Integer overflow in QEMU - CVE-2021-4206

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU63787

Integer overflow in QEMU - CVE-2021-4206

Published: May 30, 2022 / Updated: May 30, 2022


Vulnerability identifier: #VU63787
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-4206
CWE-ID: CWE-190
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the target system.

The vulnerability exists due to integer overflow in the cursor_alloc() function in the QXL display device emulation in QEMU. A privileged user can crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process.


Affected software

QEMU
Debian Linux
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Linux Enterprise Server 12 SP2 BCL
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Server Applications
openSUSE Leap
Ubuntu
openEuler
Red Hat Enterprise Linux Advanced Virtualization
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
netcf
netcf-devel
netcf-libs
swtpm-tools-pkcs11
swtpm-tools
swtpm-libs
swtpm
swtpm-devel
libtpms-devel
libtpms
sgabios
sgabios-bin
qemu-ipxe
libvirt-dbus
hivex-devel
ocaml-hivex
perl-hivex
ocaml-hivex-devel
python3-hivex
ruby-hivex
hivex
nbdfuse
ocaml-libnbd
ocaml-libnbd-devel
libnbd
libnbd-devel
python3-libnbd
libnbd-bash-completion
qemu-seabios
qemu-vgabios
seabios-bin
seavgabios-bin
seabios
libiscsi-utils
libiscsi-devel
libiscsi
nbdkit-bash-completion
nbdkit
nbdkit-basic-filters
nbdkit-basic-plugins
nbdkit-curl-plugin
nbdkit-devel
nbdkit-example-plugins
nbdkit-gzip-filter
nbdkit-gzip-plugin
nbdkit-linuxdisk-plugin
nbdkit-nbd-plugin
nbdkit-python-plugin
nbdkit-server
nbdkit-ssh-plugin
nbdkit-tar-filter
nbdkit-tar-plugin
nbdkit-tmpdisk-plugin
nbdkit-xz-filter
nbdkit-vddk-plugin
virt-v2v-man-pages-uk
virt-v2v-man-pages-ja
virt-v2v-bash-completion
virt-v2v
ocaml-libguestfs
libguestfs-tools
libguestfs-man-pages-uk
libguestfs-man-pages-ja
libguestfs-javadoc
libguestfs-inspect-icons
libguestfs-bash-completion
libguestfs
libguestfs-appliance
libguestfs-devel
libguestfs-gfs2
libguestfs-gobject-devel
lua-guestfs
ocaml-libguestfs-devel
perl-Sys-Guestfs
python3-libguestfs
ruby-libguestfs
virt-dib
libguestfs-tools-c
libguestfs-rsync
libguestfs-xfs
libguestfs-rescue
libguestfs-java-devel
libguestfs-gobject
libguestfs-java
qemu-kvm
qemu-block-curl-debuginfo
qemu-tools-debuginfo
qemu-block-curl
qemu-guest-agent-debuginfo
qemu-x86-debuginfo
qemu-lang
qemu-guest-agent
qemu-block-rbd
qemu-x86
qemu-tools
qemu-block-ssh-debuginfo
qemu-debugsource
qemu-block-rbd-debuginfo
qemu-block-ssh
qemu
qemu-system-ppc (Ubuntu package)
qemu-system-misc (Ubuntu package)
qemu-system-s390x (Ubuntu package)
qemu-system (Ubuntu package)
qemu-system-x86 (Ubuntu package)
qemu-system-sparc (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu-system-mips (Ubuntu package)
qemu-audio-sdl-debuginfo
qemu-ui-curses
