SUSE-SU-2025:0692-1

Опубликовано: 24 фев. 2025

Источник: suse-cvrf

Описание

Security update for qemu

This update for qemu fixes the following issues:

CVE-2024-8612: Fixed information leak in virtio devices (bsc#1230915).
CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007).
CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845).

Other fixes:

Fix ipxe build with new binutils (bsc#1219733, bsc#1219722).

Список пакетов

Container suse/sle-micro-rancher/5.2:latest

qemu-guest-agent-5.2.0-150300.135.1

SUSE Enterprise Storage 7.1

qemu-5.2.0-150300.135.1

qemu-arm-5.2.0-150300.135.1

qemu-audio-alsa-5.2.0-150300.135.1

qemu-audio-pa-5.2.0-150300.135.1

qemu-audio-spice-5.2.0-150300.135.1

qemu-block-curl-5.2.0-150300.135.1

qemu-block-iscsi-5.2.0-150300.135.1

qemu-block-rbd-5.2.0-150300.135.1

qemu-block-ssh-5.2.0-150300.135.1

qemu-chardev-baum-5.2.0-150300.135.1

qemu-chardev-spice-5.2.0-150300.135.1

qemu-guest-agent-5.2.0-150300.135.1

qemu-hw-display-qxl-5.2.0-150300.135.1

qemu-hw-display-virtio-gpu-5.2.0-150300.135.1

qemu-hw-display-virtio-gpu-pci-5.2.0-150300.135.1

qemu-hw-display-virtio-vga-5.2.0-150300.135.1

qemu-hw-usb-redirect-5.2.0-150300.135.1

qemu-ipxe-1.0.0+-150300.135.1

qemu-ksm-5.2.0-150300.135.1

qemu-kvm-5.2.0-150300.135.1

qemu-lang-5.2.0-150300.135.1

qemu-seabios-1.14.0_0_g155821a-150300.135.1

qemu-sgabios-8-150300.135.1

qemu-tools-5.2.0-150300.135.1

qemu-ui-curses-5.2.0-150300.135.1

qemu-ui-gtk-5.2.0-150300.135.1

qemu-ui-opengl-5.2.0-150300.135.1

qemu-ui-spice-app-5.2.0-150300.135.1

qemu-ui-spice-core-5.2.0-150300.135.1

qemu-vgabios-1.14.0_0_g155821a-150300.135.1

qemu-x86-5.2.0-150300.135.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

qemu-5.2.0-150300.135.1

qemu-arm-5.2.0-150300.135.1

qemu-audio-alsa-5.2.0-150300.135.1

qemu-audio-pa-5.2.0-150300.135.1

qemu-audio-spice-5.2.0-150300.135.1

qemu-block-curl-5.2.0-150300.135.1

qemu-block-iscsi-5.2.0-150300.135.1

qemu-block-rbd-5.2.0-150300.135.1

qemu-block-ssh-5.2.0-150300.135.1

qemu-chardev-baum-5.2.0-150300.135.1

qemu-chardev-spice-5.2.0-150300.135.1

qemu-guest-agent-5.2.0-150300.135.1

qemu-hw-display-qxl-5.2.0-150300.135.1

qemu-hw-display-virtio-gpu-5.2.0-150300.135.1

qemu-hw-display-virtio-gpu-pci-5.2.0-150300.135.1

qemu-hw-display-virtio-vga-5.2.0-150300.135.1

qemu-hw-usb-redirect-5.2.0-150300.135.1

qemu-ipxe-1.0.0+-150300.135.1

qemu-ksm-5.2.0-150300.135.1

qemu-kvm-5.2.0-150300.135.1

qemu-lang-5.2.0-150300.135.1

qemu-seabios-1.14.0_0_g155821a-150300.135.1

qemu-sgabios-8-150300.135.1

qemu-tools-5.2.0-150300.135.1

qemu-ui-curses-5.2.0-150300.135.1

qemu-ui-gtk-5.2.0-150300.135.1

qemu-ui-opengl-5.2.0-150300.135.1

qemu-ui-spice-app-5.2.0-150300.135.1

qemu-ui-spice-core-5.2.0-150300.135.1

qemu-vgabios-1.14.0_0_g155821a-150300.135.1

qemu-x86-5.2.0-150300.135.1

SUSE Linux Enterprise Micro 5.1

qemu-5.2.0-150300.135.1

qemu-arm-5.2.0-150300.135.1

qemu-ipxe-1.0.0+-150300.135.1

qemu-s390x-5.2.0-150300.135.1

