Race condition in QEMU - CVE-2021-4207

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU63788

Race condition in QEMU - CVE-2021-4207

Published: May 30, 2022 / Updated: May 30, 2022


Vulnerability identifier: #VU63788
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-4207
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in the QXL display device emulation in QEMU. A privileged user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.


Affected software

QEMU
Debian Linux
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Linux Enterprise Server 12 SP2 BCL
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Server Applications
openSUSE Leap
Ubuntu
openEuler
Red Hat Enterprise Linux Advanced Virtualization
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
netcf
netcf-devel
netcf-libs
swtpm
swtpm-devel
swtpm-libs
swtpm-tools
swtpm-tools-pkcs11
libtpms-devel
libtpms
sgabios-bin
sgabios
qemu-ipxe
libvirt-dbus
ruby-hivex
hivex-devel
hivex
ocaml-hivex
python3-hivex
ocaml-hivex-devel
perl-hivex
python3-libnbd
libnbd-devel
libnbd
libnbd-bash-completion
ocaml-libnbd-devel
nbdfuse
ocaml-libnbd
qemu-vgabios
qemu-seabios
seavgabios-bin
seabios-bin
seabios
libiscsi
libiscsi-utils
libiscsi-devel
nbdkit-vddk-plugin
nbdkit
nbdkit-basic-filters
nbdkit-basic-plugins
nbdkit-curl-plugin
nbdkit-devel
nbdkit-example-plugins
nbdkit-gzip-filter
nbdkit-gzip-plugin
nbdkit-linuxdisk-plugin
nbdkit-nbd-plugin
nbdkit-python-plugin
nbdkit-server
nbdkit-ssh-plugin
nbdkit-tar-filter
nbdkit-tar-plugin
nbdkit-tmpdisk-plugin
nbdkit-xz-filter
nbdkit-bash-completion
virt-v2v-man-pages-uk
virt-v2v-man-pages-ja
virt-v2v
virt-v2v-bash-completion
ocaml-libguestfs
libguestfs-man-pages-ja
libguestfs-man-pages-uk
libguestfs-tools
lua-guestfs
libguestfs-javadoc
libguestfs-inspect-icons
libguestfs-bash-completion
virt-dib
libguestfs
libguestfs-appliance
libguestfs-devel
libguestfs-gobject
ocaml-libguestfs-devel
perl-Sys-Guestfs
python3-libguestfs
ruby-libguestfs
libguestfs-xfs
libguestfs-tools-c
libguestfs-rsync
libguestfs-rescue
libguestfs-java-devel
libguestfs-java
libguestfs-gobject-devel
libguestfs-gfs2
qemu-block-rbd-debuginfo
qemu-debugsource
qemu-block-ssh
qemu-block-ssh-debuginfo
qemu
qemu-kvm
qemu-block-curl-debuginfo
qemu-block-rbd
qemu-tools-debuginfo
qemu-guest-agent-debuginfo
qemu-x86-debuginfo
qemu-lang
qemu-guest-agent
qemu-x86
qemu-tools
qemu-block-curl
qemu-system-ppc (Ubuntu package)
qemu-system-mips (Ubuntu package)
qemu-system-misc (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu-system-s390x (Ubuntu package)
qemu-system-sparc (Ubuntu package)
qemu-system-x86 (Ubuntu package)
qemu-system (Ubuntu package)
qemu-audio-oss
qemu-audio-sdl-debuginfo
qemu-ui-sdl
qemu-block-iscsi
qemu-audio-pa
qemu-ui-curses-debuginfo
