Fixed packages 43
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-guest-agent | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-guest-agent-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-img | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-img-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-audio-dbus-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-audio-pa | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-audio-pa-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-blkio | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-blkio-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-curl | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-curl-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-rbd | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-rbd-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-common | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-common-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-core | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-core-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-debugsource | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-ccw | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-ccw-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-pci | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-pci-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-vga | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-vga-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-usb-host | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-usb-host-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-usb-redirect | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-usb-redirect-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-docs | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-tests-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-tools | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-tools-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-dbus-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-egl-headless | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-egl-headless-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-opengl | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-opengl-debuginfo | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-pr-helper | 17:8.2.0-11.el9_4 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-pr-helper-debuginfo | 17:8.2.0-11.el9_4 |
Vulnerabilities 5
-
Medium 6.5
Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the `inflate_buffer` function. This could allow a remote authent…
-
Medium 6.5
Qemu: vnc: null pointer dereference in qemu_clipboard_request()
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemu_clipboard_request() function can be reached before vnc_server_cut_text_caps() was called and had the chance to initialize the clipboard peer, leading to a NULL …
-
Medium 6.4
Qemu: improper ide controller reset can lead to mbr overwrite
A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored…
-
Medium 6.0
Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()
A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.
-
Unscored —
QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2218486
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2222351
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2238291
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2247283
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2254825
-
article
https://issues.redhat.com/browse/RHEL-11219
-
article
https://issues.redhat.com/browse/RHEL-12991
-
article
https://issues.redhat.com/browse/RHEL-14111
-
article
https://issues.redhat.com/browse/RHEL-15394
-
article
https://issues.redhat.com/browse/RHEL-15965
-
article
https://issues.redhat.com/browse/RHEL-16581
-
article
https://issues.redhat.com/browse/RHEL-16686
-
article
https://issues.redhat.com/browse/RHEL-1676
-
article
https://issues.redhat.com/browse/RHEL-17067
-
article
https://issues.redhat.com/browse/RHEL-17068
-
article
https://issues.redhat.com/browse/RHEL-1708
-
article
https://issues.redhat.com/browse/RHEL-17168
-
article
https://issues.redhat.com/browse/RHEL-17209
-
article
https://issues.redhat.com/browse/RHEL-17369
-
article
https://issues.redhat.com/browse/RHEL-1761
-
article
https://issues.redhat.com/browse/RHEL-18212
-
article
https://issues.redhat.com/browse/RHEL-19010
-
article
https://issues.redhat.com/browse/RHEL-19117
-
article
https://issues.redhat.com/browse/RHEL-19119
-
article
https://issues.redhat.com/browse/RHEL-19738
-
article
https://issues.redhat.com/browse/RHEL-20764
-
article
https://issues.redhat.com/browse/RHEL-21057
-
article
https://issues.redhat.com/browse/RHEL-21293
-
article
https://issues.redhat.com/browse/RHEL-21570
-
article
https://issues.redhat.com/browse/RHEL-21705
-
article
https://issues.redhat.com/browse/RHEL-24045
-
article
https://issues.redhat.com/browse/RHEL-24593
-
article
https://issues.redhat.com/browse/RHEL-24614
-
article
https://issues.redhat.com/browse/RHEL-24988
-
article
https://issues.redhat.com/browse/RHEL-26049
-
article
https://issues.redhat.com/browse/RHEL-3922
-
article
https://issues.redhat.com/browse/RHEL-3934