qemu-ui-gtk-debuginfo
qemu-ui-sdl-debuginfo
qemu-audio-pa-debuginfo
qemu-s390
qemu-audio-alsa-debuginfo
qemu-block-iscsi
qemu-audio-oss-debuginfo
qemu-audio-oss
qemu-audio-sdl
qemu-ui-sdl
qemu-s390-debuginfo
qemu-ppc-debuginfo
qemu-ppc
qemu-arm
qemu-arm-debuginfo
qemu-block-iscsi-debuginfo
qemu-audio-pa
qemu-ui-curses-debuginfo
qemu-ui-gtk
qemu-audio-alsa
qemu-debuginfo
qemu-img
qemu-help
qemu-microvm
qemu-ui-spice-app-debuginfo
qemu-ui-spice-app
qemu-system-x86-xen (Ubuntu package)
qemu-system-x86-microvm (Ubuntu package)
qemu (Debian package)
qemu-s390x-debuginfo
qemu-s390x
qemu-linux-user-debugsource
qemu-linux-user-debuginfo
qemu-linux-user
qemu-ksm
qemu-ivshmem-tools-debuginfo
qemu-ivshmem-tools
qemu-hw-usb-smartcard-debuginfo
qemu-hw-usb-smartcard
qemu-hw-usb-redirect-debuginfo
qemu-hw-usb-redirect
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-hw-s390x-virtio-gpu-ccw
qemu-hw-display-virtio-vga-debuginfo
qemu-skiboot
qemu-hw-display-virtio-vga
qemu-ui-spice-core
qemu-SLOF
qemu-vhost-user-gpu-debuginfo
qemu-vhost-user-gpu
qemu-ui-spice-core-debuginfo
qemu-ui-opengl-debuginfo
qemu-ui-opengl
qemu-block-nfs-debuginfo
qemu-block-nfs
qemu-block-gluster-debuginfo
qemu-block-gluster
qemu-block-dmg-debuginfo
qemu-block-dmg
qemu-audio-spice-debuginfo
qemu-audio-spice
qemu-hw-display-virtio-gpu-pci
qemu-hw-display-virtio-gpu-debuginfo
qemu-hw-display-virtio-gpu
qemu-hw-display-qxl-debuginfo
qemu-hw-display-qxl
qemu-extra-debuginfo
qemu-extra
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-chardev-spice-debuginfo
qemu-chardev-spice
qemu-chardev-baum-debuginfo
qemu-chardev-baum
qemu-testsuite
supermin-devel
supermin
qemu-kvm-core
qemu-kvm-block-iscsi
qemu-kvm-docs
qemu-kvm-common
qemu-kvm-block-ssh
qemu-kvm-block-rbd
qemu-kvm-block-curl
qemu-kvm-tests
qemu-kvm-block-gluster
qemu-kvm-hw-usbredir
qemu-kvm-ui-opengl
qemu-kvm-ui-spice
qemu-hw-usb-host-debuginfo
qemu-hw-usb-host
qemu-accel-tcg-x86
qemu-accel-tcg-x86-debuginfo
qemu-accel-qtest-debuginfo
qemu-accel-qtest
qemu-audio-jack
qemu-audio-jack-debuginfo
python3-libvirt
perl-Sys-Virt
libvirt-daemon-driver-storage-core
libvirt-daemon-kvm
libvirt-daemon-driver-storage-disk
libvirt-daemon-driver-storage-gluster
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-storage-iscsi-direct
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-storage-mpath
libvirt-wireshark
libvirt-nss
libvirt-lock-sanlock
libvirt-libs
libvirt-docs
libvirt-devel
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-storage-scsi
libvirt-daemon-driver-storage
libvirt-daemon-driver-secret
libvirt-daemon-driver-qemu
libvirt-daemon-driver-nwfilter
libvirt
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-network
libvirt-daemon-driver-interface
libvirt-daemon-config-nwfilter
libvirt-daemon-config-network
libvirt-client
libvirt-daemon
libguestfs-winsupport
qemu-sgabios

