SUSE-CU-2024:6110-1: Security update of suse/sles/15.7/libguestfs-tools

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sles/15.7/libguestfs-tools
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2024:6110-1
Container Tags        : suse/sles/15.7/libguestfs-tools:1.1.1 , suse/sles/15.7/libguestfs-tools:1.1.1-150700.9.28 , suse/sles/15.7/libguestfs-tools:1.1.1.28.78
Container Release     : 28.78
Severity              : moderate
Type                  : security
References            : 1219724 1232579 CVE-2024-24806 CVE-2024-50602 
-----------------------------------------------------------------

The container suse/sles/15.7/libguestfs-tools was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2024:4035-1
Released:    Mon Nov 18 16:22:57 2024
Summary:     Security update for expat
Type:        security
Severity:    moderate
References:  1232579,CVE-2024-50602
This update for expat fixes the following issues:

- CVE-2024-50602: Fixed a denial of service via XML_ResumeParser (bsc#1232579).

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2024:4044-1
Released:    Mon Nov 25 08:28:17 2024
Summary:     Recommended update for hwdata
Type:        recommended
Severity:    moderate
References:  
This update for hwdata fixes the following issue:

- Version update to v0.389:
  * Update pci, usb and vendor ids

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2024:4109-1
Released:    Thu Nov 28 17:15:36 2024
Summary:     Security update for libuv
Type:        security
Severity:    moderate
References:  1219724,CVE-2024-24806
This update for libuv fixes the following issues:

- CVE-2024-24806: Fixed improper Domain Lookup that potentially leads to SSRF attacks (bsc#1219724)


The following package changes have been done:

- libnghttp2-14-1.64.0-150700.1.1 updated
- libgpg-error0-1.50-150700.1.1 updated
- findutils-4.10.0-150700.1.1 updated
- libgcrypt20-1.11.0-150700.2.1 updated
- libxml2-2-2.12.9-150700.1.1 updated
- libopenssl3-3.2.3-150700.1.3 updated
- grep-3.11-150700.1.1 updated
- libopenssl-3-fips-provider-3.2.3-150700.1.3 updated
- sles-release-15.7-150700.13.4 updated
- libguestfs-winsupport-1.54.0-150700.1.3 updated
- guestfs-tools-1.53.3-150700.1.4 updated
- libexpat1-2.4.4-150400.3.25.1 updated
- libhivex0-1.3.24-150700.1.2 updated
- libnettle8-3.10-150700.2.1 updated
- libuv1-1.44.2-150500.3.5.1 updated
- pigz-2.8-150700.1.1 updated
- qemu-accel-tcg-x86-9.1.2-150700.1.2 updated
- qemu-ipxe-9.1.2-150700.1.2 updated
- qemu-seabios-9.1.21.16.3_3_gc13ff2cd-150700.1.2 updated
- qemu-vgabios-9.1.21.16.3_3_gc13ff2cd-150700.1.2 updated
- libhogweed6-3.10-150700.2.1 updated
- bind-utils-9.20.3-150700.1.2 updated
- hwdata-0.389-150000.3.71.2 updated
- libmpath0-0.10.1~2+112+suse.b66763a-150700.1.1 updated
- xen-libs-4.19.0_04-150700.1.11 updated
- qemu-vmsr-helper-9.1.2-150700.1.2 updated
- qemu-pr-helper-9.1.2-150700.1.2 updated
- qemu-img-9.1.2-150700.1.2 updated
- qemu-tools-9.1.2-150700.1.2 updated
- libvirt-libs-10.9.0-150700.1.1 updated
- suse-module-tools-15.7.1-150700.1.1 updated
- rdma-core-54.0-150700.1.1 updated
- libibverbs1-54.0-150700.1.1 updated
- libmlx5-1-54.0-150700.1.1 updated
- libmlx4-1-54.0-150700.1.1 updated
- libmana1-54.0-150700.1.1 updated
- libhns1-54.0-150700.1.1 added
- libefa1-54.0-150700.1.1 updated
- libibverbs-54.0-150700.1.1 updated
- librdmacm1-54.0-150700.1.1 updated
- qemu-x86-9.1.2-150700.1.2 updated
- qemu-9.1.2-150700.1.2 updated
- libguestfs0-1.54.0-150700.1.3 updated
- libguestfs-devel-1.54.0-150700.1.3 updated
- libguestfs-appliance-1.54.0-150700.1.3 updated
- libguestfs-1.54.0-150700.1.3 updated
- container:sles15-image-15.0.0-50.60 updated