qemu-9.1.0-2.1 on GA media SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2024:14411-1 Final 1 1 2024-10-18T00:00:00Z current 2024-10-18T00:00:00Z 2024-10-18T00:00:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z qemu-9.1.0-2.1 on GA media These are all security issues fixed in the qemu-9.1.0-2.1 package on the GA media of openSUSE Tumbleweed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Tumbleweed-2024-14411 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EPDARJICNXP6BQXL6RDWC63AJMWSDEU5/ E-Mail link for openSUSE-SU-2024:14411-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2024-4467/ SUSE CVE CVE-2024-4467 page https://www.suse.com/security/cve/CVE-2024-7409/ SUSE CVE CVE-2024-7409 page https://www.suse.com/security/cve/CVE-2024-8612/ SUSE CVE CVE-2024-8612 page openSUSE Tumbleweed qemu-9.1.0-2.1 qemu-SLOF-9.1.0-2.1 qemu-accel-qtest-9.1.0-2.1 qemu-accel-tcg-x86-9.1.0-2.1 qemu-arm-9.1.0-2.1 qemu-audio-alsa-9.1.0-2.1 qemu-audio-dbus-9.1.0-2.1 qemu-audio-jack-9.1.0-2.1 qemu-audio-oss-9.1.0-2.1 qemu-audio-pa-9.1.0-2.1 qemu-audio-pipewire-9.1.0-2.1 qemu-audio-spice-9.1.0-2.1 qemu-block-curl-9.1.0-2.1 qemu-block-dmg-9.1.0-2.1 qemu-block-gluster-9.1.0-2.1 qemu-block-iscsi-9.1.0-2.1 qemu-block-nfs-9.1.0-2.1 qemu-block-rbd-9.1.0-2.1 qemu-block-ssh-9.1.0-2.1 qemu-chardev-baum-9.1.0-2.1 qemu-chardev-spice-9.1.0-2.1 qemu-doc-9.1.0-2.1 qemu-extra-9.1.0-2.1 qemu-guest-agent-9.1.0-2.1 qemu-headless-9.1.0-2.1 qemu-hw-display-qxl-9.1.0-2.1 qemu-hw-display-virtio-gpu-9.1.0-2.1 qemu-hw-display-virtio-gpu-pci-9.1.0-2.1 qemu-hw-display-virtio-vga-9.1.0-2.1 qemu-hw-s390x-virtio-gpu-ccw-9.1.0-2.1 qemu-hw-usb-host-9.1.0-2.1 qemu-hw-usb-redirect-9.1.0-2.1 qemu-hw-usb-smartcard-9.1.0-2.1 qemu-img-9.1.0-2.1 qemu-ipxe-9.1.0-2.1 qemu-ivshmem-tools-9.1.0-2.1 qemu-ksm-9.1.0-2.1 qemu-lang-9.1.0-2.1 qemu-microvm-9.1.0-2.1 qemu-ppc-9.1.0-2.1 qemu-pr-helper-9.1.0-2.1 qemu-s390x-9.1.0-2.1 qemu-seabios-9.1.01.16.3_3_gc13ff2cd-2.1 qemu-skiboot-9.1.0-2.1 qemu-spice-9.1.0-2.1 qemu-tools-9.1.0-2.1 qemu-ui-curses-9.1.0-2.1 qemu-ui-dbus-9.1.0-2.1 qemu-ui-gtk-9.1.0-2.1 qemu-ui-opengl-9.1.0-2.1 qemu-ui-spice-app-9.1.0-2.1 qemu-ui-spice-core-9.1.0-2.1 qemu-vgabios-9.1.01.16.3_3_gc13ff2cd-2.1 qemu-vhost-user-gpu-9.1.0-2.1 qemu-vmsr-helper-9.1.0-2.1 qemu-x86-9.1.0-2.1 qemu-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-SLOF-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-accel-qtest-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-accel-tcg-x86-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-arm-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-audio-alsa-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-audio-dbus-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-audio-jack-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-audio-oss-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-audio-pa-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-audio-pipewire-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-audio-spice-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-block-curl-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-block-dmg-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-block-gluster-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-block-iscsi-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-block-nfs-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-block-rbd-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-block-ssh-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-chardev-baum-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-chardev-spice-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-doc-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-extra-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-guest-agent-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-headless-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-hw-display-qxl-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-gpu-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-gpu-pci-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-hw-display-virtio-vga-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-hw-s390x-virtio-gpu-ccw-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-hw-usb-host-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-hw-usb-redirect-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-hw-usb-smartcard-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-img-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-ipxe-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-ivshmem-tools-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-ksm-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-lang-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-microvm-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-ppc-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-pr-helper-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-s390x-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-seabios-9.1.01.16.3_3_gc13ff2cd-2.1 