• QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)
• For the record, these issues are fixed in this package already. Most are
  alternate references to previously mentioned issues: (CVE-2019-15890,
  bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534,
  CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935,
  CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-3419,
  bsc#1182975)

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2021-1942=1