SUSE-SU-2024:3077-1

Опубликовано: 02 сент. 2024

Источник: suse-cvrf

Описание

Security update for qemu

This update for qemu fixes the following issues:

CVE-2024-4467: Fixed denial of service and file read/write via qemu-img info command (bsc#1227322)

Список пакетов

Container suse/sle-micro/kvm-5.5:latest

qemu-guest-agent-7.1.0-150500.49.18.1

SUSE Linux Enterprise Micro 5.5

qemu-7.1.0-150500.49.18.1

qemu-SLOF-7.1.0-150500.49.18.1

qemu-accel-tcg-x86-7.1.0-150500.49.18.1

qemu-arm-7.1.0-150500.49.18.1

qemu-audio-spice-7.1.0-150500.49.18.1

qemu-block-curl-7.1.0-150500.49.18.1

qemu-chardev-spice-7.1.0-150500.49.18.1

qemu-guest-agent-7.1.0-150500.49.18.1

qemu-hw-display-qxl-7.1.0-150500.49.18.1

qemu-hw-display-virtio-gpu-7.1.0-150500.49.18.1

qemu-hw-display-virtio-vga-7.1.0-150500.49.18.1

qemu-hw-usb-redirect-7.1.0-150500.49.18.1

qemu-ipxe-1.0.0+-150500.49.18.1

qemu-ppc-7.1.0-150500.49.18.1

qemu-s390x-7.1.0-150500.49.18.1

qemu-seabios-1.16.0_0_gd239552-150500.49.18.1

qemu-sgabios-8-150500.49.18.1

qemu-tools-7.1.0-150500.49.18.1

qemu-ui-opengl-7.1.0-150500.49.18.1

qemu-ui-spice-core-7.1.0-150500.49.18.1

qemu-vgabios-1.16.0_0_gd239552-150500.49.18.1

qemu-x86-7.1.0-150500.49.18.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