qemu-seabios-1.14.0_0_g155821a-150300.135.1

qemu-sgabios-8-150300.135.1

qemu-tools-5.2.0-150300.135.1

qemu-vgabios-1.14.0_0_g155821a-150300.135.1

qemu-x86-5.2.0-150300.135.1

SUSE Linux Enterprise Micro 5.2

qemu-5.2.0-150300.135.1

qemu-arm-5.2.0-150300.135.1

qemu-audio-spice-5.2.0-150300.135.1

qemu-chardev-spice-5.2.0-150300.135.1

qemu-guest-agent-5.2.0-150300.135.1

qemu-hw-display-qxl-5.2.0-150300.135.1

qemu-hw-display-virtio-gpu-5.2.0-150300.135.1

qemu-hw-display-virtio-vga-5.2.0-150300.135.1

qemu-hw-usb-redirect-5.2.0-150300.135.1

qemu-ipxe-1.0.0+-150300.135.1

qemu-s390x-5.2.0-150300.135.1

qemu-seabios-1.14.0_0_g155821a-150300.135.1

qemu-sgabios-8-150300.135.1

qemu-tools-5.2.0-150300.135.1

qemu-ui-opengl-5.2.0-150300.135.1

qemu-ui-spice-core-5.2.0-150300.135.1

qemu-vgabios-1.14.0_0_g155821a-150300.135.1

qemu-x86-5.2.0-150300.135.1

SUSE Linux Enterprise Server 15 SP3-LTSS

qemu-5.2.0-150300.135.1

qemu-SLOF-5.2.0-150300.135.1

qemu-arm-5.2.0-150300.135.1

qemu-audio-alsa-5.2.0-150300.135.1

qemu-audio-pa-5.2.0-150300.135.1

qemu-audio-spice-5.2.0-150300.135.1

qemu-block-curl-5.2.0-150300.135.1

qemu-block-iscsi-5.2.0-150300.135.1

qemu-block-rbd-5.2.0-150300.135.1

qemu-block-ssh-5.2.0-150300.135.1

qemu-chardev-baum-5.2.0-150300.135.1

qemu-chardev-spice-5.2.0-150300.135.1

qemu-guest-agent-5.2.0-150300.135.1

qemu-hw-display-qxl-5.2.0-150300.135.1

qemu-hw-display-virtio-gpu-5.2.0-150300.135.1

qemu-hw-display-virtio-gpu-pci-5.2.0-150300.135.1

qemu-hw-display-virtio-vga-5.2.0-150300.135.1

qemu-hw-s390x-virtio-gpu-ccw-5.2.0-150300.135.1

qemu-hw-usb-redirect-5.2.0-150300.135.1

qemu-ipxe-1.0.0+-150300.135.1

qemu-ksm-5.2.0-150300.135.1

qemu-kvm-5.2.0-150300.135.1

qemu-lang-5.2.0-150300.135.1

qemu-ppc-5.2.0-150300.135.1

qemu-s390x-5.2.0-150300.135.1

qemu-seabios-1.14.0_0_g155821a-150300.135.1

qemu-sgabios-8-150300.135.1

qemu-skiboot-5.2.0-150300.135.1

qemu-tools-5.2.0-150300.135.1

qemu-ui-curses-5.2.0-150300.135.1

qemu-ui-gtk-5.2.0-150300.135.1

qemu-ui-opengl-5.2.0-150300.135.1

qemu-ui-spice-app-5.2.0-150300.135.1

qemu-ui-spice-core-5.2.0-150300.135.1

qemu-vgabios-1.14.0_0_g155821a-150300.135.1

qemu-x86-5.2.0-150300.135.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

qemu-5.2.0-150300.135.1

qemu-SLOF-5.2.0-150300.135.1

qemu-audio-alsa-5.2.0-150300.135.1

qemu-audio-pa-5.2.0-150300.135.1

qemu-audio-spice-5.2.0-150300.135.1

qemu-block-curl-5.2.0-150300.135.1

qemu-block-iscsi-5.2.0-150300.135.1

qemu-block-rbd-5.2.0-150300.135.1

qemu-block-ssh-5.2.0-150300.135.1

qemu-chardev-baum-5.2.0-150300.135.1

qemu-chardev-spice-5.2.0-150300.135.1

qemu-guest-agent-5.2.0-150300.135.1

qemu-hw-display-qxl-5.2.0-150300.135.1

qemu-hw-display-virtio-gpu-5.2.0-150300.135.1

qemu-hw-display-virtio-gpu-pci-5.2.0-150300.135.1

qemu-hw-display-virtio-vga-5.2.0-150300.135.1

qemu-hw-usb-redirect-5.2.0-150300.135.1

qemu-ipxe-1.0.0+-150300.135.1

qemu-ksm-5.2.0-150300.135.1

