qemu-8.0.4-1.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:13114 Final 1 1 2024-06-17T21:45:33Z current 2024-06-17T21:45:33Z 2024-06-17T21:45:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z qemu-8.0.4-1.1 on GA media These are all security issues fixed in the qemu-8.0.4-1.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-13114 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) E-Mail link for openSUSE-SU-2024:13114 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2023-0330/ SUSE CVE CVE-2023-0330 page https://www.suse.com/security/cve/CVE-2023-3180/ SUSE CVE CVE-2023-3180 page https://www.suse.com/security/cve/CVE-2023-3354/ SUSE CVE CVE-2023-3354 page openSUSE Tumbleweed qemu-8.0.4-1.1 qemu-SLOF-8.0.4-1.1 qemu-accel-qtest-8.0.4-1.1 qemu-accel-tcg-x86-8.0.4-1.1 qemu-arm-8.0.4-1.1 qemu-audio-alsa-8.0.4-1.1 qemu-audio-dbus-8.0.4-1.1 qemu-audio-jack-8.0.4-1.1 qemu-audio-oss-8.0.4-1.1 qemu-audio-pa-8.0.4-1.1 qemu-audio-spice-8.0.4-1.1 qemu-block-curl-8.0.4-1.1 qemu-block-dmg-8.0.4-1.1 qemu-block-gluster-8.0.4-1.1 qemu-block-iscsi-8.0.4-1.1 qemu-block-nfs-8.0.4-1.1 qemu-block-rbd-8.0.4-1.1 qemu-block-ssh-8.0.4-1.1 qemu-chardev-baum-8.0.4-1.1 qemu-chardev-spice-8.0.4-1.1 qemu-doc-8.0.4-1.1 qemu-extra-8.0.4-1.1 qemu-guest-agent-8.0.4-1.1 qemu-headless-8.0.4-1.1 qemu-hw-display-qxl-8.0.4-1.1 qemu-hw-display-virtio-gpu-8.0.4-1.1 qemu-hw-display-virtio-gpu-pci-8.0.4-1.1 qemu-hw-display-virtio-vga-8.0.4-1.1 qemu-hw-s390x-virtio-gpu-ccw-8.0.4-1.1 qemu-hw-usb-host-8.0.4-1.1 qemu-hw-usb-redirect-8.0.4-1.1 qemu-hw-usb-smartcard-8.0.4-1.1 qemu-img-8.0.4-1.1 qemu-ipxe-1.0.0+-1.1 qemu-ivshmem-tools-8.0.4-1.1 qemu-ksm-8.0.4-1.1 qemu-kvm-8.0.4-1.1 qemu-lang-8.0.4-1.1 qemu-microvm-8.0.4-1.1 qemu-ppc-8.0.4-1.1 qemu-pr-helper-8.0.4-1.1 qemu-s390x-8.0.4-1.1 qemu-seabios-1.16.2_3_gd478f380-1.1 qemu-skiboot-8.0.4-1.1 qemu-tools-8.0.4-1.1 qemu-ui-curses-8.0.4-1.1 qemu-ui-dbus-8.0.4-1.1 qemu-ui-gtk-8.0.4-1.1 qemu-ui-opengl-8.0.4-1.1 qemu-ui-spice-app-8.0.4-1.1 qemu-ui-spice-core-8.0.4-1.1 qemu-vgabios-1.16.2_3_gd478f380-1.1 qemu-vhost-user-gpu-8.0.4-1.1 qemu-x86-8.0.4-1.1 qemu-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-SLOF-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-accel-qtest-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-accel-tcg-x86-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-arm-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-audio-alsa-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-audio-dbus-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-audio-jack-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-audio-oss-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-audio-pa-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-audio-spice-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-block-curl-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-block-dmg-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-block-gluster-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-block-iscsi-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-block-nfs-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-block-rbd-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-block-ssh-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-chardev-baum-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-chardev-spice-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-doc-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-extra-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-guest-agent-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-headless-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-hw-display-qxl-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-gpu-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-gpu-pci-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-vga-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-hw-s390x-virtio-gpu-ccw-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-hw-usb-host-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-hw-usb-redirect-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-hw-usb-smartcard-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-img-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-ipxe-1.0.0+-1.1 as a component of openSUSE Tumbleweed qemu-ivshmem-tools-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-ksm-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-kvm-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-lang-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-microvm-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-ppc-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-pr-helper-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-s390x-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-seabios-1.16.2_3_gd478f380-1.1 