Race condition in QEMU - CVE-2021-4207

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU63788

Race condition in QEMU - CVE-2021-4207

Published: May 30, 2022 / Updated: May 30, 2022


Vulnerability identifier: #VU63788
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-4207
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in the QXL display device emulation in QEMU. A privileged user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.


Affected software

QEMU
Debian Linux
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux Server - AUS
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Linux Enterprise Server 12 SP2 BCL
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Server Applications
openSUSE Leap
Ubuntu
openEuler
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
netcf-devel
netcf-libs
netcf
swtpm-tools-pkcs11
swtpm
swtpm-devel
swtpm-libs
swtpm-tools
libtpms-devel
libtpms
sgabios
sgabios-bin
qemu-ipxe
libvirt-dbus
hivex-devel
ocaml-hivex
ocaml-hivex-devel
perl-hivex
python3-hivex
ruby-hivex
hivex
libnbd-bash-completion
libnbd
python3-libnbd
libnbd-devel
ocaml-libnbd-devel
ocaml-libnbd
nbdfuse
qemu-seabios
qemu-vgabios
seavgabios-bin
seabios-bin
seabios
libiscsi
libiscsi-devel
libiscsi-utils
nbdkit-xz-filter
nbdkit-bash-completion
nbdkit-vddk-plugin
nbdkit
nbdkit-basic-filters
nbdkit-basic-plugins
nbdkit-curl-plugin
nbdkit-devel
nbdkit-example-plugins
nbdkit-gzip-filter
nbdkit-gzip-plugin
nbdkit-linuxdisk-plugin
nbdkit-nbd-plugin
nbdkit-python-plugin
nbdkit-server
nbdkit-ssh-plugin
nbdkit-tar-filter
nbdkit-tar-plugin
nbdkit-tmpdisk-plugin
virt-v2v-man-pages-uk
virt-v2v-bash-completion
virt-v2v-man-pages-ja
virt-v2v
libguestfs-rsync
libguestfs-man-pages-ja
libguestfs-javadoc
libguestfs-inspect-icons
libguestfs-tools-c
libguestfs-man-pages-uk
libguestfs-tools
libguestfs-bash-completion
virt-dib
ruby-libguestfs
python3-libguestfs
perl-Sys-Guestfs
ocaml-libguestfs
libguestfs-rescue
libguestfs-java-devel
libguestfs-java
libguestfs-gobject-devel
libguestfs-gobject
libguestfs-gfs2
libguestfs-devel
libguestfs-appliance
libguestfs
libguestfs-xfs
lua-guestfs
ocaml-libguestfs-devel
qemu-block-ssh
qemu-block-rbd-debuginfo
qemu-debugsource
qemu-block-ssh-debuginfo
qemu-guest-agent-debuginfo
qemu
qemu-block-curl-debuginfo
qemu-tools-debuginfo
qemu-block-curl
qemu-x86-debuginfo
qemu-lang
qemu-guest-agent
qemu-block-rbd
qemu-x86
qemu-kvm
qemu-tools
qemu-audio-pa-debuginfo
qemu-audio-sdl
qemu-ui-curses-debuginfo
qemu-audio-pa
qemu-block-iscsi
qemu-ui-sdl
qemu-audio-sdl-debuginfo
qemu-block-iscsi-debuginfo
qemu-s390-debuginfo
qemu-s390
qemu-ppc-debuginfo
qemu-ppc
qemu-arm-debuginfo
qemu-arm
qemu-ui-gtk
qemu-audio-oss
qemu-audio-oss-debuginfo
qemu-ui-sdl-debuginfo
qemu-audio-alsa
qemu-ui-gtk-debuginfo
qemu-ui-curses
