Security update for vhostmd
| Announcement ID: | SUSE-SU-2024:4416-1 |
|---|---|
| Release Date: | 2024-12-24T08:21:06Z |
| Rating: | moderate |
| References: | |
| Affected Products: |
|
An update that has five security fixes can now be installed.
Description:
This update for vhostmd fixes the following issues:
Updated to version 1.2
- Fix actions using the 'free' command
- Fix buffer accounting when generating metric XML
- Change actions to retrieve vendor and product info
- Add a 'unit' attribute to the metrics element
- vif-stats.py: convert to Python3
- conf: Update the 'VirtualizationVendor' action to strip any URLs that may follow the vendor name (bsc#1230961)
- Fix virtio transport to work with libvirt >= 9.7.0
- Added hardening to systemd service (bsc#1181400)
- spec: Don't replace user-modified dtd in /etc/vhostmd/ (bsc#1154838)
- Relax virtio requirement in config file (bsc#1152803)
Updated to version 1.1 (bsc#1129772)
- Merge libserialclient with libmetrics
- Misc bug fixes and improvements
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.6
zypper in -t patch SUSE-2024-4416=1 openSUSE-SLE-15.6-2024-4416=1 -
Server Applications Module 15-SP6
zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-4416=1
Package List:
-
openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)
- vhostmd-1.2-150600.17.3.1
- vm-dump-metrics-debuginfo-1.2-150600.17.3.1
- vhostmd-debugsource-1.2-150600.17.3.1
- libmetrics0-debuginfo-1.2-150600.17.3.1
- vm-dump-metrics-1.2-150600.17.3.1
- libmetrics-devel-1.2-150600.17.3.1
- libmetrics0-1.2-150600.17.3.1
- vhostmd-debuginfo-1.2-150600.17.3.1
-
Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64)
- vhostmd-1.2-150600.17.3.1
- vm-dump-metrics-debuginfo-1.2-150600.17.3.1
- vhostmd-debugsource-1.2-150600.17.3.1
- vm-dump-metrics-1.2-150600.17.3.1
- vhostmd-debuginfo-1.2-150600.17.3.1