qemu-audio-sdl
qemu-ppc
qemu-s390-debuginfo
qemu-s390
qemu-ppc-debuginfo
qemu-arm-debuginfo
qemu-arm
qemu-ui-gtk
qemu-ui-curses
qemu-audio-alsa-debuginfo
qemu-block-iscsi-debuginfo
qemu-ui-sdl-debuginfo
qemu-audio-alsa
qemu-audio-oss-debuginfo
qemu-audio-pa-debuginfo
qemu-ui-gtk-debuginfo
qemu-debuginfo
qemu-img
qemu-help
qemu-ui-spice-app
qemu-ui-spice-app-debuginfo
qemu-microvm
qemu-system-x86-xen (Ubuntu package)
qemu-system-x86-microvm (Ubuntu package)
qemu (Debian package)
qemu-s390x-debuginfo
qemu-s390x
qemu-linux-user-debugsource
qemu-linux-user-debuginfo
qemu-linux-user
qemu-ksm
qemu-ivshmem-tools-debuginfo
qemu-ivshmem-tools
qemu-hw-usb-smartcard-debuginfo
qemu-hw-usb-smartcard
qemu-hw-usb-redirect-debuginfo
qemu-hw-usb-redirect
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-hw-s390x-virtio-gpu-ccw
qemu-hw-display-virtio-vga-debuginfo
qemu-skiboot
qemu-hw-display-virtio-vga
qemu-ui-spice-core
qemu-SLOF
qemu-vhost-user-gpu-debuginfo
qemu-vhost-user-gpu
qemu-ui-spice-core-debuginfo
qemu-ui-opengl-debuginfo
qemu-ui-opengl
qemu-block-nfs-debuginfo
qemu-block-nfs
qemu-block-gluster-debuginfo
qemu-block-gluster
qemu-block-dmg-debuginfo
qemu-block-dmg
qemu-audio-spice-debuginfo
qemu-audio-spice
qemu-hw-display-virtio-gpu-pci
qemu-hw-display-virtio-gpu-debuginfo
qemu-hw-display-virtio-gpu
qemu-hw-display-qxl-debuginfo
qemu-hw-display-qxl
qemu-extra-debuginfo
qemu-extra
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-chardev-spice-debuginfo
qemu-chardev-spice
qemu-chardev-baum-debuginfo
qemu-chardev-baum
qemu-testsuite
supermin-devel
supermin
qemu-kvm-core
qemu-kvm-block-iscsi
qemu-kvm-docs
qemu-kvm-common
qemu-kvm-block-ssh
qemu-kvm-block-rbd
qemu-kvm-block-curl
qemu-kvm-tests
qemu-kvm-block-gluster
qemu-kvm-hw-usbredir
qemu-kvm-ui-opengl
qemu-kvm-ui-spice
qemu-hw-usb-host-debuginfo
qemu-hw-usb-host
qemu-accel-tcg-x86
qemu-accel-tcg-x86-debuginfo
qemu-accel-qtest-debuginfo
qemu-accel-qtest
qemu-audio-jack
qemu-audio-jack-debuginfo
python3-libvirt
perl-Sys-Virt
libvirt-daemon-driver-storage-core
libvirt-daemon-kvm
libvirt-daemon-driver-storage-disk
libvirt-daemon-driver-storage-gluster
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-storage-iscsi-direct
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-storage-mpath
libvirt-wireshark
libvirt-nss
libvirt-lock-sanlock
libvirt-libs
libvirt-docs
libvirt-devel
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-storage-scsi
libvirt-daemon-driver-secret
libvirt
libvirt-client
libvirt-daemon
libvirt-daemon-config-network
libvirt-daemon-config-nwfilter
libvirt-daemon-driver-interface
libvirt-daemon-driver-network
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-qemu
libvirt-daemon-driver-storage
libguestfs-winsupport
qemu-sgabios

