qemu-8.0.3-2.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:13082 Final 1 1 2024-06-17T21:45:33Z current 2024-06-17T21:45:33Z 2024-06-17T21:45:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z qemu-8.0.3-2.1 on GA media These are all security issues fixed in the qemu-8.0.3-2.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-13082 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) E-Mail link for openSUSE-SU-2024:13082 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2023-3255/ SUSE CVE CVE-2023-3255 page openSUSE Tumbleweed qemu-8.0.3-2.1 qemu-SLOF-8.0.3-2.1 qemu-accel-qtest-8.0.3-2.1 qemu-accel-tcg-x86-8.0.3-2.1 qemu-arm-8.0.3-2.1 qemu-audio-alsa-8.0.3-2.1 qemu-audio-dbus-8.0.3-2.1 qemu-audio-jack-8.0.3-2.1 qemu-audio-oss-8.0.3-2.1 qemu-audio-pa-8.0.3-2.1 qemu-audio-spice-8.0.3-2.1 qemu-block-curl-8.0.3-2.1 qemu-block-dmg-8.0.3-2.1 qemu-block-gluster-8.0.3-2.1 qemu-block-iscsi-8.0.3-2.1 qemu-block-nfs-8.0.3-2.1 qemu-block-rbd-8.0.3-2.1 qemu-block-ssh-8.0.3-2.1 qemu-chardev-baum-8.0.3-2.1 qemu-chardev-spice-8.0.3-2.1 qemu-doc-8.0.3-2.1 qemu-extra-8.0.3-2.1 qemu-guest-agent-8.0.3-2.1 qemu-headless-8.0.3-2.1 qemu-hw-display-qxl-8.0.3-2.1 qemu-hw-display-virtio-gpu-8.0.3-2.1 qemu-hw-display-virtio-gpu-pci-8.0.3-2.1 qemu-hw-display-virtio-vga-8.0.3-2.1 qemu-hw-s390x-virtio-gpu-ccw-8.0.3-2.1 qemu-hw-usb-host-8.0.3-2.1 qemu-hw-usb-redirect-8.0.3-2.1 qemu-hw-usb-smartcard-8.0.3-2.1 qemu-img-8.0.3-2.1 qemu-ipxe-1.0.0+-2.1 qemu-ivshmem-tools-8.0.3-2.1 qemu-ksm-8.0.3-2.1 qemu-kvm-8.0.3-2.1 qemu-lang-8.0.3-2.1 qemu-microvm-8.0.3-2.1 qemu-ppc-8.0.3-2.1 qemu-pr-helper-8.0.3-2.1 qemu-s390x-8.0.3-2.1 qemu-seabios-1.16.2_3_gd478f380-2.1 qemu-skiboot-8.0.3-2.1 qemu-tools-8.0.3-2.1 qemu-ui-curses-8.0.3-2.1 qemu-ui-dbus-8.0.3-2.1 qemu-ui-gtk-8.0.3-2.1 qemu-ui-opengl-8.0.3-2.1 qemu-ui-spice-app-8.0.3-2.1 qemu-ui-spice-core-8.0.3-2.1 qemu-vgabios-1.16.2_3_gd478f380-2.1 qemu-vhost-user-gpu-8.0.3-2.1 qemu-x86-8.0.3-2.1 qemu-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-SLOF-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-accel-qtest-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-accel-tcg-x86-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-arm-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-audio-alsa-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-audio-dbus-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-audio-jack-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-audio-oss-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-audio-pa-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-audio-spice-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-block-curl-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-block-dmg-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-block-gluster-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-block-iscsi-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-block-nfs-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-block-rbd-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-block-ssh-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-chardev-baum-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-chardev-spice-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-doc-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-extra-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-guest-agent-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-headless-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-hw-display-qxl-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-gpu-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-gpu-pci-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-vga-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-hw-s390x-virtio-gpu-ccw-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-hw-usb-host-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-hw-usb-redirect-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-hw-usb-smartcard-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-img-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-ipxe-1.0.0+-2.1 as a component