qemu-audio-alsa-debuginfo
qemu-debuginfo
qemu-help
qemu-img
qemu-ui-spice-app-debuginfo
qemu-ui-spice-app
qemu-microvm
qemu-s390x-debuginfo
qemu-hw-display-virtio-vga
qemu-s390x
qemu-linux-user-debugsource
qemu-linux-user-debuginfo
qemu-linux-user
qemu-ivshmem-tools-debuginfo
qemu-ivshmem-tools
qemu-hw-usb-smartcard-debuginfo
qemu-hw-usb-smartcard
qemu-hw-usb-redirect-debuginfo
qemu-hw-usb-redirect
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-hw-s390x-virtio-gpu-ccw
qemu-hw-display-virtio-vga-debuginfo
qemu-skiboot
qemu-ui-spice-core
qemu-ksm
qemu-SLOF
qemu-vhost-user-gpu-debuginfo
qemu-vhost-user-gpu
qemu-ui-spice-core-debuginfo
qemu-ui-opengl-debuginfo
qemu-ui-opengl
qemu-block-nfs-debuginfo
qemu-block-nfs
qemu-block-gluster-debuginfo
qemu-block-gluster
qemu-block-dmg-debuginfo
qemu-block-dmg
qemu-audio-spice-debuginfo
qemu-audio-spice
qemu-hw-display-virtio-gpu-pci
qemu-hw-display-virtio-gpu-debuginfo
qemu-hw-display-virtio-gpu
qemu-hw-display-qxl-debuginfo
qemu-hw-display-qxl
qemu-extra-debuginfo
qemu-extra
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-chardev-spice-debuginfo
qemu-chardev-spice
qemu-chardev-baum-debuginfo
qemu-chardev-baum
qemu-testsuite
supermin-devel
supermin
qemu-kvm-tests
qemu-kvm-docs
qemu-kvm-core
qemu-kvm-common
qemu-kvm-block-ssh
qemu-kvm-block-rbd
qemu-kvm-block-iscsi
qemu-kvm-block-curl
qemu-kvm-hw-usbredir
qemu-kvm-ui-opengl
qemu-kvm-block-gluster
qemu-kvm-ui-spice
qemu-hw-usb-host-debuginfo
qemu-accel-qtest-debuginfo
qemu-hw-usb-host
qemu-accel-qtest
qemu-accel-tcg-x86
qemu-accel-tcg-x86-debuginfo
qemu-audio-jack
qemu-audio-jack-debuginfo
qemu-sgabios
python3-libvirt
perl-Sys-Virt
libvirt-daemon-driver-storage-iscsi-direct
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-storage-gluster
libvirt-daemon-driver-storage-disk
libvirt-daemon-driver-storage-core
libvirt-daemon-driver-storage
libvirt-daemon-driver-secret
libvirt-daemon-driver-qemu
libvirt-wireshark
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-network
libvirt-daemon-driver-interface
libvirt-daemon-config-nwfilter
libvirt-daemon-config-network
libvirt-daemon
libvirt-client
libvirt
libvirt-daemon-driver-storage-mpath
libvirt-libs
libvirt-docs
libvirt-lock-sanlock
libvirt-devel
libvirt-daemon-kvm
libvirt-daemon-driver-storage-scsi
libvirt-daemon-driver-storage-rbd
libvirt-nss
libguestfs-winsupport
qemu-system-sparc (Ubuntu package)
qemu-system-x86 (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu-system (Ubuntu package)
qemu-system-mips (Ubuntu package)
qemu-system-s390x (Ubuntu package)
qemu-system-misc (Ubuntu package)
qemu-system-ppc (Ubuntu package)
qemu-system-x86-microvm (Ubuntu package)
qemu-system-x86-xen (Ubuntu package)
qemu (Debian package)
Red Hat Enterprise Linux Advanced Virtualization

