SUSE-SU-2026:0070-1

Details

This update for qemu fixes the following issues:

CVE-2024-6505: Fixed queue index out-of-bounds access in software RSS (bsc#1227397)
CVE-2023-1544: Fixed out-of-bounds read in pvrdma_ring_next_elem_read() (bsc#1209554)

Affected Packages(18 packages)

qemu

SUSE Linux Enterprise Micro 5.2

Fixed in:

5.2.0-150300.138.1

qemu-arm

SUSE Linux Enterprise Micro 5.2

Fixed in:

5.2.0-150300.138.1

qemu-audio-spice

SUSE Linux Enterprise Micro 5.2

Fixed in:

5.2.0-150300.138.1

qemu-chardev-spice

SUSE Linux Enterprise Micro 5.2

Fixed in:

5.2.0-150300.138.1

qemu-guest-agent

SUSE Linux Enterprise Micro 5.2

Fixed in:

5.2.0-150300.138.1

qemu-hw-display-qxl

SUSE Linux Enterprise Micro 5.2

Fixed in:

5.2.0-150300.138.1

qemu-hw-display-virtio-gpu

SUSE Linux Enterprise Micro 5.2

Fixed in:

5.2.0-150300.138.1

qemu-hw-display-virtio-vga

SUSE Linux Enterprise Micro 5.2

Fixed in:

5.2.0-150300.138.1

qemu-hw-usb-redirect

SUSE Linux Enterprise Micro 5.2

Fixed in:

5.2.0-150300.138.1

qemu-ipxe

SUSE Linux Enterprise Micro 5.2

Fixed in:

1.0.0+-150300.138.1

References

REPORThttps://bugzilla.suse.com/1209554 REPORThttps://bugzilla.suse.com/1227397 WEBhttps://www.suse.com/security/cve/CVE-2023-1544 WEBhttps://www.suse.com/security/cve/CVE-2024-6505 ADVISORYhttps://www.suse.com/support/update/announcement/2026/suse-su-20260070-1/

SUSE-SU-2026:0070-1

Details

Affected Packages(18 packages)

References

Upstream

Related

Ecosystems

Timeline