How to mitigate CVE-2021-4206

Install updates from vendor's website.

QEMU - update to 7.0.0
netcf - update to 0.2.8-12
netcf-devel - update to 0.2.8-12
netcf-libs - update to 0.2.8-12
swtpm-tools-pkcs11 - update to 0.7.0-1.20211109gitb79fd91
swtpm-tools - update to 0.7.0-1.20211109gitb79fd91
swtpm-libs - update to 0.7.0-1.20211109gitb79fd91
swtpm - update to 0.7.0-1.20211109gitb79fd91
swtpm-devel - update to 0.7.0-1.20211109gitb79fd91
libtpms-devel - update to 0.9.1-0.20211126git1ff6fe1f43
libtpms - update to 0.9.1-0.20211126git1ff6fe1f43
sgabios - update to 0.20170427git-3
sgabios-bin - update to 0.20170427git-3
qemu-ipxe - addressed in versions 1.0.0+-66.1, 1.0.0+-150100.80.43.2, 1.0.0+-150200.69.1, 1.0.0-41.76.1
libvirt-dbus - update to 1.3.0-2
hivex-devel - update to 1.3.18-23
ocaml-hivex - update to 1.3.18-23
perl-hivex - update to 1.3.18-23
ocaml-hivex-devel - update to 1.3.18-23
python3-hivex - update to 1.3.18-23
ruby-hivex - update to 1.3.18-23
hivex - update to 1.3.18-23
nbdfuse - update to 1.6.0-5
ocaml-libnbd - update to 1.6.0-5
ocaml-libnbd-devel - update to 1.6.0-5
libnbd - update to 1.6.0-5
libnbd-devel - update to 1.6.0-5
python3-libnbd - update to 1.6.0-5
libnbd-bash-completion - update to 1.6.0-5
qemu-seabios - addressed in versions 1.9.1_0_gb3ef39f-41.76.1, 1.12.0_0_ga698c89-66.1, 1.12.0_0_ga698c89-150100.80.43.2, 1.12.1+-150200.69.1, 1.14.0_0_g155821a-150300.115.2, 1.15.0_0_g2dd4b9b-150400.37.5.3
qemu-vgabios - addressed in versions 1.9.1_0_gb3ef39f-41.76.1, 1.12.0_0_ga698c89-66.1, 1.12.0_0_ga698c89-150100.80.43.2, 1.12.1+-150200.69.1, 1.14.0_0_g155821a-150300.115.2, 1.15.0_0_g2dd4b9b-150400.37.5.3
seabios-bin - update to 1.15.0-2
seavgabios-bin - update to 1.15.0-2
seabios - update to 1.15.0-2
libiscsi-utils - update to 1.18.0-8.0.1
libiscsi-devel - update to 1.18.0-8.0.1
libiscsi - update to 1.18.0-8.0.1
nbdkit-bash-completion - update to 1.24.0-4
nbdkit - update to 1.24.0-4
nbdkit-basic-filters - update to 1.24.0-4
nbdkit-basic-plugins - update to 1.24.0-4
nbdkit-curl-plugin - update to 1.24.0-4
nbdkit-devel - update to 1.24.0-4
nbdkit-example-plugins - update to 1.24.0-4
nbdkit-gzip-filter - update to 1.24.0-4
nbdkit-gzip-plugin - update to 1.24.0-4
nbdkit-linuxdisk-plugin - update to 1.24.0-4
nbdkit-nbd-plugin - update to 1.24.0-4
nbdkit-python-plugin - update to 1.24.0-4
nbdkit-server - update to 1.24.0-4
nbdkit-ssh-plugin - update to 1.24.0-4
nbdkit-tar-filter - update to 1.24.0-4
nbdkit-tar-plugin - update to 1.24.0-4
nbdkit-tmpdisk-plugin - update to 1.24.0-4
nbdkit-xz-filter - update to 1.24.0-4
nbdkit-vddk-plugin - update to 1.24.0-4
virt-v2v-man-pages-uk - update to 1.42.0-19
virt-v2v-man-pages-ja - update to 1.42.0-19
virt-v2v-bash-completion - update to 1.42.0-19
virt-v2v - update to 1.42.0-19
ocaml-libguestfs - update to 1.44.0-5.0.1
libguestfs-tools - update to 1.44.0-5.0.1
libguestfs-man-pages-uk - update to 1.44.0-5.0.1
libguestfs-man-pages-ja - update to 1.44.0-5.0.1
libguestfs-javadoc - update to 1.44.0-5.0.1
libguestfs-inspect-icons - update to 1.44.0-5.0.1
libguestfs-bash-completion - update to 1.44.0-5.0.1
libguestfs - update to 1.44.0-5.0.1
libguestfs-appliance - update to 1.44.0-5.0.1
libguestfs-devel - update to 1.44.0-5.0.1
libguestfs-gfs2 - update to 1.44.0-5.0.1
libguestfs-gobject-devel - update to 1.44.0-5.0.1
lua-guestfs - update to 1.44.0-5.0.1
ocaml-libguestfs-devel - update to 1.44.0-5.0.1
perl-Sys-Guestfs - update to 1.44.0-5.0.1
python3-libguestfs - update to 1.44.0-5.0.1
ruby-libguestfs - update to 1.44.0-5.0.1
virt-dib - update to 1.44.0-5.0.1
libguestfs-tools-c - update to 1.44.0-5.0.1
libguestfs-rsync - update to 1.44.0-5.0.1
libguestfs-xfs - update to 1.44.0-5.0.1
libguestfs-rescue - update to 1.44.0-5.0.1
libguestfs-java-devel - update to 1.44.0-5.0.1
libguestfs-gobject - update to 1.44.0-5.0.1
libguestfs-java - update to 1.44.0-5.0.1