How to mitigate CVE-2021-4207

Install updates from vendor's website.

QEMU - update to 7.0.0
netcf-devel - update to 0.2.8-12
netcf-libs - update to 0.2.8-12
netcf - update to 0.2.8-12
swtpm-tools-pkcs11 - update to 0.7.0-1.20211109gitb79fd91
swtpm - update to 0.7.0-1.20211109gitb79fd91
swtpm-devel - update to 0.7.0-1.20211109gitb79fd91
swtpm-libs - update to 0.7.0-1.20211109gitb79fd91
swtpm-tools - update to 0.7.0-1.20211109gitb79fd91
libtpms-devel - update to 0.9.1-0.20211126git1ff6fe1f43
libtpms - update to 0.9.1-0.20211126git1ff6fe1f43
sgabios - update to 0.20170427git-3
sgabios-bin - update to 0.20170427git-3
qemu-ipxe - addressed in versions 1.0.0-41.76.1, 1.0.0+-69.1, 1.0.0+-150100.80.43.2, 1.0.0+-150200.69.1
libvirt-dbus - update to 1.3.0-2
hivex-devel - update to 1.3.18-23
ocaml-hivex - update to 1.3.18-23
ocaml-hivex-devel - update to 1.3.18-23
perl-hivex - update to 1.3.18-23
python3-hivex - update to 1.3.18-23
ruby-hivex - update to 1.3.18-23
hivex - update to 1.3.18-23
libnbd-bash-completion - update to 1.6.0-5
libnbd - update to 1.6.0-5
python3-libnbd - update to 1.6.0-5
libnbd-devel - update to 1.6.0-5
ocaml-libnbd-devel - update to 1.6.0-5
ocaml-libnbd - update to 1.6.0-5
nbdfuse - update to 1.6.0-5
qemu-seabios - addressed in versions 1.9.1_0_gb3ef39f-41.76.1, 1.12.0_0_ga698c89-69.1, 1.12.0_0_ga698c89-150100.80.43.2, 1.12.1+-150200.69.1, 1.14.0_0_g155821a-150300.115.2, 1.15.0_0_g2dd4b9b-150400.37.5.3
qemu-vgabios - addressed in versions 1.9.1_0_gb3ef39f-41.76.1, 1.12.0_0_ga698c89-69.1, 1.12.0_0_ga698c89-150100.80.43.2, 1.12.1+-150200.69.1, 1.14.0_0_g155821a-150300.115.2, 1.15.0_0_g2dd4b9b-150400.37.5.3
seavgabios-bin - update to 1.15.0-2
seabios-bin - update to 1.15.0-2
seabios - update to 1.15.0-2
libiscsi - update to 1.18.0-8.0.1
libiscsi-devel - update to 1.18.0-8.0.1
libiscsi-utils - update to 1.18.0-8.0.1
nbdkit-xz-filter - update to 1.24.0-4
nbdkit-bash-completion - update to 1.24.0-4
nbdkit-vddk-plugin - update to 1.24.0-4
nbdkit - update to 1.24.0-4
nbdkit-basic-filters - update to 1.24.0-4
nbdkit-basic-plugins - update to 1.24.0-4
nbdkit-curl-plugin - update to 1.24.0-4
nbdkit-devel - update to 1.24.0-4
nbdkit-example-plugins - update to 1.24.0-4
nbdkit-gzip-filter - update to 1.24.0-4
nbdkit-gzip-plugin - update to 1.24.0-4
nbdkit-linuxdisk-plugin - update to 1.24.0-4
nbdkit-nbd-plugin - update to 1.24.0-4
nbdkit-python-plugin - update to 1.24.0-4
nbdkit-server - update to 1.24.0-4
nbdkit-ssh-plugin - update to 1.24.0-4
nbdkit-tar-filter - update to 1.24.0-4
nbdkit-tar-plugin - update to 1.24.0-4
nbdkit-tmpdisk-plugin - update to 1.24.0-4
virt-v2v-man-pages-uk - update to 1.42.0-19
virt-v2v-bash-completion - update to 1.42.0-19
virt-v2v-man-pages-ja - update to 1.42.0-19
virt-v2v - update to 1.42.0-19
libguestfs-rsync - update to 1.44.0-5.0.1
libguestfs-man-pages-ja - update to 1.44.0-5.0.1
libguestfs-javadoc - update to 1.44.0-5.0.1
libguestfs-inspect-icons - update to 1.44.0-5.0.1
libguestfs-tools-c - update to 1.44.0-5.0.1
libguestfs-man-pages-uk - update to 1.44.0-5.0.1
libguestfs-tools - update to 1.44.0-5.0.1
libguestfs-bash-completion - update to 1.44.0-5.0.1
virt-dib - update to 1.44.0-5.0.1
ruby-libguestfs - update to 1.44.0-5.0.1
python3-libguestfs - update to 1.44.0-5.0.1
perl-Sys-Guestfs - update to 1.44.0-5.0.1
ocaml-libguestfs - update to 1.44.0-5.0.1
libguestfs-rescue - update to 1.44.0-5.0.1
libguestfs-java-devel - update to 1.44.0-5.0.1
libguestfs-java - update to 1.44.0-5.0.1
libguestfs-gobject-devel - update to 1.44.0-5.0.1
libguestfs-gobject - update to 1.44.0-5.0.1
libguestfs-gfs2 - update to 1.44.0-5.0.1
libguestfs-devel - update to 1.44.0-5.0.1
libguestfs-appliance - update to 1.44.0-5.0.1
libguestfs - update to 1.44.0-5.0.1
libguestfs-xfs - update to 1.44.0-5.0.1
lua-guestfs - update to 1.44.0-5.0.1
ocaml-libguestfs-devel - update to 1.44.0-5.0.1