qemu-kvm-5.2.0-150300.135.1

qemu-lang-5.2.0-150300.135.1

qemu-ppc-5.2.0-150300.135.1

qemu-seabios-1.14.0_0_g155821a-150300.135.1

qemu-sgabios-8-150300.135.1

qemu-skiboot-5.2.0-150300.135.1

qemu-tools-5.2.0-150300.135.1

qemu-ui-curses-5.2.0-150300.135.1

qemu-ui-gtk-5.2.0-150300.135.1

qemu-ui-opengl-5.2.0-150300.135.1

qemu-ui-spice-app-5.2.0-150300.135.1

qemu-ui-spice-core-5.2.0-150300.135.1

qemu-vgabios-1.14.0_0_g155821a-150300.135.1

qemu-x86-5.2.0-150300.135.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20250692-1/
Link for SUSE-SU-2025:0692-1
https://lists.suse.com/pipermail/sle-security-updates/2025-February/020423.html
E-Mail link for SUSE-SU-2025:0692-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1219722
SUSE Bug 1219722
https://bugzilla.suse.com/1219733
SUSE Bug 1219733
https://bugzilla.suse.com/1222845
SUSE Bug 1222845
https://bugzilla.suse.com/1229007
SUSE Bug 1229007
https://bugzilla.suse.com/1230915
SUSE Bug 1230915
https://www.suse.com/security/cve/CVE-2024-3447/
SUSE CVE CVE-2024-3447 page
https://www.suse.com/security/cve/CVE-2024-7409/
SUSE CVE CVE-2024-7409 page
https://www.suse.com/security/cve/CVE-2024-8612/
SUSE CVE CVE-2024-8612 page

Описание

A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.

Затронутые продукты

Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-150300.135.1

SUSE Enterprise Storage 7.1:qemu-5.2.0-150300.135.1

SUSE Enterprise Storage 7.1:qemu-arm-5.2.0-150300.135.1

SUSE Enterprise Storage 7.1:qemu-audio-alsa-5.2.0-150300.135.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-3447.html
CVE-2024-3447
https://bugzilla.suse.com/1222845
SUSE Bug 1222845

Описание

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.

Затронутые продукты

Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-150300.135.1

SUSE Enterprise Storage 7.1:qemu-5.2.0-150300.135.1

SUSE Enterprise Storage 7.1:qemu-arm-5.2.0-150300.135.1

SUSE Enterprise Storage 7.1:qemu-audio-alsa-5.2.0-150300.135.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-7409.html
CVE-2024-7409
https://bugzilla.suse.com/1229007
SUSE Bug 1229007

Описание

A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak.

Затронутые продукты

Container suse/sle-micro-rancher/5.2:latest:qemu-guest-agent-5.2.0-150300.135.1

SUSE Enterprise Storage 7.1:qemu-5.2.0-150300.135.1

SUSE Enterprise Storage 7.1:qemu-arm-5.2.0-150300.135.1

SUSE Enterprise Storage 7.1:qemu-audio-alsa-5.2.0-150300.135.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-8612.html
CVE-2024-8612
https://bugzilla.suse.com/1230915
SUSE Bug 1230915

SUSE-SU-2025:0692-1

Описание

Список пакетов

Container suse/sle-micro-rancher/5.2:latest

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise Micro 5.1

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP3

Ссылки

Уязвимость: CVE-2024-3447

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-7409

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-8612

Описание

Затронутые продукты

Ссылки