SUSE-SU-2024:3948-1

UNKNOWN

Security update for qemu

Published Nov 8, 2024

Modified 1 years ago

Fix available

Details

This update for qemu fixes the following issues:

CVE-2024-8354: Fixed assertion failure in usb_ep_get() (bsc#1230834).
CVE-2024-8612: Fixed nformation leak in virtio devices (bsc#1230915).
CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007).

Affected Packages(51 packages)

qemu

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Basesystem 15 SP5SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Linux Enterprise Module for Server Applications 15 SP5openSUSE Leap 15.5

Fixed in:

7.1.0-150500.49.24.1

qemu-SLOF

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Linux Enterprise Module for Server Applications 15 SP5openSUSE Leap 15.5

Fixed in:

7.1.0-150500.49.24.1

qemu-accel-tcg-x86

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Linux Enterprise Module for Server Applications 15 SP5openSUSE Leap 15.5openSUSE Leap Micro 5.5

Fixed in:

7.1.0-150500.49.24.1

qemu-arm

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Linux Enterprise Module for Server Applications 15 SP5openSUSE Leap 15.5openSUSE Leap Micro 5.5

Fixed in:

7.1.0-150500.49.24.1

qemu-audio-spice

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Linux Enterprise Module for Server Applications 15 SP5openSUSE Leap 15.5openSUSE Leap Micro 5.5

Fixed in:

7.1.0-150500.49.24.1

qemu-block-curl

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Server Applications 15 SP5openSUSE Leap 15.5openSUSE Leap Micro 5.5

Fixed in:

7.1.0-150500.49.24.1

qemu-chardev-spice

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Linux Enterprise Module for Server Applications 15 SP5openSUSE Leap 15.5openSUSE Leap Micro 5.5

Fixed in:

7.1.0-150500.49.24.1

qemu-guest-agent

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Server Applications 15 SP5openSUSE Leap 15.5openSUSE Leap Micro 5.5

Fixed in:

7.1.0-150500.49.24.1

qemu-hw-display-qxl

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Linux Enterprise Module for Server Applications 15 SP5openSUSE Leap 15.5openSUSE Leap Micro 5.5

Fixed in:

7.1.0-150500.49.24.1

qemu-hw-display-virtio-gpu

SUSE Linux Enterprise Micro 5.5SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Linux Enterprise Module for Server Applications 15 SP5openSUSE Leap 15.5openSUSE Leap Micro 5.5

Fixed in:

7.1.0-150500.49.24.1

References

REPORT

https://bugzilla.suse.com/1229007

REPORT

https://bugzilla.suse.com/1230834

REPORT

https://bugzilla.suse.com/1230915

WEB

https://www.suse.com/security/cve/CVE-2024-7409

WEB