How to mitigate CVE-2021-4207

Install updates from vendor's website.

QEMU - update to 7.0.0
netcf - update to 0.2.8-12
netcf-devel - update to 0.2.8-12
netcf-libs - update to 0.2.8-12
swtpm - update to 0.7.0-1.20211109gitb79fd91
swtpm-devel - update to 0.7.0-1.20211109gitb79fd91
swtpm-libs - update to 0.7.0-1.20211109gitb79fd91
swtpm-tools - update to 0.7.0-1.20211109gitb79fd91
swtpm-tools-pkcs11 - update to 0.7.0-1.20211109gitb79fd91
libtpms-devel - update to 0.9.1-0.20211126git1ff6fe1f43
libtpms - update to 0.9.1-0.20211126git1ff6fe1f43
sgabios-bin - update to 0.20170427git-3
sgabios - update to 0.20170427git-3
qemu-ipxe - addressed in versions 1.0.0+-69.1, 1.0.0+-150100.80.43.2, 1.0.0+-150200.69.1, 1.0.0-41.76.1
libvirt-dbus - update to 1.3.0-2
ruby-hivex - update to 1.3.18-23
hivex-devel - update to 1.3.18-23
hivex - update to 1.3.18-23
ocaml-hivex - update to 1.3.18-23
python3-hivex - update to 1.3.18-23
ocaml-hivex-devel - update to 1.3.18-23
perl-hivex - update to 1.3.18-23
python3-libnbd - update to 1.6.0-5
libnbd-devel - update to 1.6.0-5
libnbd - update to 1.6.0-5
libnbd-bash-completion - update to 1.6.0-5
ocaml-libnbd-devel - update to 1.6.0-5
nbdfuse - update to 1.6.0-5
ocaml-libnbd - update to 1.6.0-5
qemu-vgabios - addressed in versions 1.9.1_0_gb3ef39f-41.76.1, 1.12.0_0_ga698c89-69.1, 1.12.0_0_ga698c89-150100.80.43.2, 1.12.1+-150200.69.1, 1.14.0_0_g155821a-150300.115.2, 1.15.0_0_g2dd4b9b-150400.37.5.3
qemu-seabios - addressed in versions 1.9.1_0_gb3ef39f-41.76.1, 1.12.0_0_ga698c89-69.1, 1.12.0_0_ga698c89-150100.80.43.2, 1.12.1+-150200.69.1, 1.14.0_0_g155821a-150300.115.2, 1.15.0_0_g2dd4b9b-150400.37.5.3
seavgabios-bin - update to 1.15.0-2
seabios-bin - update to 1.15.0-2
seabios - update to 1.15.0-2
libiscsi - update to 1.18.0-8.0.1
libiscsi-utils - update to 1.18.0-8.0.1
libiscsi-devel - update to 1.18.0-8.0.1
nbdkit-vddk-plugin - update to 1.24.0-4
nbdkit - update to 1.24.0-4
nbdkit-basic-filters - update to 1.24.0-4
nbdkit-basic-plugins - update to 1.24.0-4
nbdkit-curl-plugin - update to 1.24.0-4
nbdkit-devel - update to 1.24.0-4
nbdkit-example-plugins - update to 1.24.0-4
nbdkit-gzip-filter - update to 1.24.0-4
nbdkit-gzip-plugin - update to 1.24.0-4
nbdkit-linuxdisk-plugin - update to 1.24.0-4
nbdkit-nbd-plugin - update to 1.24.0-4
nbdkit-python-plugin - update to 1.24.0-4
nbdkit-server - update to 1.24.0-4
nbdkit-ssh-plugin - update to 1.24.0-4
nbdkit-tar-filter - update to 1.24.0-4
nbdkit-tar-plugin - update to 1.24.0-4
nbdkit-tmpdisk-plugin - update to 1.24.0-4
nbdkit-xz-filter - update to 1.24.0-4
nbdkit-bash-completion - update to 1.24.0-4
virt-v2v-man-pages-uk - update to 1.42.0-19
virt-v2v-man-pages-ja - update to 1.42.0-19
virt-v2v - update to 1.42.0-19
virt-v2v-bash-completion - update to 1.42.0-19
ocaml-libguestfs - update to 1.44.0-5.0.1
libguestfs-man-pages-ja - update to 1.44.0-5.0.1
libguestfs-man-pages-uk - update to 1.44.0-5.0.1
libguestfs-tools - update to 1.44.0-5.0.1
lua-guestfs - update to 1.44.0-5.0.1
libguestfs-javadoc - update to 1.44.0-5.0.1
libguestfs-inspect-icons - update to 1.44.0-5.0.1
libguestfs-bash-completion - update to 1.44.0-5.0.1
virt-dib - update to 1.44.0-5.0.1
libguestfs - update to 1.44.0-5.0.1
libguestfs-appliance - update to 1.44.0-5.0.1
libguestfs-devel - update to 1.44.0-5.0.1
libguestfs-gobject - update to 1.44.0-5.0.1
ocaml-libguestfs-devel - update to 1.44.0-5.0.1
perl-Sys-Guestfs - update to 1.44.0-5.0.1
python3-libguestfs - update to 1.44.0-5.0.1
ruby-libguestfs - update to 1.44.0-5.0.1
libguestfs-xfs - update to 1.44.0-5.0.1
libguestfs-tools-c - update to 1.44.0-5.0.1
libguestfs-rsync - update to 1.44.0-5.0.1
libguestfs-rescue - update to 1.44.0-5.0.1
libguestfs-java-devel - update to 1.44.0-5.0.1
libguestfs-java - update to 1.44.0-5.0.1
libguestfs-gobject-devel - update to 1.44.0-5.0.1
libguestfs-gfs2 - update to 1.44.0-5.0.1
