ALT-PU-2024-9452: package qemu update to version 8.2.4-alt0.p10.1
Источник
errata.altlinux.org
Дата публикации
10.07.2024
Дата обновления
10.07.2024
Устраненные уязвимости
6
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container
Описание
This update upgrades qemu to version 8.2.4-alt0.p10.1.
Устраненные уязвимости6
Связанные уязвимости
CVSS3: 8.2
altlinux
больше 2 лет назад
ALT-PU-2024-7560: package `qemu` update to version 8.2.3-alt1
oracle-oval
около 2 лет назад
ELSA-2024-12605: virt:kvm_utils2 security update (IMPORTANT)
CVSS3: 8.2
ubuntu
больше 2 лет назад
A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This issue could allow a malicious privileged guest user to crash the QEMU process on the host, resulting in a denial of service or allow arbitrary code execution within the context of the QEMU process on the host.