portage-ng / portage / app-emulation / qemu / 9.2.4-r1
portage-ng glsa
19 advisories reference app-emulation/qemu · none place version 9.2.4-r1 in a vulnerable range
▸ GLSA 202408-18 QEMU: Multiple Vulnerabilities this version unaffected normal local 2024-08-09

Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service.

Announced
2024-08-09
Revised
2024-08-09
Access
local
Bugs
#857657 #865121 #883693 #909542
Advisory
https://security.gentoo.org/glsa/202408-18

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 8.0.0>= 8.0.0

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-8.0.0"

References

▸ GLSA 202208-27 QEMU: Multiple Vulnerabilities this version unaffected high remote 2022-08-14

Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape).

Announced
2022-08-14
Revised
2022-08-14
Access
remote
Bugs
#733448 #736605 #773220 #775713 #780816 #792624 #807055 #810544 #820743 #835607 #839762
Advisory
https://security.gentoo.org/glsa/202208-27

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 7.0.0>= 7.0.0

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU.Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-7.0.0"

References

▸ GLSA 202011-09 QEMU: Multiple vulnerabilities this version unaffected normal local, remote 2020-11-11

Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code.

Announced
2020-11-11
Revised
2020-11-11
Access
local, remote
Bugs
#720896 #725634 #743649
Advisory
https://security.gentoo.org/glsa/202011-09

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 5.1.0-r1>= 5.1.0-r1

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-5.1.0-r1"

References

▸ GLSA 202005-02 QEMU: Multiple vulnerabilities this version unaffected normal local 2020-05-12

Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code.

Announced
2020-05-12
Revised
2020-05-12
Access
local
Bugs
#716518 #717154 #717770
Advisory
https://security.gentoo.org/glsa/202005-02

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 4.2.0-r5>= 4.2.0-r5

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-4.2.0-r5"

References

▸ GLSA 202003-66 QEMU: Multiple vulnerabilities this version unaffected normal local 2020-03-30

Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code.

Announced
2020-03-30
Revised
2020-03-30
Access
local
Bugs
#709490 #711334
Advisory
https://security.gentoo.org/glsa/202003-66

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 4.2.0-r2>= 4.2.0-r2

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

An attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-4.2.0-r2"

References

▸ GLSA 201904-25 QEMU: Multiple vulnerabilities this version unaffected normal remote 2019-04-24

Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code.

Announced
2019-04-24
Revised
2019-04-24
Access
remote
Bugs
#680834 #681850
Advisory
https://security.gentoo.org/glsa/201904-25

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 3.1.0-r4>= 3.1.0-r4

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-3.1.0-r4"

References

▸ GLSA 201804-08 QEMU: Multiple vulnerabilities this version unaffected normal local, remote 2018-04-08

Multiple vulnerabilities have been found in QEMU, the worst of which may allow an attacker to execute arbitrary code.

Announced
2018-04-08
Revised
2018-04-08
Access
local, remote
Bugs
#629348 #638506 #643432 #646814 #649616
Advisory
https://security.gentoo.org/glsa/201804-08

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.11.1-r1>= 2.11.1-r1

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

An attacker could execute arbitrary code, cause a Denial of Service condition, or obtain sensitive information.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.11.1-r1"

References

▸ GLSA 201706-03 QEMU: Multiple vulnerabilities this version unaffected normal local, remote 2017-06-06

Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM.

Announced
2017-06-06
Revised
2017-06-06
Access
local, remote
Bugs
#614744 #615874 #616460 #616462 #616482 #616484 #616636 #616870 #616872 #616874 #618808 #619018 #619020 #620322
Advisory
https://security.gentoo.org/glsa/201706-03

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.9.0-r2>= 2.9.0-r2

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker might cause a Denial of Service or gain escalated privileges from a guest VM.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.9.0-r2"

References

▸ GLSA 201704-01 QEMU: Multiple vulnerabilities this version unaffected high local, remote 2017-04-10

Multiple vulnerabilities have been found in QEMU, the worst of which could the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition.

Announced
2017-04-10
Revised
2017-04-10
Access
local, remote
Bugs
#606088 #609206 #609334 #609396 #609398 #609638 #612220
Advisory
https://security.gentoo.org/glsa/201704-01

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.8.0-r9>= 2.8.0-r9

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

Remote server can cause a crash in the client causing execution of arbitrary code, and a Denial of Service within the QEMU process. Remote or Local users within a guest QEMU environment can cause a Denial of Service condition of the QEMU guest process.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.8.0-r9"

References

▸ GLSA 201702-28 QEMU: Multiple vulnerabilities this version unaffected normal local 2017-02-21

Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system.

