Infinite loop in QEMU - CVE-2023-3255

Vulnerability identifier: #VU78946

CSH Severity: Medium

CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-3255

CWE-ID: CWE-835

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the vnc_client_cut_text_ext function in ui/vnc-clipboard.c. A remote authenticated client who is able to send a clipboard to the QEMU built-in VNC server can perform a denial of service conditions.

QEMU
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Basesystem Module
Server Applications Module
openSUSE Leap
Ubuntu
openEuler
Fedora
Juniper Junos Space
netcf
netcf-devel
netcf-libs
swtpm-tools-pkcs11
swtpm-tools
swtpm-libs
swtpm-devel
swtpm
libtpms
libtpms-devel
sgabios-bin
sgabios
qemu-ipxe
libvirt-dbus
python3-hivex
perl-hivex
ocaml-hivex-devel
ocaml-hivex
ruby-hivex
hivex-devel
hivex
libnbd
python3-libnbd
libnbd-bash-completion
libnbd-devel
ocaml-libnbd-devel
ocaml-libnbd
nbdfuse
qemu-seabios
qemu-vgabios
seabios-bin
seavgabios-bin
seabios
libiscsi
libiscsi-devel
libiscsi-utils
nbdkit-linuxdisk-plugin
nbdkit
nbdkit-gzip-plugin
nbdkit-gzip-filter
nbdkit-example-plugins
nbdkit-devel
nbdkit-curl-plugin
nbdkit-basic-plugins
nbdkit-basic-filters
nbdkit-python-plugin
nbdkit-nbd-plugin
nbdkit-server
nbdkit-ssh-plugin
nbdkit-tar-filter
nbdkit-tar-plugin
nbdkit-tmpdisk-plugin
nbdkit-xz-filter
nbdkit-vddk-plugin
nbdkit-bash-completion
virt-v2v-man-pages-uk
virt-v2v
virt-v2v-bash-completion
virt-v2v-man-pages-ja
libguestfs-tools
libguestfs-man-pages-uk
libguestfs-man-pages-ja
libguestfs-javadoc
libguestfs
libguestfs-appliance
libguestfs-devel
libguestfs-gfs2
libguestfs-gobject
libguestfs-gobject-devel
libguestfs-java
libguestfs-rescue
python3-libguestfs
perl-Sys-Guestfs
lua-guestfs
ocaml-libguestfs-devel
ocaml-libguestfs
libguestfs-java-devel
ruby-libguestfs
virt-dib
libguestfs-bash-completion
libguestfs-inspect-icons
libguestfs-xfs
libguestfs-tools-c
libguestfs-rsync
qemu-system-x86-xen (Ubuntu package)
qemu-system (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu-system-mips (Ubuntu package)
qemu-system-misc (Ubuntu package)
qemu-system-ppc (Ubuntu package)
qemu-system-s390x (Ubuntu package)
qemu-system-sparc (Ubuntu package)
qemu-system-x86 (Ubuntu package)
qemu (Ubuntu package)
qemu-system-x86-microvm (Ubuntu package)
supermin-devel
supermin
qemu-user-static
qemu-img
qemu-guest-agent
qemu-kvm-ui-spice
qemu-kvm-ui-opengl
qemu-kvm-hw-usbredir
qemu-kvm-block-gluster
qemu-kvm-tests
qemu-kvm-docs
qemu-kvm-core
qemu-kvm-common
qemu-kvm-block-ssh
qemu-kvm-block-rbd
qemu-kvm-block-iscsi
qemu-kvm-block-curl
qemu-kvm
qemu-help
qemu-debuginfo
qemu-system-riscv
qemu-system-arm
qemu-block-iscsi
qemu-block-ssh
qemu-block-curl
qemu-debugsource
qemu-block-rbd
qemu-system-aarch64
qemu-system-x86_64
qemu-hw-usb-host
qemu
qemu-chardev-baum
qemu-accel-tcg-x86-debuginfo
qemu-microvm
qemu-audio-oss-debuginfo
qemu-vhost-user-gpu
qemu-extra
qemu-linux-user-debuginfo
qemu-hw-display-virtio-vga-debuginfo
qemu-ui-opengl-debuginfo
qemu-accel-tcg-x86
qemu-SLOF
qemu-s390x
qemu-extra-debuginfo
qemu-hw-usb-smartcard-debuginfo