as a component of openSUSE Tumbleweed qemu-skiboot-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-tools-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-ui-curses-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-ui-dbus-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-ui-gtk-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-ui-opengl-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-ui-spice-app-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-ui-spice-core-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-vgabios-1.16.2_3_gd478f380-1.1 as a component of openSUSE Tumbleweed qemu-vhost-user-gpu-8.0.4-1.1 as a component of openSUSE Tumbleweed qemu-x86-8.0.4-1.1 as a component of openSUSE Tumbleweed A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free. CVE-2023-0330 openSUSE Tumbleweed:qemu-8.0.4-1.1 openSUSE Tumbleweed:qemu-SLOF-8.0.4-1.1 openSUSE Tumbleweed:qemu-accel-qtest-8.0.4-1.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-8.0.4-1.1 openSUSE Tumbleweed:qemu-arm-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-alsa-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-dbus-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-jack-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-oss-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-pa-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-spice-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-curl-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-dmg-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-gluster-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-iscsi-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-nfs-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-rbd-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-ssh-8.0.4-1.1 openSUSE Tumbleweed:qemu-chardev-baum-8.0.4-1.1 openSUSE Tumbleweed:qemu-chardev-spice-8.0.4-1.1 openSUSE Tumbleweed:qemu-doc-8.0.4-1.1 openSUSE Tumbleweed:qemu-extra-8.0.4-1.1 openSUSE Tumbleweed:qemu-guest-agent-8.0.4-1.1 openSUSE Tumbleweed:qemu-headless-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-display-qxl-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-usb-host-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-8.0.4-1.1 openSUSE Tumbleweed:qemu-img-8.0.4-1.1 openSUSE Tumbleweed:qemu-ipxe-1.0.0+-1.1 openSUSE Tumbleweed:qemu-ivshmem-tools-8.0.4-1.1 openSUSE Tumbleweed:qemu-ksm-8.0.4-1.1 openSUSE Tumbleweed:qemu-kvm-8.0.4-1.1 openSUSE Tumbleweed:qemu-lang-8.0.4-1.1 openSUSE Tumbleweed:qemu-microvm-8.0.4-1.1 openSUSE Tumbleweed:qemu-ppc-8.0.4-1.1 openSUSE Tumbleweed:qemu-pr-helper-8.0.4-1.1 openSUSE Tumbleweed:qemu-s390x-8.0.4-1.1 openSUSE Tumbleweed:qemu-seabios-1.16.2_3_gd478f380-1.1 openSUSE Tumbleweed:qemu-skiboot-8.0.4-1.1 openSUSE Tumbleweed:qemu-tools-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-curses-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-dbus-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-gtk-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-opengl-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-spice-app-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-spice-core-8.0.4-1.1 openSUSE Tumbleweed:qemu-vgabios-1.16.2_3_gd478f380-1.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-8.0.4-1.1 openSUSE Tumbleweed:qemu-x86-8.0.4-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-0330.html CVE-2023-0330 https://bugzilla.suse.com/1207205 SUSE Bug 1207205 A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ. CVE-2023-3180 openSUSE Tumbleweed:qemu-8.0.4-1.1 openSUSE Tumbleweed:qemu-SLOF-8.0.4-1.1 openSUSE Tumbleweed:qemu-accel-qtest-8.0.4-1.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-8.0.4-1.1 openSUSE Tumbleweed:qemu-arm-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-alsa-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-dbus-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-jack-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-oss-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-pa-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-spice-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-curl-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-dmg-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-gluster-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-iscsi-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-nfs-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-rbd-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-ssh-8.0.4-1.1 