as a component of openSUSE Tumbleweed qemu-skiboot-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-spice-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-tools-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-ui-curses-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-ui-dbus-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-ui-gtk-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-ui-opengl-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-ui-spice-app-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-ui-spice-core-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-vgabios-9.1.01.16.3_3_gc13ff2cd-2.1 as a component of openSUSE Tumbleweed qemu-vhost-user-gpu-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-vmsr-helper-9.1.0-2.1 as a component of openSUSE Tumbleweed qemu-x86-9.1.0-2.1 as a component of openSUSE Tumbleweed A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file. CVE-2024-4467 openSUSE Tumbleweed:qemu-9.1.0-2.1 openSUSE Tumbleweed:qemu-SLOF-9.1.0-2.1 openSUSE Tumbleweed:qemu-accel-qtest-9.1.0-2.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-9.1.0-2.1 openSUSE Tumbleweed:qemu-arm-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-alsa-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-dbus-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-jack-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-oss-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-pa-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-pipewire-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-spice-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-curl-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-dmg-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-gluster-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-iscsi-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-nfs-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-rbd-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-ssh-9.1.0-2.1 openSUSE Tumbleweed:qemu-chardev-baum-9.1.0-2.1 openSUSE Tumbleweed:qemu-chardev-spice-9.1.0-2.1 openSUSE Tumbleweed:qemu-doc-9.1.0-2.1 openSUSE Tumbleweed:qemu-extra-9.1.0-2.1 openSUSE Tumbleweed:qemu-guest-agent-9.1.0-2.1 openSUSE Tumbleweed:qemu-headless-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-display-qxl-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-usb-host-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-9.1.0-2.1 openSUSE Tumbleweed:qemu-img-9.1.0-2.1 openSUSE Tumbleweed:qemu-ipxe-9.1.0-2.1 openSUSE Tumbleweed:qemu-ivshmem-tools-9.1.0-2.1 openSUSE Tumbleweed:qemu-ksm-9.1.0-2.1 openSUSE Tumbleweed:qemu-lang-9.1.0-2.1 openSUSE Tumbleweed:qemu-microvm-9.1.0-2.1 openSUSE Tumbleweed:qemu-ppc-9.1.0-2.1 openSUSE Tumbleweed:qemu-pr-helper-9.1.0-2.1 openSUSE Tumbleweed:qemu-s390x-9.1.0-2.1 openSUSE Tumbleweed:qemu-seabios-9.1.01.16.3_3_gc13ff2cd-2.1 openSUSE Tumbleweed:qemu-skiboot-9.1.0-2.1 openSUSE Tumbleweed:qemu-spice-9.1.0-2.1 openSUSE Tumbleweed:qemu-tools-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-curses-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-dbus-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-gtk-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-opengl-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-spice-app-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-spice-core-9.1.0-2.1 openSUSE Tumbleweed:qemu-vgabios-9.1.01.16.3_3_gc13ff2cd-2.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-9.1.0-2.1 openSUSE Tumbleweed:qemu-vmsr-helper-9.1.0-2.1 openSUSE Tumbleweed:qemu-x86-9.1.0-2.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EPDARJICNXP6BQXL6RDWC63AJMWSDEU5/ https://www.suse.com/security/cve/CVE-2024-4467.html CVE-2024-4467 https://bugzilla.suse.com/1227322 SUSE Bug 1227322 A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline. CVE-2024-7409 openSUSE Tumbleweed:qemu-9.1.0-2.1 openSUSE Tumbleweed:qemu-SLOF-9.1.0-2.1 openSUSE Tumbleweed:qemu-accel-qtest-9.1.0-2.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-9.1.0-2.1 openSUSE Tumbleweed:qemu-arm-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-alsa-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-dbus-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-jack-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-oss-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-pa-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-pipewire-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-spice-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-curl-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-dmg-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-gluster-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-iscsi-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-nfs-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-rbd-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-ssh-9.1.0-2.1 