SUSE-SU-2024:4416-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2024/suse-su-20244416-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4416-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:4416-1

Published

2024-12-24T08:21:05Z

Modified

2024-12-24T08:21:05Z

Summary

Security update for vhostmd

Details

This update for vhostmd fixes the following issues:

Updated to version 1.2

Fix actions using the 'free' command
Fix buffer accounting when generating metric XML
Change actions to retrieve vendor and product info
Add a 'unit' attribute to the metrics element
vif-stats.py: convert to Python3
conf: Update the 'VirtualizationVendor' action to strip any URLs that may follow the vendor name (bsc#1230961)
Fix virtio transport to work with libvirt >= 9.7.0
Added hardening to systemd service (bsc#1181400)
spec: Don't replace user-modified dtd in /etc/vhostmd/ (bsc#1154838)
Relax virtio requirement in config file (bsc#1152803)

Updated to version 1.1 (bsc#1129772)

Merge libserialclient with libmetrics
Misc bug fixes and improvements

References

Affected packages

SUSE:Linux Enterprise Module for Server Applications 15 SP6 / vhostmd

Package

Name: vhostmd
Purl: pkg:rpm/suse/vhostmd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.2-150600.17.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "vhostmd":  "1.2-150600.17.3.1",
            "vm-dump-metrics":  "1.2-150600.17.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4416-1.json"

openSUSE:Leap 15.6 / vhostmd

Package

Name: vhostmd
Purl: pkg:rpm/opensuse/vhostmd&distro=openSUSE%20Leap%2015.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.2-150600.17.3.1

Ecosystem specific

{
    "binaries":  [
        {
            "libmetrics-devel":  "1.2-150600.17.3.1",
            "libmetrics0":  "1.2-150600.17.3.1",
            "vhostmd":  "1.2-150600.17.3.1",
            "vm-dump-metrics":  "1.2-150600.17.3.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:4416-1.json"