qemu-skiboot
qemu-block-rbd-debuginfo
qemu-ivshmem-tools
qemu-hw-usb-smartcard
qemu-block-nfs
qemu-audio-spice
qemu-arm
qemu-x86
qemu-ivshmem-tools-debuginfo
qemu-ui-spice-app
qemu-tools
qemu-ui-spice-core
qemu-hw-display-virtio-gpu-pci
qemu-linux-user
qemu-lang
qemu-audio-pa-debuginfo
qemu-block-ssh-debuginfo
qemu-hw-display-virtio-gpu-debuginfo
qemu-audio-oss
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-block-iscsi-debuginfo
qemu-ppc
qemu-ui-opengl
qemu-hw-s390x-virtio-gpu-ccw
qemu-audio-jack
qemu-block-dmg
qemu-chardev-spice-debuginfo
qemu-tools-debuginfo
qemu-vhost-user-gpu-debuginfo
qemu-audio-spice-debuginfo
qemu-chardev-spice
qemu-block-nfs-debuginfo
qemu-ui-spice-app-debuginfo
qemu-accel-qtest
qemu-x86-debuginfo
qemu-block-curl-debuginfo
qemu-ksm
qemu-ui-gtk-debuginfo
qemu-hw-display-qxl
qemu-hw-display-qxl-debuginfo
qemu-audio-jack-debuginfo
qemu-block-gluster-debuginfo
qemu-s390x-debuginfo
qemu-hw-display-virtio-gpu
qemu-ui-curses-debuginfo
qemu-ppc-debuginfo
qemu-audio-alsa-debuginfo
qemu-arm-debuginfo
qemu-guest-agent-debuginfo
qemu-block-dmg-debuginfo
qemu-linux-user-debugsource
qemu-audio-alsa
qemu-accel-qtest-debuginfo
qemu-ui-gtk
qemu-hw-usb-redirect-debuginfo
qemu-hw-display-virtio-vga
qemu-audio-pa
qemu-chardev-baum-debuginfo
qemu-ui-spice-core-debuginfo
qemu-hw-usb-host-debuginfo
qemu-block-gluster
qemu-ui-curses
qemu-hw-usb-redirect
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-audio-dbus-debuginfo
qemu-ui-dbus-debuginfo
qemu-audio-dbus
qemu-ui-dbus
qemu-headless
qemu-system-xen (Ubuntu package)
qemu-device-display-virtio-vga-gl
qemu-user
qemu-user-binfmt
qemu-virtiofsd
qemu-docs
qemu-device-usb-smartcard
qemu-device-usb-redirect
qemu-device-usb-host
qemu-device-display-virtio-vga
qemu-device-display-virtio-gpu-pci-gl
qemu-device-display-virtio-gpu-pci
qemu-device-display-virtio-gpu-gl
qemu-device-display-virtio-gpu-ccw
qemu-device-display-virtio-gpu
qemu-device-display-qxl
qemu-char-spice
qemu-char-baum
qemu-pr-helper
qemu-system-aarch64-core
qemu-system-arm-core
qemu-system-loongarch64
qemu-system-loongarch64-core
qemu-common
qemu-system-riscv-core
qemu-system-x86
qemu-system-x86-core
qemu-tests
qemu-ui-egl-headless
perl-Sys-Virt
python3-libvirt
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-qemu
libvirt-daemon-driver-secret
libvirt-daemon-driver-storage
libvirt-daemon-driver-storage-core
libvirt-daemon-driver-storage-gluster
libvirt-daemon-driver-storage-disk
libvirt-wireshark
libvirt-nss
libvirt-lock-sanlock
libvirt-libs
libvirt-docs
libvirt-devel
libvirt-daemon-driver-network
libvirt-daemon-kvm
libvirt-daemon-driver-storage-scsi
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-storage-mpath
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-storage-iscsi-direct
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-storage-iscsi
libvirt
libvirt-daemon-driver-interface
libvirt-client
libvirt-daemon-config-nwfilter
libvirt-daemon-config-network
libvirt-daemon
qemu-kvm (Red Hat package)
libguestfs-winsupport
qemu-sgabios
Red Hat OpenStack

Install updates from vendor's website.

