Synopsis: Moderate: qemu-kvm security and bug fix update Advisory ID: SLSA-2021:0347-1 Issue Date: 2021-02-02 CVE Numbers: CVE-2020-13765 CVE-2020-16092 -- Security Fix(es): * QEMU: loader: OOB access while loading registered ROM may lead to code execution (CVE-2020-13765) * QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c (CVE-2020-16092) Bug Fix(es): * qemu-kvm FTBFS on rhel7.9 -- SL7 x86_64 qemu-img-1.5.3-175.el7_9.3.x86_64.rpm qemu-kvm-1.5.3-175.el7_9.3.x86_64.rpm qemu-kvm-common-1.5.3-175.el7_9.3.x86_64.rpm qemu-kvm-debuginfo-1.5.3-175.el7_9.3.x86_64.rpm qemu-kvm-tools-1.5.3-175.el7_9.3.x86_64.rpm - Scientific Linux Development Team