qemu-8.2.2-2.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:13876 Final 1 1 2024-06-17T21:45:33Z current 2024-06-17T21:45:33Z 2024-06-17T21:45:33Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z qemu-8.2.2-2.1 on GA media These are all security issues fixed in the qemu-8.2.2-2.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-13876 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) E-Mail link for openSUSE-SU-2024:13876 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2024-26328/ SUSE CVE CVE-2024-26328 page https://www.suse.com/security/cve/CVE-2024-3446/ SUSE CVE CVE-2024-3446 page https://www.suse.com/security/cve/CVE-2024-3447/ SUSE CVE CVE-2024-3447 page https://www.suse.com/security/cve/CVE-2024-3567/ SUSE CVE CVE-2024-3567 page openSUSE Tumbleweed qemu-8.2.2-2.1 qemu-SLOF-8.2.2-2.1 qemu-accel-qtest-8.2.2-2.1 qemu-accel-tcg-x86-8.2.2-2.1 qemu-arm-8.2.2-2.1 qemu-audio-alsa-8.2.2-2.1 qemu-audio-dbus-8.2.2-2.1 qemu-audio-jack-8.2.2-2.1 qemu-audio-oss-8.2.2-2.1 qemu-audio-pa-8.2.2-2.1 qemu-audio-pipewire-8.2.2-2.1 qemu-audio-spice-8.2.2-2.1 qemu-block-curl-8.2.2-2.1 qemu-block-dmg-8.2.2-2.1 qemu-block-gluster-8.2.2-2.1 qemu-block-iscsi-8.2.2-2.1 qemu-block-nfs-8.2.2-2.1 qemu-block-rbd-8.2.2-2.1 qemu-block-ssh-8.2.2-2.1 qemu-chardev-baum-8.2.2-2.1 qemu-chardev-spice-8.2.2-2.1 qemu-doc-8.2.2-2.1 qemu-extra-8.2.2-2.1 qemu-guest-agent-8.2.2-2.1 qemu-headless-8.2.2-2.1 qemu-hw-display-qxl-8.2.2-2.1 qemu-hw-display-virtio-gpu-8.2.2-2.1 qemu-hw-display-virtio-gpu-pci-8.2.2-2.1 qemu-hw-display-virtio-vga-8.2.2-2.1 qemu-hw-s390x-virtio-gpu-ccw-8.2.2-2.1 qemu-hw-usb-host-8.2.2-2.1 qemu-hw-usb-redirect-8.2.2-2.1 qemu-hw-usb-smartcard-8.2.2-2.1 qemu-img-8.2.2-2.1 qemu-ipxe-8.2.2-2.1 qemu-ivshmem-tools-8.2.2-2.1 qemu-ksm-8.2.2-2.1 qemu-lang-8.2.2-2.1 qemu-microvm-8.2.2-2.1 qemu-ppc-8.2.2-2.1 qemu-pr-helper-8.2.2-2.1 qemu-s390x-8.2.2-2.1 qemu-seabios-8.2.21.16.3_3_ga95067eb-2.1 qemu-skiboot-8.2.2-2.1 qemu-spice-8.2.2-2.1 qemu-tools-8.2.2-2.1 qemu-ui-curses-8.2.2-2.1 qemu-ui-dbus-8.2.2-2.1 qemu-ui-gtk-8.2.2-2.1 qemu-ui-opengl-8.2.2-2.1 qemu-ui-spice-app-8.2.2-2.1 qemu-ui-spice-core-8.2.2-2.1 qemu-vgabios-8.2.21.16.3_3_ga95067eb-2.1 qemu-vhost-user-gpu-8.2.2-2.1 qemu-x86-8.2.2-2.1 qemu-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-SLOF-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-accel-qtest-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-accel-tcg-x86-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-arm-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-audio-alsa-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-audio-dbus-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-audio-jack-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-audio-oss-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-audio-pa-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-audio-pipewire-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-audio-spice-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-block-curl-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-block-dmg-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-block-gluster-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-block-iscsi-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-block-nfs-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-block-rbd-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-block-ssh-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-chardev-baum-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-chardev-spice-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-doc-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-extra-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-guest-agent-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-headless-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-hw-display-qxl-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-gpu-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-gpu-pci-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-vga-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-hw-s390x-virtio-gpu-ccw-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-hw-usb-host-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-hw-usb-redirect-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-hw-usb-smartcard-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-img-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-ipxe-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-ivshmem-tools-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-ksm-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-lang-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-microvm-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-ppc-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-pr-helper-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-s390x-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-seabios-8.2.21.16.3_3_ga95067eb-2.1 