Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-5763: virtio-scsi request size mismatch NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/79971302935472232a68073faddb085177e3ca54 (v11.0.0-rc3) CVE-2026-3890: hcd-ohci: infinite loop NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/129922c2bc398b656a9180150e667f98fdf0d402 (v11.0.0-rc1)
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | ivshmem-tools | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-audio-alsa | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-audio-oss | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-audio-pa | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-audio-sdl | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-block-curl | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-block-dmg | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-block-iscsi | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-block-nfs | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-block-rbd | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-block-ssh | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-common | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-debuginfo | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-guest-agent | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-img | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-kvm | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-kvm-core | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-system-aarch64 | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-system-aarch64-core | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-system-x86 | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-system-x86-core | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-ui-curses | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-ui-gtk | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-ui-sdl | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-user | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-user-binfmt | 10:3.1.0-8.amzn2.0.24 |
| Amazon Linux · 2 | qemu-user-static | 10:3.1.0-8.amzn2.0.24 |