SUSE-SU-2025:20036-1 Security update for qemu

This update for qemu fixes the following issues: - Fix bsc1221812: block: Reschedule query-block during qcow2 invalidation bsc1221812 - Fix bsc1229007, CVE-2024-7409: nbd/server: CVE-2024-7409: Close stray clients at server-stop bsc1229007 nbd/server: CVE-2024-7409: Drop non-negotiating clients...

Security update for libvirt

This update for libvirt fixes the following issues: Security issue fixed: CVE-2024-4418: rpc: ensure temporary GSource is removed from client event loop bsc1223849 Non-security issue fixed: libxl: Fix domxml-to-native conversion bsc1222584 qemu: Fix migration with custom XML bsc1226492 Patch...

Security update for qemu

This update for qemu fixes the following issues: Update to version 8.2.5: target/loongarch: fix a wrong print in cpu dump ui/sdl2: Allow host to power down screen target/i386: fix SSE and SSE2 feature check target/i386: fix xsave.flat from kvm-unit-tests disas/riscv: Decode all of the pmpcfg and...

SUSE-SU-2025:20012-1 Security update for libvirt

This update for libvirt fixes the following issues: Security issue fixed: - CVE-2024-4418: rpc: ensure temporary GSource is removed from client event loop bsc1223849 Non-security issue fixed: - libxl: Fix domxml-to-native conversion bsc1222584 - qemu: Fix migration with custom XML bsc1226492...

SUSE-SU-2025:20011-1 Security update for qemu

This update for qemu fixes the following issues: - Update to version 8.2.5: target/loongarch: fix a wrong print in cpu dump ui/sdl2: Allow host to power down screen target/i386: fix SSE and SSE2 feature check target/i386: fix xsave.flat from kvm-unit-tests disas/riscv: Decode all of the pmpcfg an...

Advisory ROSA-SA-2025-2641

Software: qemu 7.2.7 OS: ROSA-CHROME packageevrstring: qemu-7.2.7-1 CVE-ID: CVE-2023-3301 BDU-ID: 2024-04418 CVE-Crit: LOW CVE-DESC.: A vulnerability in the virtio-net interface of the QEMU hardware emulator is related to the asynchronous nature of the shutdown allowing a race scenario...

Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation

Cybersecurity researchers have disclosed three security flaws in Planet Technology's WGS-804HPT industrial switches that could be chained to achieve pre-authentication remote code execution on susceptible devices. "These switches are widely used in building and home automation systems for a varie...

CVE-2021-3611 affecting package qemu 6.2.0-27

CVE-2021-3611 affecting package qemu 6.2.0-27. This CVE either no longer is or was never applicable...

CVE-2020-35503 affecting package qemu-kvm 4.2.0-48

CVE-2020-35503 affecting package qemu-kvm 4.2.0-48. No patch is available currently...

CVE-2020-35504 affecting package qemu-kvm 4.2.0-48

CVE-2020-35504 affecting package qemu-kvm 4.2.0-48. No patch is available currently...

CVE-2021-3507 affecting package qemu-kvm 4.2.0-48

CVE-2021-3507 affecting package qemu-kvm 4.2.0-48. No patch is available currently...

CVE-2021-3544 affecting package qemu-kvm 4.2.0-48

CVE-2021-3544 affecting package qemu-kvm 4.2.0-48. No patch is available currently...

CVE-2022-1050 affecting package qemu-kvm 4.2.0-38

CVE-2022-1050 affecting package qemu-kvm 4.2.0-38. This CVE either no longer is or was never applicable...

CVE-2021-3611 affecting package qemu-kvm 4.2.0-48

CVE-2021-3611 affecting package qemu-kvm 4.2.0-48. No patch is available currently...

CVE-2021-3929 affecting package qemu-kvm 4.2.0-48

CVE-2021-3929 affecting package qemu-kvm 4.2.0-48. No patch is available currently...

CVE-2022-0216 affecting package qemu-kvm 4.2.0-48

CVE-2022-0216 affecting package qemu-kvm 4.2.0-48. No patch is available currently...

openstack-ironic: Specially crafted image may allow authenticated users to gain access to potentially sensitive data

A vulnerability was found in OpenStack Ironic. This flaw allows an authenticated user to use a specially crafted image to exploit undesired behaviors in qemu-img, including possible unauthorized access to potentially sensitive data...

Moderate: Red Hat Security Advisory: edk2:20220126gitbb1bba3d77 security update

An update for the edk2:20220126gitbb1bba3d77 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Moderate: edk2:20220126gitbb1bba3d77 security update

EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: edk2: Integer overflows in PeCoffLoaderRelocateImage CVE-2024-38796 For more details about the security issues, including th...

openSUSE: Security Advisory for qemu (SUSE-SU-2024:4304-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...