QEMU - update to 8.1.0 rc0
Juniper Junos Space - update to 24.1R2
netcf - update to 0.2.8-12.0.1
netcf-devel - update to 0.2.8-12.0.1
netcf-libs - update to 0.2.8-12.0.1
swtpm-tools-pkcs11 - update to 0.7.0-4.20211109gitb79fd91
swtpm-tools - update to 0.7.0-4.20211109gitb79fd91
swtpm-libs - update to 0.7.0-4.20211109gitb79fd91
swtpm-devel - update to 0.7.0-4.20211109gitb79fd91
swtpm - update to 0.7.0-4.20211109gitb79fd91
libtpms - update to 0.9.1-2.20211126git1ff6fe1f43
libtpms-devel - update to 0.9.1-2.20211126git1ff6fe1f43
sgabios-bin - update to 0.20170427git-3
sgabios - update to 0.20170427git-3
qemu-ipxe - addressed in versions 1.0.0+-150400.37.20.1, 1.0.0+-150500.49.6.1
libvirt-dbus - update to 1.3.0-2
python3-hivex - update to 1.3.18-23
perl-hivex - update to 1.3.18-23
ocaml-hivex-devel - update to 1.3.18-23
ocaml-hivex - update to 1.3.18-23
ruby-hivex - update to 1.3.18-23
hivex-devel - update to 1.3.18-23
hivex - update to 1.3.18-23
libnbd - update to 1.6.0-5.0.2
python3-libnbd - update to 1.6.0-5.0.2
libnbd-bash-completion - update to 1.6.0-5.0.2
libnbd-devel - update to 1.6.0-5.0.2
ocaml-libnbd-devel - update to 1.6.0-5.0.2
ocaml-libnbd - update to 1.6.0-5.0.2
nbdfuse - update to 1.6.0-5.0.2
qemu-seabios - addressed in versions 1.15.0_0_g2dd4b9b-150400.37.20.1, 1.16.0_0_gd239552-150500.49.6.1
qemu-vgabios - addressed in versions 1.15.0_0_g2dd4b9b-150400.37.20.1, 1.16.0_0_gd239552-150500.49.6.1
seabios-bin - update to 1.16.0-4
seavgabios-bin - update to 1.16.0-4
seabios - update to 1.16.0-4
libiscsi - update to 1.18.0-8.0.1
libiscsi-devel - update to 1.18.0-8.0.1
libiscsi-utils - update to 1.18.0-8.0.1
nbdkit-linuxdisk-plugin - update to 1.24.0-5
nbdkit - update to 1.24.0-5
nbdkit-gzip-plugin - update to 1.24.0-5
nbdkit-gzip-filter - update to 1.24.0-5
nbdkit-example-plugins - update to 1.24.0-5
nbdkit-devel - update to 1.24.0-5
nbdkit-curl-plugin - update to 1.24.0-5
nbdkit-basic-plugins - update to 1.24.0-5
nbdkit-basic-filters - update to 1.24.0-5
nbdkit-python-plugin - update to 1.24.0-5
nbdkit-nbd-plugin - update to 1.24.0-5
nbdkit-server - update to 1.24.0-5
nbdkit-ssh-plugin - update to 1.24.0-5
nbdkit-tar-filter - update to 1.24.0-5
nbdkit-tar-plugin - update to 1.24.0-5
nbdkit-tmpdisk-plugin - update to 1.24.0-5
nbdkit-xz-filter - update to 1.24.0-5
nbdkit-vddk-plugin - update to 1.24.0-5
nbdkit-bash-completion - update to 1.24.0-5
virt-v2v-man-pages-uk - update to 1.42.0-22
virt-v2v - update to 1.42.0-22
virt-v2v-bash-completion - update to 1.42.0-22
virt-v2v-man-pages-ja - update to 1.42.0-22
libguestfs-tools - update to 1.44.0-9.0.1
libguestfs-man-pages-uk - update to 1.44.0-9.0.1
libguestfs-man-pages-ja - update to 1.44.0-9.0.1
libguestfs-javadoc - update to 1.44.0-9.0.1
libguestfs - update to 1.44.0-9.0.1
libguestfs-appliance - update to 1.44.0-9.0.1
libguestfs-devel - update to 1.44.0-9.0.1
libguestfs-gfs2 - update to 1.44.0-9.0.1
libguestfs-gobject - update to 1.44.0-9.0.1
libguestfs-gobject-devel - update to 1.44.0-9.0.1
libguestfs-java - update to 1.44.0-9.0.1
libguestfs-rescue - update to 1.44.0-9.0.1
python3-libguestfs - update to 1.44.0-9.0.1
perl-Sys-Guestfs - update to 1.44.0-9.0.1
lua-guestfs - update to 1.44.0-9.0.1
ocaml-libguestfs-devel - update to 1.44.0-9.0.1
ocaml-libguestfs - update to 1.44.0-9.0.1
libguestfs-java-devel - update to 1.44.0-9.0.1
ruby-libguestfs - update to 1.44.0-9.0.1
virt-dib - update to 1.44.0-9.0.1
libguestfs-bash-completion - update to 1.44.0-9.0.1
libguestfs-inspect-icons - update to 1.44.0-9.0.1
libguestfs-xfs - update to 1.44.0-9.0.1
libguestfs-tools-c - update to 1.44.0-9.0.1
libguestfs-rsync - update to 1.44.0-9.0.1
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-arm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-mips (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-misc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-ppc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-s390x (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-sparc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-x86 (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:6.2+dfsg-2ubuntu6.16