openSUSE Tumbleweed:qemu-chardev-baum-9.1.0-2.1 openSUSE Tumbleweed:qemu-chardev-spice-9.1.0-2.1 openSUSE Tumbleweed:qemu-doc-9.1.0-2.1 openSUSE Tumbleweed:qemu-extra-9.1.0-2.1 openSUSE Tumbleweed:qemu-guest-agent-9.1.0-2.1 openSUSE Tumbleweed:qemu-headless-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-display-qxl-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-usb-host-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-9.1.0-2.1 openSUSE Tumbleweed:qemu-img-9.1.0-2.1 openSUSE Tumbleweed:qemu-ipxe-9.1.0-2.1 openSUSE Tumbleweed:qemu-ivshmem-tools-9.1.0-2.1 openSUSE Tumbleweed:qemu-ksm-9.1.0-2.1 openSUSE Tumbleweed:qemu-lang-9.1.0-2.1 openSUSE Tumbleweed:qemu-microvm-9.1.0-2.1 openSUSE Tumbleweed:qemu-ppc-9.1.0-2.1 openSUSE Tumbleweed:qemu-pr-helper-9.1.0-2.1 openSUSE Tumbleweed:qemu-s390x-9.1.0-2.1 openSUSE Tumbleweed:qemu-seabios-9.1.01.16.3_3_gc13ff2cd-2.1 openSUSE Tumbleweed:qemu-skiboot-9.1.0-2.1 openSUSE Tumbleweed:qemu-spice-9.1.0-2.1 openSUSE Tumbleweed:qemu-tools-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-curses-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-dbus-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-gtk-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-opengl-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-spice-app-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-spice-core-9.1.0-2.1 openSUSE Tumbleweed:qemu-vgabios-9.1.01.16.3_3_gc13ff2cd-2.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-9.1.0-2.1 openSUSE Tumbleweed:qemu-vmsr-helper-9.1.0-2.1 openSUSE Tumbleweed:qemu-x86-9.1.0-2.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EPDARJICNXP6BQXL6RDWC63AJMWSDEU5/ https://www.suse.com/security/cve/CVE-2024-7409.html CVE-2024-7409 https://bugzilla.suse.com/1229007 SUSE Bug 1229007 A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak. CVE-2024-8612 openSUSE Tumbleweed:qemu-9.1.0-2.1 openSUSE Tumbleweed:qemu-SLOF-9.1.0-2.1 openSUSE Tumbleweed:qemu-accel-qtest-9.1.0-2.1 openSUSE Tumbleweed:qemu-accel-tcg-x86-9.1.0-2.1 openSUSE Tumbleweed:qemu-arm-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-alsa-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-dbus-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-jack-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-oss-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-pa-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-pipewire-9.1.0-2.1 openSUSE Tumbleweed:qemu-audio-spice-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-curl-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-dmg-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-gluster-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-iscsi-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-nfs-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-rbd-9.1.0-2.1 openSUSE Tumbleweed:qemu-block-ssh-9.1.0-2.1 openSUSE Tumbleweed:qemu-chardev-baum-9.1.0-2.1 openSUSE Tumbleweed:qemu-chardev-spice-9.1.0-2.1 openSUSE Tumbleweed:qemu-doc-9.1.0-2.1 openSUSE Tumbleweed:qemu-extra-9.1.0-2.1 openSUSE Tumbleweed:qemu-guest-agent-9.1.0-2.1 openSUSE Tumbleweed:qemu-headless-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-display-qxl-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-display-virtio-vga-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-usb-host-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-usb-redirect-9.1.0-2.1 openSUSE Tumbleweed:qemu-hw-usb-smartcard-9.1.0-2.1 openSUSE Tumbleweed:qemu-img-9.1.0-2.1 openSUSE Tumbleweed:qemu-ipxe-9.1.0-2.1 openSUSE Tumbleweed:qemu-ivshmem-tools-9.1.0-2.1 openSUSE Tumbleweed:qemu-ksm-9.1.0-2.1 openSUSE Tumbleweed:qemu-lang-9.1.0-2.1 openSUSE Tumbleweed:qemu-microvm-9.1.0-2.1 openSUSE Tumbleweed:qemu-ppc-9.1.0-2.1 openSUSE Tumbleweed:qemu-pr-helper-9.1.0-2.1 openSUSE Tumbleweed:qemu-s390x-9.1.0-2.1 openSUSE Tumbleweed:qemu-seabios-9.1.01.16.3_3_gc13ff2cd-2.1 openSUSE Tumbleweed:qemu-skiboot-9.1.0-2.1 openSUSE Tumbleweed:qemu-spice-9.1.0-2.1 openSUSE Tumbleweed:qemu-tools-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-curses-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-dbus-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-gtk-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-opengl-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-spice-app-9.1.0-2.1 openSUSE Tumbleweed:qemu-ui-spice-core-9.1.0-2.1 openSUSE Tumbleweed:qemu-vgabios-9.1.01.16.3_3_gc13ff2cd-2.1 openSUSE Tumbleweed:qemu-vhost-user-gpu-9.1.0-2.1 openSUSE Tumbleweed:qemu-vmsr-helper-9.1.0-2.1 openSUSE Tumbleweed:qemu-x86-9.1.0-2.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EPDARJICNXP6BQXL6RDWC63AJMWSDEU5/ https://www.suse.com/security/cve/CVE-2024-8612.html CVE-2024-8612 https://bugzilla.suse.com/1230915 SUSE Bug 1230915