Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:4094-1 Final 1 1 2024-11-28T11:56:42Z current 2024-11-28T11:56:42Z 2024-11-28T11:56:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: Security fixes: - CVE-2024-8354: Fixed assertion failure in usb_ep_get() (bsc#1230834) - CVE-2024-8612: Fixed information leak in virtio devices (bsc#1230915) Update version to 8.2.7: Security fixes: - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007) - CVE-2024-4693: Fixed improper release of configure vector in virtio-pci that lead to guest triggerable crash (bsc#1224132) Other fixes: - added missing fix for ppc64 emulation that caused corruption in userspace (bsc#1230140) - target/ppc: Fix lxvx/stxvx facility check (bsc#1229929) - accel/kvm: check for KVM_CAP_READONLY_MEM on VM (bsc#1231519) Full changelog here: https://lore.kernel.org/qemu-devel/d9ff276f-f1ba-4e90-8343-a7a0dc2bf305@tls.msk.ru/ The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/kiwi:latest-2024-4094,Image SLES15-SP6-EC2-ECS-HVM-2024-4094,SUSE-2024-4094,SUSE-SLE-Module-Basesystem-15-SP6-2024-4094,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-4094,SUSE-SLE-Module-Server-Applications-15-SP6-2024-4094,openSUSE-SLE-15.6-2024-4094 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20244094-1/ Link for SUSE-SU-2024:4094-1 https://lists.suse.com/pipermail/sle-security-updates/2024-November/019861.html E-Mail link for SUSE-SU-2024:4094-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1224132 SUSE Bug 1224132 https://bugzilla.suse.com/1229007 SUSE Bug 1229007 https://bugzilla.suse.com/1229929 SUSE Bug 1229929 https://bugzilla.suse.com/1230140 SUSE Bug 1230140 https://bugzilla.suse.com/1230834 SUSE Bug 1230834 https://bugzilla.suse.com/1230915 SUSE Bug 1230915 https://bugzilla.suse.com/1231519 SUSE Bug 1231519 https://www.suse.com/security/cve/CVE-2024-4693/ SUSE CVE CVE-2024-4693 page https://www.suse.com/security/cve/CVE-2024-7409/ SUSE CVE CVE-2024-7409 page https://www.suse.com/security/cve/CVE-2024-8354/ SUSE CVE CVE-2024-8354 page https://www.suse.com/security/cve/CVE-2024-8612/ SUSE CVE CVE-2024-8612 page Container bci/kiwi:latest Image SLES15-SP6-EC2-ECS-HVM SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP6 openSUSE Leap 15.6 qemu-img-8.2.7-150600.3.20.1 qemu-pr-helper-8.2.7-150600.3.20.1 qemu-tools-8.2.7-150600.3.20.1 qemu-8.2.7-150600.3.20.1 qemu-SLOF-8.2.7-150600.3.20.1 qemu-accel-qtest-8.2.7-150600.3.20.1 qemu-accel-tcg-x86-8.2.7-150600.3.20.1 qemu-arm-8.2.7-150600.3.20.1 qemu-audio-alsa-8.2.7-150600.3.20.1 qemu-audio-dbus-8.2.7-150600.3.20.1 qemu-audio-jack-8.2.7-150600.3.20.1 qemu-audio-oss-8.2.7-150600.3.20.1 qemu-audio-pa-8.2.7-150600.3.20.1 qemu-audio-pipewire-8.2.7-150600.3.20.1 qemu-audio-spice-8.2.7-150600.3.20.1 qemu-block-curl-8.2.7-150600.3.20.1 qemu-block-dmg-8.2.7-150600.3.20.1 qemu-block-gluster-8.2.7-150600.3.20.1 qemu-block-iscsi-8.2.7-150600.3.20.1 qemu-block-nfs-8.2.7-150600.3.20.1 qemu-block-rbd-8.2.7-150600.3.20.1 qemu-block-ssh-8.2.7-150600.3.20.1 qemu-chardev-baum-8.2.7-150600.3.20.1 qemu-chardev-spice-8.2.7-150600.3.20.1 qemu-doc-8.2.7-150600.3.20.1 qemu-extra-8.2.7-150600.3.20.1 qemu-guest-agent-8.2.7-150600.3.20.1 qemu-headless-8.2.7-150600.3.20.1 qemu-hw-display-qxl-8.2.7-150600.3.20.1 qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 qemu-hw-usb-host-8.2.7-150600.3.20.1 qemu-hw-usb-redirect-8.2.7-150600.3.20.1 qemu-hw-usb-smartcard-8.2.7-150600.3.20.1 qemu-ipxe-8.2.7-150600.3.20.1 qemu-ivshmem-tools-8.2.7-150600.3.20.1 qemu-ksm-8.2.7-150600.3.20.1 qemu-lang-8.2.7-150600.3.20.1 qemu-linux-user-8.2.7-150600.3.20.1 qemu-microvm-8.2.7-150600.3.20.1 qemu-ppc-8.2.7-150600.3.20.1 qemu-s390x-8.2.7-150600.3.20.1 qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 qemu-skiboot-8.2.7-150600.3.20.1 qemu-spice-8.2.7-150600.3.20.1 qemu-ui-curses-8.2.7-150600.3.20.1 qemu-ui-dbus-8.2.7-150600.3.20.1 qemu-ui-gtk-8.2.7-150600.3.20.1 qemu-ui-opengl-8.2.7-150600.3.20.1 qemu-ui-spice-app-8.2.7-150600.3.20.1 qemu-ui-spice-core-8.2.7-150600.3.20.1 qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 qemu-vhost-user-gpu-8.2.7-150600.3.20.1 qemu-x86-8.2.7-150600.3.20.1 qemu-img-8.2.7-150600.3.20.1 as a component of Container bci/kiwi:latest qemu-pr-helper-8.2.7-150600.3.20.1 as a component of Container bci/kiwi:latest qemu-tools-8.2.7-150600.3.20.1 as a component of Container bci/kiwi:latest qemu-img-8.2.7-150600.3.20.1 as a component of Image SLES15-SP6-EC2-ECS-HVM qemu-pr-helper-8.2.7-150600.3.20.1 as a component of Image SLES15-SP6-EC2-ECS-HVM qemu-tools-8.2.7-150600.3.20.1 as a component of Image SLES15-SP6-EC2-ECS-HVM qemu-img-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 qemu-pr-helper-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 qemu-tools-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 qemu-SLOF-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-accel-qtest-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-accel-tcg-x86-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-arm-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-audio-alsa-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-audio-jack-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-audio-oss-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-audio-pa-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-audio-spice-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-block-dmg-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-block-gluster-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-block-nfs-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-chardev-spice-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-extra-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-hw-display-qxl-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-hw-usb-redirect-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-hw-usb-smartcard-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-ivshmem-tools-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-linux-user-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-microvm-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-ppc-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-s390x-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-skiboot-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-ui-gtk-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-ui-opengl-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-ui-spice-app-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-ui-spice-core-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-vhost-user-gpu-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-x86-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 qemu-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-SLOF-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-accel-tcg-x86-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-arm-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-audio-alsa-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-audio-dbus-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-audio-pa-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-audio-pipewire-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-audio-spice-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-block-curl-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-block-iscsi-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-block-nfs-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-block-rbd-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-block-ssh-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-chardev-baum-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-chardev-spice-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-guest-agent-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-headless-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-hw-display-qxl-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-hw-usb-host-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-hw-usb-redirect-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-ipxe-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-ksm-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-lang-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-ppc-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-s390x-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-skiboot-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-spice-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-ui-curses-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-ui-dbus-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-ui-gtk-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-ui-opengl-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-ui-spice-app-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-ui-spice-core-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-x86-8.2.7-150600.3.20.