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21
supermin-devel - update to 5.2.1-2.0.2
supermin - update to 5.2.1-2.0.2
qemu-user-static - update to 6.2.0-49.0.1
qemu-img - addressed in versions 6.2.0-49.0.1, 7.2.6-1
qemu-guest-agent - addressed in versions 6.2.0-49.0.1, 7.2.6-1
qemu-kvm-ui-spice - update to 6.2.0-49.0.1
qemu-kvm-ui-opengl - update to 6.2.0-49.0.1
qemu-kvm-hw-usbredir - update to 6.2.0-49.0.1
qemu-kvm-block-gluster - update to 6.2.0-49.0.1
qemu-kvm-tests - update to 6.2.0-49.0.1
qemu-kvm-docs - update to 6.2.0-49.0.1
qemu-kvm-core - addressed in versions 6.2.0-49.0.1, 7.2.6-1
qemu-kvm-common - update to 6.2.0-49.0.1
qemu-kvm-block-ssh - update to 6.2.0-49.0.1
qemu-kvm-block-rbd - update to 6.2.0-49.0.1
qemu-kvm-block-iscsi - update to 6.2.0-49.0.1
qemu-kvm-block-curl - update to 6.2.0-49.0.1
qemu-kvm - addressed in versions 6.2.0-49.0.1, 7.2.6-1
qemu-seabios - addressed in versions 6.2.0-80, 6.2.0-83
qemu-help - addressed in versions 6.2.0-80, 6.2.0-83
qemu-debuginfo - addressed in versions 6.2.0-80, 6.2.0-83
qemu-system-riscv - addressed in versions 6.2.0-80, 6.2.0-83
qemu-system-arm - addressed in versions 6.2.0-80, 6.2.0-83
qemu-block-iscsi - addressed in versions 6.2.0-80, 6.2.0-83
qemu-block-ssh - addressed in versions 6.2.0-80, 6.2.0-83
qemu-img - addressed in versions 6.2.0-80, 6.2.0-83
qemu-block-curl - addressed in versions 6.2.0-80, 6.2.0-83
qemu-debugsource - addressed in versions 6.2.0-80, 6.2.0-83
qemu-guest-agent - addressed in versions 6.2.0-80, 6.2.0-83
qemu-block-rbd - addressed in versions 6.2.0-80, 6.2.0-83
qemu-system-aarch64 - addressed in versions 6.2.0-80, 6.2.0-83
qemu-system-x86_64 - addressed in versions 6.2.0-80, 6.2.0-83
qemu-hw-usb-host - addressed in versions 6.2.0-80, 6.2.0-83
qemu - addressed in versions 6.2.0-80, 6.2.0-83
qemu-chardev-baum - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-accel-tcg-x86-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-microvm - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-audio-oss-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-vhost-user-gpu - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-extra - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-linux-user-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-display-virtio-vga-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ui-opengl-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-iscsi - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-accel-tcg-x86 - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-guest-agent - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-kvm - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-SLOF - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-s390x - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-extra-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-usb-smartcard-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-skiboot - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-usb-host - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-rbd-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ivshmem-tools - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-rbd - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-usb-smartcard - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-nfs - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-curl - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-audio-spice - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-arm - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-x86 - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ivshmem-tools-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ui-spice-app - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-tools - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ui-spice-core - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-display-virtio-gpu-pci - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-linux-user - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-lang - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-audio-pa-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-ssh-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-display-virtio-gpu-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-audio-oss - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-display-virtio-gpu-pci-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-iscsi-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ppc - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ui-opengl - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-s390x-virtio-gpu-ccw - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-audio-jack - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-dmg - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-chardev-spice-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-tools-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-vhost-user-gpu-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-audio-spice-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-chardev-spice - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-nfs-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ui-spice-app-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-accel-qtest - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-x86-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-curl-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ksm - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ui-gtk-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-display-qxl - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-display-qxl-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-debugsource - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-audio-jack-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-gluster-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-s390x-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-display-virtio-gpu - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ui-curses-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ppc-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-audio-alsa-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-arm-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-ssh - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-guest-agent-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-dmg-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-linux-user-debugsource - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-audio-alsa - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-accel-qtest-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ui-gtk - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-usb-redirect-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-display-virtio-vga - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-audio-pa - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-chardev-baum-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ui-spice-core-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-usb-host-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-block-gluster - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-ui-curses - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-usb-redirect - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - addressed in versions 6.2.0-150400.37.20.1, 7.1.0-150500.49.6.1
qemu-audio-dbus-debuginfo - update to 7.1.0-150500.49.6.1
qemu-ui-dbus-debuginfo - update to 7.1.0-150500.49.6.1
qemu-audio-dbus - update to 7.1.0-150500.49.6.1
qemu-ui-dbus - update to 7.1.0-150500.49.6.1
qemu-headless - update to 7.1.0-150500.49.6.1
qemu-system-xen (Ubuntu package) - addressed in versions 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu - update to 7.2.5-1.fc38
qemu-audio-oss - update to 7.2.6-1
qemu - update to 7.2.6-1
qemu-audio-alsa - update to 7.2.6-1
qemu-audio-dbus - update to 7.2.6-1
qemu-audio-pa - update to 7.2.6-1
qemu-audio-spice - update to 7.2.6-1
qemu-device-display-virtio-vga-gl - update to 7.2.6-1
qemu-ui-spice-app - update to 7.2.6-1
qemu-ui-spice-core - update to 7.2.6-1
qemu-user - update to 7.2.6-1
qemu-user-binfmt - update to 7.2.6-1
