Fixed packages 43
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-guest-agent | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-guest-agent-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-img | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-img-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-audio-dbus-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-audio-pa | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-audio-pa-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-blkio | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-blkio-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-curl | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-curl-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-rbd | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-rbd-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-common | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-common-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-core | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-core-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-debugsource | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-ccw | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-ccw-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-pci | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-pci-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-vga | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-vga-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-usb-host | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-usb-host-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-usb-redirect | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-usb-redirect-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-docs | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-tests-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-tools | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-tools-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-dbus-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-egl-headless | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-egl-headless-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-opengl | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-opengl-debuginfo | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-pr-helper | 17:9.0.0-10.el9_5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-pr-helper-debuginfo | 17:9.0.0-10.el9_5 |
Vulnerabilities 3
-
High 8.2
Qemu: virtio: dma reentrancy issue leads to double free vulnerability
A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This issue could allow a malicious privileged guest user to…
-
High 7.5
Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.
-
Medium 5.3
An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where…
References
-
article
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2264844
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2274211
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302487
-
article
https://issues.redhat.com/browse/RHEL-17719
-
article
https://issues.redhat.com/browse/RHEL-21695
-
article
https://issues.redhat.com/browse/RHEL-24024
-
article
https://issues.redhat.com/browse/RHEL-28073
-
article
https://issues.redhat.com/browse/RHEL-28686
-
article
https://issues.redhat.com/browse/RHEL-28813
-
article
https://issues.redhat.com/browse/RHEL-30362
-
article
https://issues.redhat.com/browse/RHEL-33440
-
article
https://issues.redhat.com/browse/RHEL-33889
-
article
https://issues.redhat.com/browse/RHEL-34618
-
article
https://issues.redhat.com/browse/RHEL-34621
-
article
https://issues.redhat.com/browse/RHEL-34945
-
article
https://issues.redhat.com/browse/RHEL-36159
-
article
https://issues.redhat.com/browse/RHEL-38697
-
article
https://issues.redhat.com/browse/RHEL-40708
-
article
https://issues.redhat.com/browse/RHEL-42411
-
article
https://issues.redhat.com/browse/RHEL-50000
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9136.json
-
report
https://access.redhat.com/security/cve/CVE-2024-3446
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-3446
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-3446
-
article
https://patchew.org/QEMU/20240409105537.18308-1-philmd@linaro.org/
-
report
https://access.redhat.com/security/cve/CVE-2024-7409
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-7409
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-7409
-
report
https://access.redhat.com/security/cve/CVE-2024-26327
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-26327
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-26327
-
article
https://lore.kernel.org/all/20240214-reuse-v4-5-89ad093a07f4@daynix.com/