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 qemu-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-SLOF-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-accel-qtest-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-accel-tcg-x86-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-arm-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-audio-alsa-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-audio-dbus-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-audio-jack-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-audio-pa-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-audio-pipewire-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-audio-spice-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-block-curl-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-block-dmg-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-block-gluster-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-block-iscsi-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-block-nfs-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-block-rbd-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-block-ssh-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-chardev-baum-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-chardev-spice-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-doc-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-extra-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-guest-agent-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-headless-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-hw-display-qxl-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-hw-usb-host-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-hw-usb-redirect-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-hw-usb-smartcard-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-img-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-ipxe-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-ivshmem-tools-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-ksm-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-lang-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-linux-user-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-microvm-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-ppc-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-pr-helper-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-s390x-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-skiboot-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-spice-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-tools-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-ui-curses-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-ui-dbus-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-ui-gtk-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-ui-opengl-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-ui-spice-app-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-ui-spice-core-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-vhost-user-gpu-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 qemu-x86-8.2.7-150600.3.20.1 as a component of openSUSE Leap 15.6 A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/virtio-pci.c). An improper release and use of the irqfd for vector 0 during the boot process leads to a guest triggerable crash via vhost_net_stop(). This flaw allows a malicious guest to crash the QEMU process on the host. CVE-2024-4693 Container bci/kiwi:latest:qemu-img-8.2.7-150600.3.20.1 Container bci/kiwi:latest:qemu-pr-helper-8.2.7-150600.3.20.1 Container bci/kiwi:latest:qemu-tools-8.2.7-150600.3.20.1 Image SLES15-SP6-EC2-ECS-HVM:qemu-img-8.2.7-150600.3.20.1 Image SLES15-SP6-EC2-ECS-HVM:qemu-pr-helper-8.2.7-150600.3.20.1 Image SLES15-SP6-EC2-ECS-HVM:qemu-tools-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:qemu-img-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:qemu-pr-helper-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:qemu-tools-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-SLOF-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-accel-qtest-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-accel-tcg-x86-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-arm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-alsa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-jack-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-oss-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-pa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-block-dmg-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-block-gluster-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-block-nfs-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-chardev-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-extra-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-qxl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-usb-redirect-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-usb-smartcard-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ivshmem-tools-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-linux-user-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-microvm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ppc-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-s390x-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-skiboot-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-gtk-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-opengl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-spice-app-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-spice-core-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-vhost-user-gpu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-x86-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-SLOF-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-accel-tcg-x86-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-arm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-alsa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-dbus-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-pa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-pipewire-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-curl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-iscsi-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-nfs-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-rbd-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-ssh-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-chardev-baum-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-chardev-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-guest-agent-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-headless-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-qxl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-usb-host-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-usb-redirect-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ipxe-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ksm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-lang-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ppc-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-s390x-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-skiboot-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-curses-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-dbus-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-gtk-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-opengl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-spice-app-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-spice-core-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-x86-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-SLOF-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-accel-qtest-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-accel-tcg-x86-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-arm-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-alsa-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-dbus-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-jack-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-pa-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-pipewire-