SUSE-SU-2024:4416-1

Security update for vhostmd

No scoreFix available

SUSE-SU-2024:4416-1 is a vulnerability with no CVSS score yet in vhostmd, published December 24, 2024. No source lists public exploit code. Fixed in vhostmd 1.2-150600.17.3.1.

What does this mean?

Severity: UnratedNo CVSS score yet
Exploit chance: UnscoredNo EPSS score yet
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 1.2-150600.17.3.1vhostmd +1 more

Description

This update for vhostmd fixes the following issues:

Updated to version 1.2

Fix actions using the 'free' command
Fix buffer accounting when generating metric XML
Change actions to retrieve vendor and product info
Add a 'unit' attribute to the metrics element
vif-stats.py: convert to Python3
conf: Update the 'VirtualizationVendor' action to strip any URLs that may follow the vendor name (bsc#1230961)
Fix virtio transport to work with libvirt >= 9.7.0
Added hardening to systemd service (bsc#1181400)
spec: Don't replace user-modified dtd in /etc/vhostmd/ (bsc#1154838)
Relax virtio requirement in config file (bsc#1152803)

Updated to version 1.1 (bsc#1129772)

Merge libserialclient with libmetrics
Misc bug fixes and improvements

Affected packages

Affected packages
Package	Affected	Fixed
`vhostmd` SUSE:Linux Enterprise Module for Server Applications 15 SP6	before 1.2-150600.17.3.1	1.2-150600.17.3.1
`vhostmd` openSUSE:Leap 15.6	before 1.2-150600.17.3.1	1.2-150600.17.3.1

What each source reports

OSVNo score

Security update for vhostmd