Описание
Security update for qemu
This update for qemu fixes the following issues:
- CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007)
Список пакетов
SUSE Linux Enterprise Server 12 SP5-LTSS
qemu-3.1.1.1-78.1
qemu-arm-3.1.1.1-78.1
qemu-audio-alsa-3.1.1.1-78.1
qemu-audio-oss-3.1.1.1-78.1
qemu-audio-pa-3.1.1.1-78.1
qemu-audio-sdl-3.1.1.1-78.1
qemu-block-curl-3.1.1.1-78.1
qemu-block-iscsi-3.1.1.1-78.1
qemu-block-rbd-3.1.1.1-78.1
qemu-block-ssh-3.1.1.1-78.1
qemu-guest-agent-3.1.1.1-78.1
qemu-ipxe-1.0.0+-78.1
qemu-kvm-3.1.1.1-78.1
qemu-lang-3.1.1.1-78.1
qemu-ppc-3.1.1.1-78.1
qemu-s390-3.1.1.1-78.1
qemu-seabios-1.12.0_0_ga698c89-78.1
qemu-sgabios-8-78.1
qemu-tools-3.1.1.1-78.1
qemu-ui-curses-3.1.1.1-78.1
qemu-ui-gtk-3.1.1.1-78.1
qemu-ui-sdl-3.1.1.1-78.1
qemu-vgabios-1.12.0_0_ga698c89-78.1
qemu-x86-3.1.1.1-78.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
qemu-3.1.1.1-78.1
qemu-audio-alsa-3.1.1.1-78.1
qemu-audio-oss-3.1.1.1-78.1
qemu-audio-pa-3.1.1.1-78.1
qemu-audio-sdl-3.1.1.1-78.1
qemu-block-curl-3.1.1.1-78.1
qemu-block-iscsi-3.1.1.1-78.1
qemu-block-rbd-3.1.1.1-78.1
qemu-block-ssh-3.1.1.1-78.1
qemu-guest-agent-3.1.1.1-78.1
qemu-ipxe-1.0.0+-78.1
qemu-kvm-3.1.1.1-78.1
qemu-lang-3.1.1.1-78.1
qemu-seabios-1.12.0_0_ga698c89-78.1
qemu-sgabios-8-78.1
qemu-tools-3.1.1.1-78.1
qemu-ui-curses-3.1.1.1-78.1
qemu-ui-gtk-3.1.1.1-78.1
qemu-ui-sdl-3.1.1.1-78.1
qemu-vgabios-1.12.0_0_ga698c89-78.1
qemu-x86-3.1.1.1-78.1
Ссылки
- Link for SUSE-SU-2025:02530-1
- E-Mail link for SUSE-SU-2025:02530-1
- SUSE Security Ratings
- SUSE Bug 1229007
- SUSE CVE CVE-2024-7409 page
Описание
A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:qemu-3.1.1.1-78.1
SUSE Linux Enterprise Server 12 SP5-LTSS:qemu-arm-3.1.1.1-78.1
SUSE Linux Enterprise Server 12 SP5-LTSS:qemu-audio-alsa-3.1.1.1-78.1
SUSE Linux Enterprise Server 12 SP5-LTSS:qemu-audio-oss-3.1.1.1-78.1
Ссылки
- CVE-2024-7409
- SUSE Bug 1229007