qemu-virtiofsd - update to 7.2.6-1
qemu-docs - update to 7.2.6-1
qemu-device-usb-smartcard - update to 7.2.6-1
qemu-device-usb-redirect - update to 7.2.6-1
qemu-device-usb-host - update to 7.2.6-1
qemu-ui-opengl - update to 7.2.6-1
qemu-device-display-virtio-vga - update to 7.2.6-1
qemu-device-display-virtio-gpu-pci-gl - update to 7.2.6-1
qemu-device-display-virtio-gpu-pci - update to 7.2.6-1
qemu-device-display-virtio-gpu-gl - update to 7.2.6-1
qemu-device-display-virtio-gpu-ccw - update to 7.2.6-1
qemu-device-display-virtio-gpu - update to 7.2.6-1
qemu-device-display-qxl - update to 7.2.6-1
qemu-char-spice - update to 7.2.6-1
qemu-char-baum - update to 7.2.6-1
qemu-system-riscv - update to 7.2.6-1
qemu-pr-helper - update to 7.2.6-1
qemu-system-aarch64 - update to 7.2.6-1
qemu-system-aarch64-core - update to 7.2.6-1
qemu-system-arm - update to 7.2.6-1
qemu-system-arm-core - update to 7.2.6-1
qemu-system-loongarch64 - update to 7.2.6-1
qemu-system-loongarch64-core - update to 7.2.6-1
qemu-common - update to 7.2.6-1
qemu-system-riscv-core - update to 7.2.6-1
qemu-system-x86 - update to 7.2.6-1
qemu-system-x86-core - update to 7.2.6-1
qemu-tests - update to 7.2.6-1
qemu-tools - update to 7.2.6-1
qemu-ui-curses - update to 7.2.6-1
qemu-ui-dbus - update to 7.2.6-1
qemu-ui-egl-headless - update to 7.2.6-1
qemu-ui-gtk - update to 7.2.6-1
qemu-block-ssh - update to 7.2.6-1
qemu-block-curl - update to 7.2.6-1
qemu-block-dmg - update to 7.2.6-1
qemu-block-gluster - update to 7.2.6-1
qemu-block-iscsi - update to 7.2.6-1
perl-Sys-Virt - update to 8.0.0-1
python3-libvirt - update to 8.0.0-2
libvirt-daemon-driver-nwfilter - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-qemu - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-secret - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-storage - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-storage-core - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-storage-gluster - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-storage-disk - update to 8.0.0-23.1.0.1
libvirt-wireshark - update to 8.0.0-23.1.0.1
libvirt-nss - update to 8.0.0-23.1.0.1
libvirt-lock-sanlock - update to 8.0.0-23.1.0.1
libvirt-libs - update to 8.0.0-23.1.0.1
libvirt-docs - update to 8.0.0-23.1.0.1
libvirt-devel - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-network - update to 8.0.0-23.1.0.1
libvirt-daemon-kvm - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-storage-scsi - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-storage-rbd - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-storage-mpath - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-storage-logical - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-storage-iscsi-direct - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-nodedev - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-storage-iscsi - update to 8.0.0-23.1.0.1
libvirt - update to 8.0.0-23.1.0.1
libvirt-daemon-driver-interface - update to 8.0.0-23.1.0.1
libvirt-client - update to 8.0.0-23.1.0.1
libvirt-daemon-config-nwfilter - update to 8.0.0-23.1.0.1
libvirt-daemon-config-network - update to 8.0.0-23.1.0.1
libvirt-daemon - update to 8.0.0-23.1.0.1
qemu-kvm (Red Hat package) - update to 8.2.0-11.el9_4
libguestfs-winsupport - update to 8.10-1
qemu-sgabios - addressed in versions 8-150400.37.20.1, 8-150500.49.6.1
Red Hat OpenStack - update to 17.1

• https://bugzilla.redhat.com/show_bug.cgi?id=2218486
• https://lists.nongnu.org/archive/html/qemu-devel/2023-07/msg00596.html

• Infinite loop in QEMU
• SUSE update for qemu
• SUSE update for qemu
• Fedora 38 update for qemu
• SUSE update for qemu
• Ubuntu update for qemu
• openEuler 22.03 LTS update for qemu
• openEuler 22.03 LTS SP1 update for qemu
• openEuler 22.03 LTS SP2 update for qemu
• Red Hat Enterprise Linux 9 update for qemu-kvm
• Ubuntu update for qemu
• Red Hat Enterprise Linux 8 update for the virt:rhel and virt-devel:rhel modules
• Multiple vulnerabilities in Red Hat OpenStack 17.1 packages
• Multiple vulnerabilities in Junos Space
• Anolis OS update for qemu
• Anolis OS update for virt:an module