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-spice-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-curl-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-dmg-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-gluster-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-iscsi-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-nfs-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-rbd-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-ssh-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-chardev-baum-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-chardev-spice-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-doc-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-extra-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-guest-agent-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-headless-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-qxl-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-usb-host-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-usb-redirect-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-usb-smartcard-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-img-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ipxe-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ivshmem-tools-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ksm-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-lang-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-linux-user-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-microvm-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ppc-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-pr-helper-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-s390x-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 openSUSE Leap 15.6:qemu-skiboot-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-spice-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-tools-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-curses-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-dbus-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-gtk-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-opengl-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-spice-app-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-spice-core-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 openSUSE Leap 15.6:qemu-vhost-user-gpu-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-x86-8.2.7-150600.3.20.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20244094-1/ https://www.suse.com/security/cve/CVE-2024-4693.html CVE-2024-4693 https://bugzilla.suse.com/1224132 SUSE Bug 1224132 A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline. CVE-2024-7409 Container bci/kiwi:latest:qemu-img-8.2.7-150600.3.20.1 Container bci/kiwi:latest:qemu-pr-helper-8.2.7-150600.3.20.1 Container bci/kiwi:latest:qemu-tools-8.2.7-150600.3.20.1 Image SLES15-SP6-EC2-ECS-HVM:qemu-img-8.2.7-150600.3.20.1 Image SLES15-SP6-EC2-ECS-HVM:qemu-pr-helper-8.2.7-150600.3.20.1 Image SLES15-SP6-EC2-ECS-HVM:qemu-tools-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:qemu-img-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:qemu-pr-helper-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:qemu-tools-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-SLOF-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-accel-qtest-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-accel-tcg-x86-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-arm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-alsa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-jack-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-oss-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-pa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-block-dmg-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-block-gluster-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-block-nfs-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-chardev-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-extra-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-qxl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-usb-redirect-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-usb-smartcard-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ivshmem-tools-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-linux-user-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-microvm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ppc-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-s390x-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-skiboot-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-gtk-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-opengl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-spice-app-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-spice-core-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-vhost-user-gpu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-x86-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-SLOF-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-accel-tcg-x86-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-arm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-alsa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-dbus-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-pa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-pipewire-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-curl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-iscsi-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-nfs-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-rbd-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-ssh-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-chardev-baum-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-chardev-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-guest-agent-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-headless-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-qxl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-usb-host-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-usb-redirect-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ipxe-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ksm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-lang-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ppc-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-s390x-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-skiboot-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-curses-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-dbus-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-gtk-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-opengl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-spice-app-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-spice-core-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-x86-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-SLOF-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-accel-qtest-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-accel-tcg-x86-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-arm-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-alsa-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-dbus-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-jack-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-pa-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-pipewire-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-spice-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-curl-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-dmg-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-gluster-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-iscsi-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-nfs-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-rbd-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-ssh-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-chardev-baum-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-chardev-spice-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-doc-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-extra-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-guest-agent-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-headless-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-qxl-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-usb-host-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-usb-redirect-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-usb-smartcard-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-img-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ipxe-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ivshmem-tools-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ksm-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-lang-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-linux-user-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-microvm-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ppc-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-pr-helper-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-s390x-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 