openSUSE Tumbleweed:qemu-chardev-baum-8.0.4-1.1 openSUSE Tumbleweed:qemu-chardev-spice-8.0.4-1.1 openSUSE Tumbleweed:qemu-doc-8.0.4-1.1 openSUSE Tumbleweed:qemu-extra-8.0.4-1.1 openSUSE Tumbleweed:qemu-guest-agent-8.0.4-1.1 openSUSE Tumbleweed:qemu-headless-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-display-qxl-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-usb-host-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-8.0.4-1.1 openSUSE Tumbleweed:qemu-img-8.0.4-1.1 openSUSE Tumbleweed:qemu-ipxe-1.0.0+-1.1 openSUSE Tumbleweed:qemu-ivshmem-tools-8.0.4-1.1 openSUSE Tumbleweed:qemu-ksm-8.0.4-1.1 openSUSE Tumbleweed:qemu-kvm-8.0.4-1.1 openSUSE Tumbleweed:qemu-lang-8.0.4-1.1 openSUSE Tumbleweed:qemu-microvm-8.0.4-1.1 openSUSE Tumbleweed:qemu-ppc-8.0.4-1.1 openSUSE Tumbleweed:qemu-pr-helper-8.0.4-1.1 openSUSE Tumbleweed:qemu-s390x-8.0.4-1.1 openSUSE Tumbleweed:qemu-seabios-1.16.2_3_gd478f380-1.1 openSUSE Tumbleweed:qemu-skiboot-8.0.4-1.1 openSUSE Tumbleweed:qemu-tools-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-curses-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-dbus-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-gtk-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-opengl-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-spice-app-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-spice-core-8.0.4-1.1 openSUSE Tumbleweed:qemu-vgabios-1.16.2_3_gd478f380-1.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-8.0.4-1.1 openSUSE Tumbleweed:qemu-x86-8.0.4-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3180.html CVE-2023-3180 https://bugzilla.suse.com/1213925 SUSE Bug 1213925 A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service. CVE-2023-3354 openSUSE Tumbleweed:qemu-8.0.4-1.1 openSUSE Tumbleweed:qemu-SLOF-8.0.4-1.1 openSUSE Tumbleweed:qemu-accel-qtest-8.0.4-1.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-8.0.4-1.1 openSUSE Tumbleweed:qemu-arm-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-alsa-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-dbus-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-jack-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-oss-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-pa-8.0.4-1.1 openSUSE Tumbleweed:qemu-audio-spice-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-curl-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-dmg-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-gluster-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-iscsi-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-nfs-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-rbd-8.0.4-1.1 openSUSE Tumbleweed:qemu-block-ssh-8.0.4-1.1 openSUSE Tumbleweed:qemu-chardev-baum-8.0.4-1.1 openSUSE Tumbleweed:qemu-chardev-spice-8.0.4-1.1 openSUSE Tumbleweed:qemu-doc-8.0.4-1.1 openSUSE Tumbleweed:qemu-extra-8.0.4-1.1 openSUSE Tumbleweed:qemu-guest-agent-8.0.4-1.1 openSUSE Tumbleweed:qemu-headless-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-display-qxl-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-usb-host-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-8.0.4-1.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-8.0.4-1.1 openSUSE Tumbleweed:qemu-img-8.0.4-1.1 openSUSE Tumbleweed:qemu-ipxe-1.0.0+-1.1 openSUSE Tumbleweed:qemu-ivshmem-tools-8.0.4-1.1 openSUSE Tumbleweed:qemu-ksm-8.0.4-1.1 openSUSE Tumbleweed:qemu-kvm-8.0.4-1.1 openSUSE Tumbleweed:qemu-lang-8.0.4-1.1 openSUSE Tumbleweed:qemu-microvm-8.0.4-1.1 openSUSE Tumbleweed:qemu-ppc-8.0.4-1.1 openSUSE Tumbleweed:qemu-pr-helper-8.0.4-1.1 openSUSE Tumbleweed:qemu-s390x-8.0.4-1.1 openSUSE Tumbleweed:qemu-seabios-1.16.2_3_gd478f380-1.1 openSUSE Tumbleweed:qemu-skiboot-8.0.4-1.1 openSUSE Tumbleweed:qemu-tools-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-curses-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-dbus-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-gtk-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-opengl-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-spice-app-8.0.4-1.1 openSUSE Tumbleweed:qemu-ui-spice-core-8.0.4-1.1 openSUSE Tumbleweed:qemu-vgabios-1.16.2_3_gd478f380-1.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-8.0.4-1.1 openSUSE Tumbleweed:qemu-x86-8.0.4-1.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2023-3354.html CVE-2023-3354 https://bugzilla.suse.com/1212850 SUSE Bug 1212850