qemu-tools-7.1.0-150500.49.18.1

SUSE Linux Enterprise Module for Package Hub 15 SP5

qemu-SLOF-7.1.0-150500.49.18.1

qemu-accel-qtest-7.1.0-150500.49.18.1

qemu-accel-tcg-x86-7.1.0-150500.49.18.1

qemu-arm-7.1.0-150500.49.18.1

qemu-audio-alsa-7.1.0-150500.49.18.1

qemu-audio-jack-7.1.0-150500.49.18.1

qemu-audio-oss-7.1.0-150500.49.18.1

qemu-audio-pa-7.1.0-150500.49.18.1

qemu-audio-spice-7.1.0-150500.49.18.1

qemu-block-dmg-7.1.0-150500.49.18.1

qemu-block-gluster-7.1.0-150500.49.18.1

qemu-block-nfs-7.1.0-150500.49.18.1

qemu-chardev-spice-7.1.0-150500.49.18.1

qemu-extra-7.1.0-150500.49.18.1

qemu-hw-display-qxl-7.1.0-150500.49.18.1

qemu-hw-display-virtio-gpu-7.1.0-150500.49.18.1

qemu-hw-display-virtio-gpu-pci-7.1.0-150500.49.18.1

qemu-hw-display-virtio-vga-7.1.0-150500.49.18.1

qemu-hw-s390x-virtio-gpu-ccw-7.1.0-150500.49.18.1

qemu-hw-usb-redirect-7.1.0-150500.49.18.1

qemu-hw-usb-smartcard-7.1.0-150500.49.18.1

qemu-ivshmem-tools-7.1.0-150500.49.18.1

qemu-microvm-7.1.0-150500.49.18.1

qemu-ppc-7.1.0-150500.49.18.1

qemu-s390x-7.1.0-150500.49.18.1

qemu-seabios-1.16.0_0_gd239552-150500.49.18.1

qemu-sgabios-8-150500.49.18.1

qemu-skiboot-7.1.0-150500.49.18.1

qemu-ui-gtk-7.1.0-150500.49.18.1

qemu-ui-opengl-7.1.0-150500.49.18.1

qemu-ui-spice-app-7.1.0-150500.49.18.1

qemu-ui-spice-core-7.1.0-150500.49.18.1

qemu-vgabios-1.16.0_0_gd239552-150500.49.18.1

qemu-vhost-user-gpu-7.1.0-150500.49.18.1

qemu-x86-7.1.0-150500.49.18.1

SUSE Linux Enterprise Module for Server Applications 15 SP5

qemu-7.1.0-150500.49.18.1

qemu-SLOF-7.1.0-150500.49.18.1

qemu-accel-tcg-x86-7.1.0-150500.49.18.1

qemu-arm-7.1.0-150500.49.18.1

qemu-audio-alsa-7.1.0-150500.49.18.1

qemu-audio-dbus-7.1.0-150500.49.18.1

qemu-audio-pa-7.1.0-150500.49.18.1

qemu-audio-spice-7.1.0-150500.49.18.1

qemu-block-curl-7.1.0-150500.49.18.1

qemu-block-iscsi-7.1.0-150500.49.18.1

qemu-block-rbd-7.1.0-150500.49.18.1

qemu-block-ssh-7.1.0-150500.49.18.1

qemu-chardev-baum-7.1.0-150500.49.18.1

qemu-chardev-spice-7.1.0-150500.49.18.1

qemu-guest-agent-7.1.0-150500.49.18.1

qemu-hw-display-qxl-7.1.0-150500.49.18.1

qemu-hw-display-virtio-gpu-7.1.0-150500.49.18.1

qemu-hw-display-virtio-gpu-pci-7.1.0-150500.49.18.1

qemu-hw-display-virtio-vga-7.1.0-150500.49.18.1

qemu-hw-s390x-virtio-gpu-ccw-7.1.0-150500.49.18.1

qemu-hw-usb-host-7.1.0-150500.49.18.1

qemu-hw-usb-redirect-7.1.0-150500.49.18.1

qemu-ipxe-1.0.0+-150500.49.18.1

qemu-ksm-7.1.0-150500.49.18.1

qemu-kvm-7.1.0-150500.49.18.1

qemu-lang-7.1.0-150500.49.18.1

qemu-ppc-7.1.0-150500.49.18.1

qemu-s390x-7.1.0-150500.49.18.1

qemu-seabios-1.16.0_0_gd239552-150500.49.18.1

qemu-sgabios-8-150500.49.18.1

qemu-skiboot-7.1.0-150500.49.18.1

qemu-ui-curses-7.1.0-150500.49.18.1

qemu-ui-dbus-7.1.0-150500.49.18.1

qemu-ui-gtk-7.1.0-150500.49.18.1

qemu-ui-opengl-7.1.0-150500.49.18.1

qemu-ui-spice-app-7.1.0-150500.49.18.1

qemu-ui-spice-core-7.1.0-150500.49.18.1

qemu-vgabios-1.16.0_0_gd239552-150500.49.18.1

qemu-x86-7.1.0-150500.49.18.1

openSUSE Leap 15.5

qemu-7.1.0-150500.49.18.1

qemu-SLOF-7.1.0-150500.49.18.1

qemu-accel-qtest-7.1.0-150500.49.18.1

qemu-accel-tcg-x86-7.1.0-150500.49.18.1

qemu-arm-7.1.0-150500.49.18.1

qemu-audio-alsa-7.1.0-150500.49.18.1

qemu-audio-dbus-7.1.0-150500.49.18.1

qemu-audio-jack-7.1.0-150500.49.18.1

qemu-audio-pa-7.1.0-150500.49.18.1

qemu-audio-spice-7.1.0-150500.49.18.1

qemu-block-curl-7.1.0-150500.49.18.1

qemu-block-dmg-7.1.0-150500.49.18.1

qemu-block-gluster-7.1.0-150500.49.18.1