as a component of openSUSE Tumbleweed qemu-skiboot-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-spice-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-tools-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-ui-curses-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-ui-dbus-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-ui-gtk-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-ui-opengl-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-ui-spice-app-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-ui-spice-core-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-vgabios-8.2.21.16.3_3_ga95067eb-2.1 as a component of openSUSE Tumbleweed qemu-vhost-user-gpu-8.2.2-2.1 as a component of openSUSE Tumbleweed qemu-x86-8.2.2-2.1 as a component of openSUSE Tumbleweed An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c does not set NumVFs to PCI_SRIOV_TOTAL_VF, and thus interaction with hw/nvme/ctrl.c is mishandled. CVE-2024-26328 openSUSE Tumbleweed:qemu-8.2.2-2.1 openSUSE Tumbleweed:qemu-SLOF-8.2.2-2.1 openSUSE Tumbleweed:qemu-accel-qtest-8.2.2-2.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-8.2.2-2.1 openSUSE Tumbleweed:qemu-arm-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-alsa-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-dbus-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-jack-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-oss-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-pa-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-pipewire-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-spice-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-curl-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-dmg-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-gluster-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-iscsi-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-nfs-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-rbd-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-ssh-8.2.2-2.1 openSUSE Tumbleweed:qemu-chardev-baum-8.2.2-2.1 openSUSE Tumbleweed:qemu-chardev-spice-8.2.2-2.1 openSUSE Tumbleweed:qemu-doc-8.2.2-2.1 openSUSE Tumbleweed:qemu-extra-8.2.2-2.1 openSUSE Tumbleweed:qemu-guest-agent-8.2.2-2.1 openSUSE Tumbleweed:qemu-headless-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-qxl-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-usb-host-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-8.2.2-2.1 openSUSE Tumbleweed:qemu-img-8.2.2-2.1 openSUSE Tumbleweed:qemu-ipxe-8.2.2-2.1 openSUSE Tumbleweed:qemu-ivshmem-tools-8.2.2-2.1 openSUSE Tumbleweed:qemu-ksm-8.2.2-2.1 openSUSE Tumbleweed:qemu-lang-8.2.2-2.1 openSUSE Tumbleweed:qemu-microvm-8.2.2-2.1 openSUSE Tumbleweed:qemu-ppc-8.2.2-2.1 openSUSE Tumbleweed:qemu-pr-helper-8.2.2-2.1 openSUSE Tumbleweed:qemu-s390x-8.2.2-2.1 openSUSE Tumbleweed:qemu-seabios-8.2.21.16.3_3_ga95067eb-2.1 openSUSE Tumbleweed:qemu-skiboot-8.2.2-2.1 openSUSE Tumbleweed:qemu-spice-8.2.2-2.1 openSUSE Tumbleweed:qemu-tools-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-curses-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-dbus-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-gtk-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-opengl-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-spice-app-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-spice-core-8.2.2-2.1 openSUSE Tumbleweed:qemu-vgabios-8.2.21.16.3_3_ga95067eb-2.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-8.2.2-2.1 openSUSE Tumbleweed:qemu-x86-8.2.2-2.