Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-8612: Fixed information leak in virtio devices (bsc#1230915). - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007). - CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845). Other fixes: - Fix ipxe build with new binutils (bsc#1219733, bsc#1219722).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for qemu fixes the following issues: - CVE-2024-8612: Fixed information leak in virtio devices (bsc#1230915). - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007). - CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845). Other fixes: - Fix ipxe build with new binutils (bsc#1219733, bsc#1219722).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1219722
- https://bugzilla.suse.com/1219733
- https://bugzilla.suse.com/1222845
- https://bugzilla.suse.com/1229007
- https://bugzilla.suse.com/1230915
- https://www.suse.com/security/cve/CVE-2024-3447
- https://www.suse.com/security/cve/CVE-2024-7409
- https://www.suse.com/security/cve/CVE-2024-8612
- https://www.suse.com/support/update/announcement/2025/suse-su-20250692-1/