qemu-kvm - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-curl-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-tools-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-curl - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-guest-agent-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-x86-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-lang - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-guest-agent - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-rbd - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-x86 - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-tools - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-ssh-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-debugsource - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-rbd-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-ssh - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu - addressed in versions 2.6.2-41.76.1, 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-system-ppc (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-misc (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-s390x (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-x86 (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-sparc (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-arm (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-mips (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-audio-sdl-debuginfo - update to 3.1.1.1-66.1
qemu-ui-curses - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-gtk-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-sdl-debuginfo - update to 3.1.1.1-66.1
qemu-audio-pa-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-s390 - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1
qemu-audio-alsa-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-iscsi - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-oss-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 6.2.0-150400.37.5.3
qemu-audio-oss - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2
qemu-audio-sdl - update to 3.1.1.1-66.1
qemu-ui-sdl - update to 3.1.1.1-66.1
qemu-s390-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1
qemu-ppc-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ppc - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-arm - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-arm-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-iscsi-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-pa - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-curses-debuginfo - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-gtk - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-alsa - addressed in versions 3.1.1.1-66.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-debuginfo - addressed in versions 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-curl - update to 4.1.0-63
qemu-block-iscsi - update to 4.1.0-63
qemu-block-rbd - update to 4.1.0-63
qemu - update to 4.1.0-63
qemu-img - update to 4.1.0-63
qemu-seabios - update to 4.1.0-63
qemu-debugsource - update to 4.1.0-63
qemu-help - update to 4.1.0-63
qemu-guest-agent - update to 4.1.0-63
qemu-block-ssh - update to 4.1.0-63
qemu-debuginfo - update to 4.1.0-63
qemu-microvm - addressed in versions 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-spice-app-debuginfo - addressed in versions 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-spice-app - addressed in versions 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu (Debian package) - update to 1:5.2+dfsg-11+deb11u2
qemu-s390x-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-s390x - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-linux-user-debugsource - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.1
qemu-linux-user-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.1
qemu-linux-user - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.1
qemu-ksm - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ivshmem-tools-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ivshmem-tools - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-usb-smartcard-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-usb-smartcard - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-usb-redirect-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-usb-redirect - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-s390x-virtio-gpu-ccw - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-vga-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-skiboot - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-vga - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-spice-core - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-SLOF - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-vhost-user-gpu-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-vhost-user-gpu - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-spice-core-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-opengl-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-opengl - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-nfs-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-nfs - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-gluster-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-gluster - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-dmg-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-dmg - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-spice-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-spice - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-gpu-pci - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-gpu-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-gpu - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-qxl-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-qxl - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-extra-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-extra - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-gpu-pci-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-chardev-spice-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-chardev-spice - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-chardev-baum-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-chardev-baum - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-testsuite - addressed in versions 5.2.0-150300.115.4, 6.2.0-150400.37.5.5
supermin-devel - update to 5.2.1-1
supermin - update to 5.2.1-1
qemu-kvm-core - update to 6.2.0-11.0.1
qemu-kvm-block-iscsi - update to 6.2.0-11.0.1
qemu-kvm-docs - update to 6.2.0-11.0.1
qemu-kvm-common - update to 6.2.0-11.0.1
qemu-kvm-block-ssh - update to 6.2.0-11.0.1
qemu-kvm-block-rbd - update to 6.2.0-11.0.1
qemu-kvm-block-curl - update to 6.2.0-11.0.1
qemu-kvm - update to 6.2.0-11.0.1
qemu-img - update to 6.2.0-11.0.1
qemu-guest-agent - update to 6.2.0-11.0.1
qemu-kvm-tests - update to 6.2.0-11.0.1
qemu-kvm-block-gluster - update to 6.2.0-11.0.1
qemu-kvm-hw-usbredir - update to 6.2.0-11.0.1
qemu-kvm-ui-opengl - update to 6.2.0-11.0.1
qemu-kvm-ui-spice - update to 6.2.0-11.0.1
qemu-hw-usb-host-debuginfo - update to 6.2.0-150400.37.5.3
qemu-hw-usb-host - update to 6.2.0-150400.37.5.3
qemu-accel-tcg-x86 - update to 6.2.0-150400.37.5.3
qemu-accel-tcg-x86-debuginfo - update to 6.2.0-150400.37.5.3
qemu-accel-qtest-debuginfo - update to 6.2.0-150400.37.5.3
qemu-accel-qtest - update to 6.2.0-150400.37.5.3
qemu-audio-jack - update to 6.2.0-150400.37.5.3
qemu-audio-jack-debuginfo - update to 6.2.0-150400.37.5.3
python3-libvirt - update to 8.0.0-1
perl-Sys-Virt - update to 8.0.0-1
libvirt-daemon-driver-storage-core - update to 8.0.0-5.2
libvirt-daemon-kvm - update to 8.0.0-5.2
libvirt-daemon-driver-storage-disk - update to 8.0.0-5.2
libvirt-daemon-driver-storage-gluster - update to 8.0.0-5.2
libvirt-daemon-driver-storage-iscsi - update to 8.0.0-5.2
libvirt-daemon-driver-storage-iscsi-direct - update to 8.0.0-5.2
libvirt-daemon-driver-storage-logical - update to 8.0.0-5.2
libvirt-daemon-driver-storage-mpath - update to 8.0.0-5.2
libvirt-wireshark - update to 8.0.0-5.2
libvirt-nss - update to 8.0.0-5.2
libvirt-lock-sanlock - update to 8.0.0-5.2
libvirt-libs - update to 8.0.0-5.2
libvirt-docs - update to 8.0.0-5.2
libvirt-devel - update to 8.0.0-5.2
libvirt-daemon-driver-storage-rbd - update to 8.0.0-5.2
libvirt-daemon-driver-storage-scsi - update to 8.0.0-5.2
libvirt-daemon-driver-storage - update to 8.0.0-5.2
libvirt-daemon-driver-secret - update to 8.0.0-5.2
libvirt-daemon-driver-qemu - update to 8.0.0-5.2
libvirt-daemon-driver-nwfilter - update to 8.0.0-5.2
libvirt - update to 8.0.0-5.2
libvirt-daemon-driver-nodedev - update to 8.0.0-5.2
libvirt-daemon-driver-network - update to 8.0.0-5.2
libvirt-daemon-driver-interface - update to 8.0.0-5.2
libvirt-daemon-config-nwfilter - update to 8.0.0-5.2
libvirt-daemon-config-network - update to 8.0.0-5.2
libvirt-client - update to 8.0.0-5.2
libvirt-daemon - update to 8.0.0-5.2
libguestfs-winsupport - update to 8.6-1
qemu-sgabios - addressed in versions 8-41.76.1, 8-66.1, 8-150100.80.43.2, 8-150200.69.1, 8-150300.115.2, 8-150400.37.5.3

External References

Related Security Bulletins