qemu-block-ssh - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-rbd-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-debugsource - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-ssh-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-guest-agent-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-curl-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-tools-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-curl - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-x86-debuginfo - addressed in versions 2.6.2-41.76.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-lang - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-guest-agent - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-rbd - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-x86 - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-kvm - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-tools - addressed in versions 2.6.2-41.76.1, 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-pa-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-sdl - update to 3.1.1.1-69.1
qemu-ui-curses-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-pa - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-iscsi - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-sdl - update to 3.1.1.1-69.1
qemu-audio-sdl-debuginfo - update to 3.1.1.1-69.1
qemu-block-iscsi-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-s390-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1
qemu-s390 - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1
qemu-ppc-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ppc - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-arm-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-arm - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-gtk - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-oss - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2
qemu-audio-oss-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 6.2.0-150400.37.5.3
qemu-ui-sdl-debuginfo - update to 3.1.1.1-69.1
qemu-audio-alsa - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-gtk-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-curses - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-alsa-debuginfo - addressed in versions 3.1.1.1-69.1, 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-debuginfo - addressed in versions 3.1.1.1-150100.80.43.2, 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-help - update to 4.1.0-63
qemu-img - update to 4.1.0-63
qemu-guest-agent - update to 4.1.0-63
qemu-debugsource - update to 4.1.0-63
qemu-seabios - update to 4.1.0-63
qemu-block-curl - update to 4.1.0-63
qemu - update to 4.1.0-63
qemu-debuginfo - update to 4.1.0-63
qemu-block-ssh - update to 4.1.0-63
qemu-block-rbd - update to 4.1.0-63
qemu-block-iscsi - update to 4.1.0-63
qemu-ui-spice-app-debuginfo - addressed in versions 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-spice-app - addressed in versions 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-microvm - addressed in versions 4.2.1-150200.69.1, 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-s390x-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-vga - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-s390x - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-linux-user-debugsource - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.1
qemu-linux-user-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.1
qemu-linux-user - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.1
qemu-ivshmem-tools-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ivshmem-tools - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-usb-smartcard-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-usb-smartcard - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-usb-redirect-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-usb-redirect - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-s390x-virtio-gpu-ccw - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-vga-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-skiboot - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-spice-core - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ksm - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-SLOF - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-vhost-user-gpu-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-vhost-user-gpu - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-spice-core-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-opengl-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-ui-opengl - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-nfs-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-nfs - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-gluster-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-gluster - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-dmg-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-block-dmg - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-spice-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-audio-spice - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-gpu-pci - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-gpu-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-gpu - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-qxl-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-qxl - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-extra-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-extra - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-hw-display-virtio-gpu-pci-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-chardev-spice-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-chardev-spice - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-chardev-baum-debuginfo - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-chardev-baum - addressed in versions 5.2.0-150300.115.2, 6.2.0-150400.37.5.3
qemu-testsuite - addressed in versions 5.2.0-150300.115.4, 6.2.0-150400.37.5.5
supermin-devel - update to 5.2.1-1
supermin - update to 5.2.1-1
qemu-kvm-tests - update to 6.2.0-11.0.1
qemu-kvm-docs - update to 6.2.0-11.0.1
qemu-kvm-core - update to 6.2.0-11.0.1
qemu-kvm-common - update to 6.2.0-11.0.1
qemu-kvm-block-ssh - update to 6.2.0-11.0.1
qemu-kvm-block-rbd - update to 6.2.0-11.0.1
qemu-kvm-block-iscsi - update to 6.2.0-11.0.1
qemu-kvm-block-curl - update to 6.2.0-11.0.1
qemu-kvm - update to 6.2.0-11.0.1
qemu-img - update to 6.2.0-11.0.1
qemu-guest-agent - update to 6.2.0-11.0.1
qemu-kvm-hw-usbredir - update to 6.2.0-11.0.1
qemu-kvm-ui-opengl - update to 6.2.0-11.0.1
qemu-kvm-block-gluster - update to 6.2.0-11.0.1
qemu-kvm-ui-spice - update to 6.2.0-11.0.1
qemu-hw-usb-host-debuginfo - update to 6.2.0-150400.37.5.3
qemu-accel-qtest-debuginfo - update to 6.2.0-150400.37.5.3
qemu-hw-usb-host - update to 6.2.0-150400.37.5.3
qemu-accel-qtest - update to 6.2.0-150400.37.5.3
qemu-accel-tcg-x86 - update to 6.2.0-150400.37.5.3
qemu-accel-tcg-x86-debuginfo - update to 6.2.0-150400.37.5.3
qemu-audio-jack - update to 6.2.0-150400.37.5.3
qemu-audio-jack-debuginfo - update to 6.2.0-150400.37.5.3
qemu-sgabios - addressed in versions 8-41.76.1, 8-69.1, 8-150100.80.43.2, 8-150200.69.1, 8-150300.115.2, 8-150400.37.5.3
python3-libvirt - update to 8.0.0-1
perl-Sys-Virt - update to 8.0.0-1
libvirt-daemon-driver-storage-iscsi-direct - update to 8.0.0-5.2
libvirt-daemon-driver-nwfilter - update to 8.0.0-5.2
libvirt-daemon-driver-storage-logical - update to 8.0.0-5.2
libvirt-daemon-driver-storage-iscsi - update to 8.0.0-5.2
libvirt-daemon-driver-storage-gluster - update to 8.0.0-5.2
libvirt-daemon-driver-storage-disk - update to 8.0.0-5.2
libvirt-daemon-driver-storage-core - update to 8.0.0-5.2
libvirt-daemon-driver-storage - update to 8.0.0-5.2
libvirt-daemon-driver-secret - update to 8.0.0-5.2
libvirt-daemon-driver-qemu - update to 8.0.0-5.2
libvirt-wireshark - update to 8.0.0-5.2
libvirt-daemon-driver-nodedev - update to 8.0.0-5.2
libvirt-daemon-driver-network - update to 8.0.0-5.2
libvirt-daemon-driver-interface - update to 8.0.0-5.2
libvirt-daemon-config-nwfilter - update to 8.0.0-5.2
libvirt-daemon-config-network - update to 8.0.0-5.2
libvirt-daemon - update to 8.0.0-5.2
libvirt-client - update to 8.0.0-5.2
libvirt - update to 8.0.0-5.2
libvirt-daemon-driver-storage-mpath - update to 8.0.0-5.2
libvirt-libs - update to 8.0.0-5.2
libvirt-docs - update to 8.0.0-5.2
libvirt-lock-sanlock - update to 8.0.0-5.2
libvirt-devel - update to 8.0.0-5.2
libvirt-daemon-kvm - update to 8.0.0-5.2
libvirt-daemon-driver-storage-scsi - update to 8.0.0-5.2
libvirt-daemon-driver-storage-rbd - update to 8.0.0-5.2
libvirt-nss - update to 8.0.0-5.2
libguestfs-winsupport - update to 8.6-1
qemu-system-sparc (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-x86 (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-arm (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-mips (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-s390x (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-misc (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-ppc (Ubuntu package) - addressed in versions 1:2.11+dfsg-1ubuntu7.40, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2
qemu (Debian package) - update to 1:5.2+dfsg-11+deb11u2

External References

Related Security Bulletins