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2024-26328.html CVE-2024-26328 https://bugzilla.suse.com/1220065 SUSE Bug 1220065 A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This issue could allow a malicious privileged guest user to crash the QEMU process on the host, resulting in a denial of service or allow arbitrary code execution within the context of the QEMU process on the host. CVE-2024-3446 openSUSE Tumbleweed:qemu-8.2.2-2.1 openSUSE Tumbleweed:qemu-SLOF-8.2.2-2.1 openSUSE Tumbleweed:qemu-accel-qtest-8.2.2-2.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-8.2.2-2.1 openSUSE Tumbleweed:qemu-arm-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-alsa-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-dbus-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-jack-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-oss-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-pa-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-pipewire-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-spice-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-curl-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-dmg-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-gluster-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-iscsi-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-nfs-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-rbd-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-ssh-8.2.2-2.1 openSUSE Tumbleweed:qemu-chardev-baum-8.2.2-2.1 openSUSE Tumbleweed:qemu-chardev-spice-8.2.2-2.1 openSUSE Tumbleweed:qemu-doc-8.2.2-2.1 openSUSE Tumbleweed:qemu-extra-8.2.2-2.1 openSUSE Tumbleweed:qemu-guest-agent-8.2.2-2.1 openSUSE Tumbleweed:qemu-headless-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-qxl-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-usb-host-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-8.2.2-2.1 openSUSE Tumbleweed:qemu-img-8.2.2-2.1 openSUSE Tumbleweed:qemu-ipxe-8.2.2-2.1 openSUSE Tumbleweed:qemu-ivshmem-tools-8.2.2-2.1 openSUSE Tumbleweed:qemu-ksm-8.2.2-2.1 openSUSE Tumbleweed:qemu-lang-8.2.2-2.1 openSUSE Tumbleweed:qemu-microvm-8.2.2-2.1 openSUSE Tumbleweed:qemu-ppc-8.2.2-2.1 openSUSE Tumbleweed:qemu-pr-helper-8.2.2-2.1 openSUSE Tumbleweed:qemu-s390x-8.2.2-2.1 openSUSE Tumbleweed:qemu-seabios-8.2.21.16.3_3_ga95067eb-2.1 openSUSE Tumbleweed:qemu-skiboot-8.2.2-2.1 openSUSE Tumbleweed:qemu-spice-8.2.2-2.1 openSUSE Tumbleweed:qemu-tools-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-curses-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-dbus-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-gtk-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-opengl-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-spice-app-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-spice-core-8.2.2-2.1 openSUSE Tumbleweed:qemu-vgabios-8.2.21.16.3_3_ga95067eb-2.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-8.2.2-2.1 openSUSE Tumbleweed:qemu-x86-8.2.2-2.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2024-3446.html CVE-2024-3446 https://bugzilla.suse.com/1222843 SUSE Bug 1222843 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. CVE-2024-3447 openSUSE Tumbleweed:qemu-8.2.2-2.1 openSUSE Tumbleweed:qemu-SLOF-8.2.2-2.1 openSUSE Tumbleweed:qemu-accel-qtest-8.2.2-2.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-8.2.2-2.1 openSUSE Tumbleweed:qemu-arm-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-alsa-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-dbus-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-jack-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-oss-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-pa-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-pipewire-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-spice-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-curl-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-dmg-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-gluster-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-iscsi-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-nfs-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-rbd-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-ssh-8.2.2-2.1 openSUSE Tumbleweed:qemu-chardev-baum-8.2.2-2.1 openSUSE Tumbleweed:qemu-chardev-spice-8.2.2-2.1 openSUSE Tumbleweed:qemu-doc-8.2.2-2.1 openSUSE Tumbleweed:qemu-extra-8.2.2-2.1 openSUSE