qemu-block-iscsi-7.1.0-150500.49.18.1

qemu-block-nfs-7.1.0-150500.49.18.1

qemu-block-rbd-7.1.0-150500.49.18.1

qemu-block-ssh-7.1.0-150500.49.18.1

qemu-chardev-baum-7.1.0-150500.49.18.1

qemu-chardev-spice-7.1.0-150500.49.18.1

qemu-extra-7.1.0-150500.49.18.1

qemu-guest-agent-7.1.0-150500.49.18.1

qemu-hw-display-qxl-7.1.0-150500.49.18.1

qemu-hw-display-virtio-gpu-7.1.0-150500.49.18.1

qemu-hw-display-virtio-gpu-pci-7.1.0-150500.49.18.1

qemu-hw-display-virtio-vga-7.1.0-150500.49.18.1

qemu-hw-s390x-virtio-gpu-ccw-7.1.0-150500.49.18.1

qemu-hw-usb-host-7.1.0-150500.49.18.1

qemu-hw-usb-redirect-7.1.0-150500.49.18.1

qemu-hw-usb-smartcard-7.1.0-150500.49.18.1

qemu-ipxe-1.0.0+-150500.49.18.1

qemu-ivshmem-tools-7.1.0-150500.49.18.1

qemu-ksm-7.1.0-150500.49.18.1

qemu-kvm-7.1.0-150500.49.18.1

qemu-lang-7.1.0-150500.49.18.1

qemu-microvm-7.1.0-150500.49.18.1

qemu-ppc-7.1.0-150500.49.18.1

qemu-s390x-7.1.0-150500.49.18.1

qemu-seabios-1.16.0_0_gd239552-150500.49.18.1

qemu-sgabios-8-150500.49.18.1

qemu-skiboot-7.1.0-150500.49.18.1

qemu-tools-7.1.0-150500.49.18.1

qemu-ui-curses-7.1.0-150500.49.18.1

qemu-ui-dbus-7.1.0-150500.49.18.1

qemu-ui-gtk-7.1.0-150500.49.18.1

qemu-ui-opengl-7.1.0-150500.49.18.1

qemu-ui-spice-app-7.1.0-150500.49.18.1

qemu-ui-spice-core-7.1.0-150500.49.18.1

qemu-vgabios-1.16.0_0_gd239552-150500.49.18.1

qemu-vhost-user-gpu-7.1.0-150500.49.18.1

qemu-x86-7.1.0-150500.49.18.1

openSUSE Leap Micro 5.5

qemu-7.1.0-150500.49.18.1

qemu-accel-tcg-x86-7.1.0-150500.49.18.1

qemu-arm-7.1.0-150500.49.18.1

qemu-audio-spice-7.1.0-150500.49.18.1

qemu-block-curl-7.1.0-150500.49.18.1

qemu-chardev-spice-7.1.0-150500.49.18.1

qemu-guest-agent-7.1.0-150500.49.18.1

qemu-hw-display-qxl-7.1.0-150500.49.18.1

qemu-hw-display-virtio-gpu-7.1.0-150500.49.18.1

qemu-hw-display-virtio-vga-7.1.0-150500.49.18.1

qemu-hw-usb-redirect-7.1.0-150500.49.18.1

qemu-ipxe-1.0.0+-150500.49.18.1

qemu-s390x-7.1.0-150500.49.18.1

qemu-seabios-1.16.0_0_gd239552-150500.49.18.1

qemu-sgabios-8-150500.49.18.1

qemu-tools-7.1.0-150500.49.18.1

qemu-ui-opengl-7.1.0-150500.49.18.1

qemu-ui-spice-core-7.1.0-150500.49.18.1

qemu-vgabios-1.16.0_0_gd239552-150500.49.18.1

qemu-x86-7.1.0-150500.49.18.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20243077-1/
Link for SUSE-SU-2024:3077-1
https://lists.suse.com/pipermail/sle-updates/2024-September/036725.html
E-Mail link for SUSE-SU-2024:3077-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1227322
SUSE Bug 1227322
https://www.suse.com/security/cve/CVE-2024-4467/
SUSE CVE CVE-2024-4467 page

Описание

A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write to an existing external file.

Затронутые продукты

Container suse/sle-micro/kvm-5.5:latest:qemu-guest-agent-7.1.0-150500.49.18.1

SUSE Linux Enterprise Micro 5.5:qemu-7.1.0-150500.49.18.1

SUSE Linux Enterprise Micro 5.5:qemu-SLOF-7.1.0-150500.49.18.1

SUSE Linux Enterprise Micro 5.5:qemu-accel-tcg-x86-7.1.0-150500.49.18.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-4467.html
CVE-2024-4467
https://bugzilla.suse.com/1227322
SUSE Bug 1227322

SUSE-SU-2024:3077-1

Описание

Список пакетов

Container suse/sle-micro/kvm-5.5:latest

SUSE Linux Enterprise Micro 5.5

SUSE Linux Enterprise Module for Basesystem 15 SP5

SUSE Linux Enterprise Module for Package Hub 15 SP5

SUSE Linux Enterprise Module for Server Applications 15 SP5

openSUSE Leap 15.5

openSUSE Leap Micro 5.5

Ссылки

Уязвимость: CVE-2024-4467

Описание

Затронутые продукты

Ссылки