openSUSE Leap 15.6:qemu-skiboot-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-spice-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-tools-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-curses-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-dbus-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-gtk-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-opengl-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-spice-app-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-spice-core-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 openSUSE Leap 15.6:qemu-vhost-user-gpu-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-x86-8.2.7-150600.3.20.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20244094-1/ https://www.suse.com/security/cve/CVE-2024-7409.html CVE-2024-7409 https://bugzilla.suse.com/1229007 SUSE Bug 1229007 A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition. CVE-2024-8354 Container bci/kiwi:latest:qemu-img-8.2.7-150600.3.20.1 Container bci/kiwi:latest:qemu-pr-helper-8.2.7-150600.3.20.1 Container bci/kiwi:latest:qemu-tools-8.2.7-150600.3.20.1 Image SLES15-SP6-EC2-ECS-HVM:qemu-img-8.2.7-150600.3.20.1 Image SLES15-SP6-EC2-ECS-HVM:qemu-pr-helper-8.2.7-150600.3.20.1 Image SLES15-SP6-EC2-ECS-HVM:qemu-tools-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:qemu-img-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:qemu-pr-helper-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:qemu-tools-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-SLOF-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-accel-qtest-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-accel-tcg-x86-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-arm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-alsa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-jack-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-oss-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-pa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-block-dmg-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-block-gluster-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-block-nfs-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-chardev-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-extra-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-qxl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-usb-redirect-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-usb-smartcard-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ivshmem-tools-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-linux-user-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-microvm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ppc-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-s390x-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-skiboot-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-gtk-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-opengl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-spice-app-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-spice-core-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-vhost-user-gpu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-x86-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-SLOF-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-accel-tcg-x86-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-arm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-alsa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-dbus-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-pa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-pipewire-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-curl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-iscsi-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-nfs-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-rbd-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-ssh-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-chardev-baum-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-chardev-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-guest-agent-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-headless-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-qxl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-usb-host-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-usb-redirect-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ipxe-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ksm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-lang-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ppc-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-s390x-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-skiboot-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-curses-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-dbus-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-gtk-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-opengl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-spice-app-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-spice-core-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-x86-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-SLOF-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-accel-qtest-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-accel-tcg-x86-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-arm-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-alsa-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-dbus-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-jack-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-pa-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-pipewire-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-spice-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-curl-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-dmg-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-gluster-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-iscsi-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-nfs-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-rbd-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-ssh-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-chardev-baum-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-chardev-spice-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-doc-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-extra-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-guest-agent-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-headless-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-qxl-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-usb-host-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-usb-redirect-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-usb-smartcard-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-img-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ipxe-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ivshmem-tools-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ksm-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-lang-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-linux-user-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-microvm-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ppc-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-pr-helper-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-s390x-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 openSUSE Leap 15.6:qemu-skiboot-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-spice-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-tools-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-curses-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-dbus-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-gtk-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-opengl-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-spice-app-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-spice-core-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 openSUSE Leap 15.6:qemu-vhost-user-gpu-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-x86-8.2.7-150600.3.20.