UbuntuUpdates.org

Package "qemu-system-misc"

Name: qemu-system-misc

Description:

QEMU full system emulation binaries (miscellaneous)
Latest version: 1:10.1.0+ds-5ubuntu2.5
Release: questing (25.10)
Level: updates
Repository: main
Head package: qemu
Homepage: http://www.qemu.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "qemu-system-misc"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "qemu-system-misc" in Questing

Repository Area Version
base main 1:10.1.0+ds-5ubuntu2
security main 1:10.1.0+ds-5ubuntu2.4
proposed main 1:10.1.0+ds-5ubuntu2.5

Changelog

Version: 1:10.1.0+ds-5ubuntu2.5 2026-04-01 11:10:35 UTC

  qemu (1:10.1.0+ds-5ubuntu2.5) questing; urgency=medium

  * Fix crash on concurrent `block-stream` and `query-named-block-nodes`
    (LP: #2126951)
    - d/p/ubuntu/lp2126951-block-Drop-detach_subchain-for-bdrv_replace_node.patch

 -- Wesley Hershberger <email address hidden> Wed, 11 Mar 2026 10:44:47 -0500
Source diff to previous version
2126951 `block-stream` segfault with concurrent `query-named-block-nodes`

Version: 1:10.1.0+ds-5ubuntu2.4 2026-03-04 23:08:12 UTC

  qemu (1:10.1.0+ds-5ubuntu2.4) questing-security; urgency=medium

  * SECURITY UPDATE: denial-of-service
    - debian/patches/CVE-2024-8354.patch: don't assert for SETUP to non-0
      endpoint in hw/usb/hcd-uhci.
    - CVE-2024-8354
  * SECURITY UPDATE: use-after-free
    - debian/patches/CVE-2025-11234-1.patch: release active GSource in TLS
      channel finalizer in io/channel-tls.c.
    - debian/patches/CVE-2025-11234-2.patch: move websock resource release to
      close method in io/channel-websock.c.
    - debian/patches/CVE-2025-11234-3.patch: fix use after free in websocket
      handshake code in io/channel-websock.c.
    - CVE-2025-11234
  * SECURITY UPDATE: stack-based buffer overflow
    - debian/patches/CVE-2025-12464.patch: pad packets to minimum length in
      qemu_receive_packet() in net/net.c.
    - CVE-2025-12464
  * SECURITY UPDATE: denial-of-service
    - debian/patches/CVE-2025-14876-1.patch: verify asym request size in
      hw/virtio/virtio-crypto.c.
    - debian/patches/CVE-2025-14876-2.patch: Limit the maximum size in
      backends/cryptodev-builtin.c.
    - CVE-2025-14876
  * SECURITY UPDATE: out-of-bounds read
    - debian/patches/CVE-2026-0665.patch: fix PIRQ bounds check in
      xen_physdev_map_pirq() in hw/i386/kvm/xen_evtchn.c.
    - CVE-2026-0665

 -- Fabian Toepfer <email address hidden> Tue, 03 Mar 2026 15:17:44 +0100
Source diff to previous version
CVE-2024-8354 A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a U
CVE-2025-11234 A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to
CVE-2025-12464 A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devic
CVE-2025-14876 A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, lea
CVE-2026-0665 An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QE

Version: 1:10.1.0+ds-5ubuntu2.2 2026-02-05 22:08:52 UTC

  qemu (1:10.1.0+ds-5ubuntu2.2) questing; urgency=medium

  * Ensure successful migration for old releases with arch-caps fix
    SRU. (LP: #2131822)
    - d/p/u/lp2131822/* : create ubuntu v2 machine types for old
      affected Ubuntu releases and enable arch_caps fix for them.
    - d/qemu-system-x86.NEWS: info about the new types

 -- Hector Cao <email address hidden> Wed, 14 Jan 2026 09:37:51 +0100
Source diff to previous version
2131822 Known Windows 11 KVM Issue\u00a0AMD KMODE Exception

Version: 1:10.1.0+ds-5ubuntu2.1 2025-12-11 18:08:16 UTC

  qemu (1:10.1.0+ds-5ubuntu2.1) questing; urgency=medium

  * d/p/u/lp-2123828-*: Fix RISC-V instructions endianness (LP: #2123828)

 -- Valentin Haudiquet <email address hidden> Mon, 06 Oct 2025 15:19:00 +0200


About   -   Send Feedback to @ubuntu_updates