Fixed packages 43
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-guest-agent | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-guest-agent-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-img | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-img-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-audio-dbus-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-audio-pa | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-audio-pa-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-blkio | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-blkio-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-curl | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-curl-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-rbd | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-block-rbd-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-common | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-common-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-core | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-core-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-debugsource | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-ccw | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-ccw-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-pci | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-gpu-pci-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-vga | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-display-virtio-vga-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-usb-host | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-usb-host-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-usb-redirect | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-device-usb-redirect-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-docs | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-tests-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-tools | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-tools-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-dbus-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-egl-headless | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-egl-headless-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-opengl | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-kvm-ui-opengl-debuginfo | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-pr-helper | 17:9.0.0-10.el9_5.3 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | qemu-pr-helper-debuginfo | 17:9.0.0-10.el9_5.3 |
Vulnerabilities 2
-
Medium 5.5
Qemu-kvm: net: assertion failure in update_sctp_checksum()
A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a den…
-
Medium 4.9
Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()
A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtio_net_flush_tx function if guest features VIRTIO_NET_F_HASH_REPORT, VIRTIO_F_VERSION_1 and VIRTIO_NET_F_MRG_RXBUF are enabled. This could …
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2254580
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2274339
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4492.json
-
report
https://access.redhat.com/security/cve/CVE-2023-6693
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-6693
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-6693
-
report
https://access.redhat.com/security/cve/CVE-2024-3567
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-3567
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-3567
-
article
https://gitlab.com/qemu-project/qemu/-/issues/2273