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20244094-1/ https://www.suse.com/security/cve/CVE-2024-8354.html CVE-2024-8354 https://bugzilla.suse.com/1230834 SUSE Bug 1230834 A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak. CVE-2024-8612 Container bci/kiwi:latest:qemu-img-8.2.7-150600.3.20.1 Container bci/kiwi:latest:qemu-pr-helper-8.2.7-150600.3.20.1 Container bci/kiwi:latest:qemu-tools-8.2.7-150600.3.20.1 Image SLES15-SP6-EC2-ECS-HVM:qemu-img-8.2.7-150600.3.20.1 Image SLES15-SP6-EC2-ECS-HVM:qemu-pr-helper-8.2.7-150600.3.20.1 Image SLES15-SP6-EC2-ECS-HVM:qemu-tools-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:qemu-img-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:qemu-pr-helper-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:qemu-tools-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-SLOF-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-accel-qtest-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-accel-tcg-x86-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-arm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-alsa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-jack-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-oss-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-pa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-audio-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-block-dmg-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-block-gluster-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-block-nfs-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-chardev-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-extra-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-qxl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-usb-redirect-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-hw-usb-smartcard-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ivshmem-tools-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-linux-user-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-microvm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ppc-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-s390x-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-skiboot-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-gtk-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-opengl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-spice-app-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-ui-spice-core-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-vhost-user-gpu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:qemu-x86-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-SLOF-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-accel-tcg-x86-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-arm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-alsa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-dbus-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-pa-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-pipewire-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-audio-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-curl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-iscsi-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-nfs-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-rbd-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-block-ssh-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-chardev-baum-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-chardev-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-guest-agent-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-headless-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-qxl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-usb-host-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-hw-usb-redirect-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ipxe-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ksm-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-lang-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ppc-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-s390x-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-skiboot-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-spice-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-curses-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-dbus-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-gtk-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-opengl-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-spice-app-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-ui-spice-core-8.2.7-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 SUSE Linux Enterprise Module for Server Applications 15 SP6:qemu-x86-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-SLOF-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-accel-qtest-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-accel-tcg-x86-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-arm-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-alsa-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-dbus-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-jack-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-pa-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-pipewire-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-audio-spice-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-curl-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-dmg-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-gluster-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-iscsi-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-nfs-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-rbd-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-block-ssh-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-chardev-baum-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-chardev-spice-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-doc-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-extra-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-guest-agent-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-headless-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-qxl-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-virtio-gpu-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-virtio-gpu-pci-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-display-virtio-vga-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-s390x-virtio-gpu-ccw-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-usb-host-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-usb-redirect-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-hw-usb-smartcard-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-img-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ipxe-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ivshmem-tools-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ksm-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-lang-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-linux-user-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-microvm-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ppc-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-pr-helper-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-s390x-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-seabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 openSUSE Leap 15.6:qemu-skiboot-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-spice-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-tools-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-curses-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-dbus-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-gtk-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-opengl-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-spice-app-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-ui-spice-core-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-vgabios-8.2.71.16.3_3_ga95067eb-150600.3.20.1 openSUSE Leap 15.6:qemu-vhost-user-gpu-8.2.7-150600.3.20.1 openSUSE Leap 15.6:qemu-x86-8.2.7-150600.3.20.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20244094-1/ https://www.suse.com/security/cve/CVE-2024-8612.html CVE-2024-8612 https://bugzilla.suse.com/1230915 SUSE Bug 1230915