qemu-block-rbd-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-debugsource - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-ssh - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-ssh-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-kvm - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-curl-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-rbd - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-tools-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-guest-agent-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-x86-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-lang - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-guest-agent - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-x86 - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-tools - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-curl - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-system-ppc (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-mips (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-misc (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-arm (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-s390x (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-sparc (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-x86 (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-audio-oss - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2
qemu-audio-sdl-debuginfo - update to 3.1.1.1-69.1
qemu-ui-sdl - update to 3.1.1.1-69.1
qemu-block-iscsi - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-pa - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-curses-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-sdl - update to 3.1.1.1-69.1
qemu-ppc - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-s390-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1
qemu-s390 - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1
qemu-ppc-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-arm-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-arm - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-gtk - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-curses - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-alsa-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-iscsi-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-sdl-debuginfo - update to 3.1.1.1-69.1
qemu-audio-alsa - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-oss-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 6.2.0-150400.37.5.3
qemu-audio-pa-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-gtk-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-debuginfo - addressed in versions 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-img - update to 4.1.0-63
qemu-help - update to 4.1.0-63
qemu-guest-agent - update to 4.1.0-63
qemu-seabios - update to 4.1.0-63
qemu-debugsource - update to 4.1.0-63
qemu - update to 4.1.0-63
qemu-block-curl - update to 4.1.0-63
qemu-block-iscsi - update to 4.1.0-63
qemu-block-rbd - update to 4.1.0-63
qemu-block-ssh - update to 4.1.0-63
qemu-debuginfo - update to 4.1.0-63
qemu-ui-spice-app - addressed in versions 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-spice-app-debuginfo - addressed in versions 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-microvm - addressed in versions 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu (Debian package) - update to 1:5.2+dfsg-11+deb11u2
qemu-s390x-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-s390x - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-linux-user-debugsource - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.1
qemu-linux-user-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.1
qemu-linux-user - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.1
qemu-ksm - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ivshmem-tools-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ivshmem-tools - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-usb-smartcard-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-usb-smartcard - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-usb-redirect-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-usb-redirect - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-s390x-virtio-gpu-ccw - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-vga-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-skiboot - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-vga - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-spice-core - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-SLOF - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-vhost-user-gpu-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-vhost-user-gpu - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-spice-core-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-opengl-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-opengl - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-nfs-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-nfs - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-gluster-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-gluster - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-dmg-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-dmg - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-spice-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-spice - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-gpu-pci - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-gpu-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-gpu - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-qxl-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-qxl - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-extra-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-extra - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-gpu-pci-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-chardev-spice-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-chardev-spice - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-chardev-baum-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-chardev-baum - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-testsuite - addressed in versions 5.2.0-150300.115.4, 6.2.0-150400.37.5.5
supermin-devel - update to 5.2.1-1
supermin - update to 5.2.1-1
qemu-kvm-core - update to 6.2.0-11.0.1
qemu-kvm-block-iscsi - update to 6.2.0-11.0.1
qemu-kvm-docs - update to 6.2.0-11.0.1
qemu-kvm-common - update to 6.2.0-11.0.1
qemu-kvm-block-ssh - update to 6.2.0-11.0.1
qemu-kvm-block-rbd - update to 6.2.0-11.0.1
qemu-kvm-block-curl - update to 6.2.0-11.0.1
qemu-kvm - update to 6.2.0-11.0.1
qemu-img - update to 6.2.0-11.0.1
qemu-guest-agent - update to 6.2.0-11.0.1
qemu-kvm-tests - update to 6.2.0-11.0.1
qemu-kvm-block-gluster - update to 6.2.0-11.0.1
qemu-kvm-hw-usbredir - update to 6.2.0-11.0.1
qemu-kvm-ui-opengl - update to 6.2.0-11.0.1
qemu-kvm-ui-spice - update to 6.2.0-11.0.1
qemu-hw-usb-host-debuginfo - update to 6.2.0-150400.37.5.3
qemu-hw-usb-host - update to 6.2.0-150400.37.5.3
qemu-accel-tcg-x86 - update to 6.2.0-150400.37.5.3
qemu-accel-tcg-x86-debuginfo - update to 6.2.0-150400.37.5.3
qemu-accel-qtest-debuginfo - update to 6.2.0-150400.37.5.3
qemu-accel-qtest - update to 6.2.0-150400.37.5.3
qemu-audio-jack - update to 6.2.0-150400.37.5.3
qemu-audio-jack-debuginfo - update to 6.2.0-150400.37.5.3
python3-libvirt - update to 8.0.0-1
perl-Sys-Virt - update to 8.0.0-1
libvirt-daemon-driver-storage-core - update to 8.0.0-5.2
libvirt-daemon-kvm - update to 8.0.0-5.2
libvirt-daemon-driver-storage-disk - update to 8.0.0-5.2
libvirt-daemon-driver-storage-gluster - update to 8.0.0-5.2
libvirt-daemon-driver-storage-iscsi - update to 8.0.0-5.2
libvirt-daemon-driver-storage-iscsi-direct - update to 8.0.0-5.2
libvirt-daemon-driver-storage-logical - update to 8.0.0-5.2
libvirt-daemon-driver-storage-mpath - update to 8.0.0-5.2
libvirt-wireshark - update to 8.0.0-5.2
libvirt-nss - update to 8.0.0-5.2
libvirt-lock-sanlock - update to 8.0.0-5.2
libvirt-libs - update to 8.0.0-5.2
libvirt-docs - update to 8.0.0-5.2
libvirt-devel - update to 8.0.0-5.2
libvirt-daemon-driver-storage-rbd - update to 8.0.0-5.2
libvirt-daemon-driver-storage-scsi - update to 8.0.0-5.2
libvirt-daemon-driver-secret - update to 8.0.0-5.2
libvirt - update to 8.0.0-5.2
libvirt-client - update to 8.0.0-5.2
libvirt-daemon - update to 8.0.0-5.2
libvirt-daemon-config-network - update to 8.0.0-5.2
libvirt-daemon-config-nwfilter - update to 8.0.0-5.2
libvirt-daemon-driver-interface - update to 8.0.0-5.2
libvirt-daemon-driver-network - update to 8.0.0-5.2
libvirt-daemon-driver-nodedev - update to 8.0.0-5.2
libvirt-daemon-driver-nwfilter - update to 8.0.0-5.2
libvirt-daemon-driver-qemu - update to 8.0.0-5.2
libvirt-daemon-driver-storage - update to 8.0.0-5.2
libguestfs-winsupport - update to 8.6-1
qemu-sgabios - addressed in versions 8-41.76.1, 8-69.1, 8-150100.80.43.2, 8-150200.69.1, 8-150300.115.2, 8-150400.37.5.3

External References

Related Security Bulletins