ALT-PU-2022-3429: package qemu update to version 7.2.0-alt1
Описание
This update upgrades qemu to version 7.2.0-alt1.
Устраненные уязвимости10
Связанные уязвимости
ALT-PU-2023-1830: package `qemu` update to version 8.0.0-alt1.p10
ELSA-2023-12108: virt:kvm_utils security update (IMPORTANT)
An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.