of openSUSE Tumbleweed qemu-ivshmem-tools-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-ksm-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-kvm-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-lang-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-microvm-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-ppc-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-pr-helper-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-s390x-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-seabios-1.16.2_3_gd478f380-2.1 as a component of openSUSE Tumbleweed qemu-skiboot-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-tools-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-ui-curses-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-ui-dbus-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-ui-gtk-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-ui-opengl-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-ui-spice-app-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-ui-spice-core-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-vgabios-1.16.2_3_gd478f380-2.1 as a component of openSUSE Tumbleweed qemu-vhost-user-gpu-8.0.3-2.1 as a component of openSUSE Tumbleweed qemu-x86-8.0.3-2.1 as a component of openSUSE Tumbleweed A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the `inflate_buffer` function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service. CVE-2023-3255 openSUSE Tumbleweed:qemu-8.0.3-2.1 openSUSE Tumbleweed:qemu-SLOF-8.0.3-2.1 openSUSE Tumbleweed:qemu-accel-qtest-8.0.3-2.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-8.0.3-2.1 openSUSE Tumbleweed:qemu-arm-8.0.3-2.1 openSUSE Tumbleweed:qemu-audio-alsa-8.0.3-2.1 openSUSE Tumbleweed:qemu-audio-dbus-8.0.3-2.1 openSUSE Tumbleweed:qemu-audio-jack-8.0.3-2.1 openSUSE Tumbleweed:qemu-audio-oss-8.0.3-2.1 openSUSE Tumbleweed:qemu-audio-pa-8.0.3-2.1 openSUSE Tumbleweed:qemu-audio-spice-8.0.3-2.1 openSUSE Tumbleweed:qemu-block-curl-8.0.3-2.1 openSUSE Tumbleweed:qemu-block-dmg-8.0.3-2.1 openSUSE Tumbleweed:qemu-block-gluster-8.0.3-2.1 openSUSE Tumbleweed:qemu-block-iscsi-8.0.3-2.1 openSUSE Tumbleweed:qemu-block-nfs-8.0.3-2.1 openSUSE Tumbleweed:qemu-block-rbd-8.0.3-2.1 openSUSE Tumbleweed:qemu-block-ssh-8.0.3-2.1 openSUSE Tumbleweed:qemu-chardev-baum-8.0.3-2.1 openSUSE Tumbleweed:qemu-chardev-spice-8.0.3-2.1 openSUSE Tumbleweed:qemu-doc-8.0.3-2.1 openSUSE Tumbleweed:qemu-extra-8.0.3-2.1 openSUSE Tumbleweed:qemu-guest-agent-8.0.3-2.1 openSUSE Tumbleweed:qemu-headless-8.0.3-2.1 openSUSE Tumbleweed:qemu-hw-display-qxl-8.0.3-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-8.0.3-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-8.0.3-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-8.0.3-2.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-8.0.3-2.1 openSUSE Tumbleweed:qemu-hw-usb-host-8.0.3-2.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-8.0.3-2.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-8.0.3-2.1 openSUSE Tumbleweed:qemu-img-8.0.3-2.1 openSUSE Tumbleweed:qemu-ipxe-1.0.0+-2.1 openSUSE Tumbleweed:qemu-ivshmem-tools-8.0.3-2.1 openSUSE Tumbleweed:qemu-ksm-8.0.3-2.1 openSUSE Tumbleweed:qemu-kvm-8.0.3-2.1 openSUSE Tumbleweed:qemu-lang-8.0.3-2.1 openSUSE Tumbleweed:qemu-microvm-8.0.3-2.1 openSUSE Tumbleweed:qemu-ppc-8.0.3-2.1 openSUSE Tumbleweed:qemu-pr-helper-8.0.3-2.1 openSUSE Tumbleweed:qemu-s390x-8.0.3-2.1 openSUSE Tumbleweed:qemu-seabios-1.16.2_3_gd478f380-2.1 openSUSE Tumbleweed:qemu-skiboot-8.0.3-2.1 openSUSE Tumbleweed:qemu-tools-8.0.3-2.1 openSUSE Tumbleweed:qemu-ui-curses-8.0.3-2.1 openSUSE Tumbleweed:qemu-ui-dbus-8.0.3-2.1 openSUSE Tumbleweed:qemu-ui-gtk-8.0.3-2.1 openSUSE Tumbleweed:qemu-ui-opengl-8.0.3-2.1 openSUSE Tumbleweed:qemu-ui-spice-app-8.0.3-2.1 openSUSE Tumbleweed:qemu-ui-spice-core-8.0.3-2.1 openSUSE Tumbleweed:qemu-vgabios-1.16.2_3_gd478f380-2.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-8.0.3-2.1 openSUSE Tumbleweed:qemu-x86-8.0.3-2.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3255.html CVE-2023-3255 https://bugzilla.suse.com/1213001 SUSE Bug 1213001