UbuntuUpdates.org

Package "qemu-system"

Name: qemu-system

Description:

QEMU full system emulation binaries
Latest version: 1:9.0.2+ds-4ubuntu5.1
Release: oracular (24.10)
Level: security
Repository: main
Head package: qemu
Homepage: http://www.qemu.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "qemu-system"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "qemu-system" in Oracular

Repository Area Version
base main 1:9.0.2+ds-4ubuntu5
updates main 1:9.0.2+ds-4ubuntu5.1

Changelog

Version: 1:9.0.2+ds-4ubuntu5.1 2024-11-11 00:07:04 UTC

  qemu (1:9.0.2+ds-4ubuntu5.1) oracular-security; urgency=medium

  * SECURITY UPDATE: denial of service
    - debian/patches/CVE-2024-4693.patch: virtio-pci: Fix the use of
      an uninitialized irqfd
    - CVE-2024-4693
  * SECURITY UPDATE: heap buffer overflow
    - debian/patches/CVE-2024-7730.patch: add max size bounds check in
      input cb
    - CVE-2024-7730

 -- Bruce Cable <email address hidden> Wed, 23 Oct 2024 19:27:58 +1100
CVE-2024-4693 A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/virtio-pci.c). An improper release and use of the irqfd for vector 0 during the boot proc


About   -   Send Feedback to @ubuntu_updates