Tumbleweed:qemu-guest-agent-8.2.2-2.1 openSUSE Tumbleweed:qemu-headless-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-qxl-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-usb-host-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-8.2.2-2.1 openSUSE Tumbleweed:qemu-img-8.2.2-2.1 openSUSE Tumbleweed:qemu-ipxe-8.2.2-2.1 openSUSE Tumbleweed:qemu-ivshmem-tools-8.2.2-2.1 openSUSE Tumbleweed:qemu-ksm-8.2.2-2.1 openSUSE Tumbleweed:qemu-lang-8.2.2-2.1 openSUSE Tumbleweed:qemu-microvm-8.2.2-2.1 openSUSE Tumbleweed:qemu-ppc-8.2.2-2.1 openSUSE Tumbleweed:qemu-pr-helper-8.2.2-2.1 openSUSE Tumbleweed:qemu-s390x-8.2.2-2.1 openSUSE Tumbleweed:qemu-seabios-8.2.21.16.3_3_ga95067eb-2.1 openSUSE Tumbleweed:qemu-skiboot-8.2.2-2.1 openSUSE Tumbleweed:qemu-spice-8.2.2-2.1 openSUSE Tumbleweed:qemu-tools-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-curses-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-dbus-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-gtk-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-opengl-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-spice-app-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-spice-core-8.2.2-2.1 openSUSE Tumbleweed:qemu-vgabios-8.2.21.16.3_3_ga95067eb-2.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-8.2.2-2.1 openSUSE Tumbleweed:qemu-x86-8.2.2-2.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2024-3447.html CVE-2024-3447 https://bugzilla.suse.com/1222845 SUSE Bug 1222845 A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a denial of service condition. CVE-2024-3567 openSUSE Tumbleweed:qemu-8.2.2-2.1 openSUSE Tumbleweed:qemu-SLOF-8.2.2-2.1 openSUSE Tumbleweed:qemu-accel-qtest-8.2.2-2.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-8.2.2-2.1 openSUSE Tumbleweed:qemu-arm-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-alsa-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-dbus-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-jack-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-oss-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-pa-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-pipewire-8.2.2-2.1 openSUSE Tumbleweed:qemu-audio-spice-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-curl-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-dmg-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-gluster-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-iscsi-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-nfs-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-rbd-8.2.2-2.1 openSUSE Tumbleweed:qemu-block-ssh-8.2.2-2.1 openSUSE Tumbleweed:qemu-chardev-baum-8.2.2-2.1 openSUSE Tumbleweed:qemu-chardev-spice-8.2.2-2.1 openSUSE Tumbleweed:qemu-doc-8.2.2-2.1 openSUSE Tumbleweed:qemu-extra-8.2.2-2.1 openSUSE Tumbleweed:qemu-guest-agent-8.2.2-2.1 openSUSE Tumbleweed:qemu-headless-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-qxl-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-usb-host-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-8.2.2-2.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-8.2.2-2.1 openSUSE Tumbleweed:qemu-img-8.2.2-2.1 openSUSE Tumbleweed:qemu-ipxe-8.2.2-2.1 openSUSE Tumbleweed:qemu-ivshmem-tools-8.2.2-2.1 openSUSE Tumbleweed:qemu-ksm-8.2.2-2.1 openSUSE Tumbleweed:qemu-lang-8.2.2-2.1 openSUSE Tumbleweed:qemu-microvm-8.2.2-2.1 openSUSE Tumbleweed:qemu-ppc-8.2.2-2.1 openSUSE Tumbleweed:qemu-pr-helper-8.2.2-2.1 openSUSE Tumbleweed:qemu-s390x-8.2.2-2.1 openSUSE Tumbleweed:qemu-seabios-8.2.21.16.3_3_ga95067eb-2.1 openSUSE Tumbleweed:qemu-skiboot-8.2.2-2.1 openSUSE Tumbleweed:qemu-spice-8.2.2-2.1 openSUSE Tumbleweed:qemu-tools-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-curses-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-dbus-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-gtk-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-opengl-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-spice-app-8.2.2-2.1 openSUSE Tumbleweed:qemu-ui-spice-core-8.2.2-2.1 openSUSE Tumbleweed:qemu-vgabios-8.2.21.16.3_3_ga95067eb-2.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-8.2.2-2.1 openSUSE Tumbleweed:qemu-x86-8.2.2-2.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2024-3567.html CVE-2024-3567 https://bugzilla.suse.com/1222841 SUSE Bug 1222841