Announced
2017-02-21
Revised
2017-02-21
Access
local
Bugs
#606264 #606720 #606722 #607000 #607100 #607766 #608034 #608036 #608038 #608520 #608728
Advisory
https://security.gentoo.org/glsa/201702-28

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.8.0-r1>= 2.8.0-r1

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

A local attacker could potentially execute arbitrary code with privileges of QEMU process on the host, gain privileges on the host system, cause a Denial of Service condition, or obtain sensitive information.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.8.0-r1"

References

▸ GLSA 201701-49 QEMU: Multiple vulnerabilities this version unaffected normal local 2017-01-23

Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition.

Announced
2017-01-23
Revised
2017-01-23
Access
local
Bugs
#598330 #601450 #601824 #601826 #601830 #601832 #602626 #602628 #602630 #602632 #602634 #603444
Advisory
https://security.gentoo.org/glsa/201701-49

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.8.0>= 2.8.0

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

A privileged user/process within a guest QEMU environment can cause a Denial of Service condition against the QEMU guest process or the host.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.8.0"

References

▸ GLSA 201611-11 QEMU: Multiple vulnerabilities this version unaffected normal local 2016-11-18

Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition.

Announced
2016-11-18
Revised
2017-01-02 (revision 2)
Access
local
Bugs
#594368 #594520 #595192 #596048 #596738 #596752 #596774 #596776 #597108 #597110 #598044 #598046 #598328 #603442
Advisory
https://security.gentoo.org/glsa/201611-11

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.7.0-r6>= 2.7.0-r6

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

A privileged user /process within a guest QEMU environment can cause a Denial of Service condition against the QEMU guest process or the host.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.7.0-r6"

References

▸ GLSA 201609-01 QEMU: Multiple vulnerabilities this version unaffected normal remote 2016-09-25

Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition.

Announced
2016-09-25
Revised
2016-09-26 (revision 2)
Access
remote
Bugs
#573816 #579734 #580040 #583496 #583952 #584094 #584102 #584146 #584514 #584630 #584918 #589924 #589928 #591242 #591244 #591374 #591380 #591678 #592430 #593034 #593036 #593038 #593284 #593950 #593956
Advisory
https://security.gentoo.org/glsa/201609-01

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.7.0-r3>= 2.7.0-r3

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

Local users within a guest QEMU environment can execute arbitrary code within the host or a cause a Denial of Service condition of the QEMU guest process.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.7.0-r3"

References

▸ GLSA 201604-01 QEMU: Multiple vulnerabilities this version unaffected normal local 2016-04-02

Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition.

Announced
2016-04-02
Revised
2016-04-02
Access
local
Bugs
#569118 #569300 #571560 #572082 #572412 #572454 #573280 #573314 #574902 #575492 #576420
Advisory
https://security.gentoo.org/glsa/201604-01

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.5.0-r2>= 2.5.0-r2

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

Local users within a guest QEMU environment can execute arbitrary code within the host or a cause a Denial of Service condition of the QEMU guest process.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.5.0-r2"

References

▸ GLSA 201602-01 QEMU: Multiple vulnerabilities this version unaffected normal local, remote 2016-02-04

Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM.

Announced
2016-02-04
Revised
2016-02-04
Access
local, remote
Bugs
#544328 #549404 #557206 #558416 #559656 #560422 #560550 #560760 #566792 #567144 #567828 #567868 #568214 #568226 #568246 #569646 #570110 #570988 #571562 #571564 #571566
Advisory
https://security.gentoo.org/glsa/201602-01

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.5.0-r1>= 2.5.0-r1

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker might cause a Denial of Service or gain escalated privileges from a guest VM.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.5.0-r1"

References

▸ GLSA 201510-02 QEMU: Arbitrary code execution this version unaffected normal local, remote 2015-10-31

A heap-based buffer overflow in QEMU could result in execution of arbitrary code.

Announced
2015-10-31
Revised
2015-10-31
Access
local, remote
Bugs
#551752 #555680 #556050 #556052
Advisory
https://security.gentoo.org/glsa/201510-02

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.3.0-r4>= 2.3.0-r4

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Heap-based buffer overflow has been found in QEMU’s PCNET controller.

Impact

A remote attacker could execute arbitrary code via a specially crafted packets.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.3.0-r4"

References

▸ GLSA 201412-37 QEMU: Multiple Vulnerabilities this version unaffected normal local, remote 2014-12-24

Multiple vulnerabilities have been found in QEMU, the worst of which could result in execution of arbitrary code or Denial of Service.

Announced
2014-12-24
Revised
2014-12-24
Access
local, remote
Bugs
#528922 #529030 #531666
Advisory
https://security.gentoo.org/glsa/201412-37

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.1.2-r2>= 2.1.2-r2

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

A context-dependent attacker may be able to execute arbitrary code, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.1.2-r2"

References

▸ GLSA 201412-01 QEMU: Multiple Vulnerabilities this version unaffected normal local, remote 2014-12-08

Multiple vulnerabilities have been found in QEMU, the worst of which allows context dependent attackers to cause Denial of Service.

Announced
2014-12-08
Revised
2014-12-08
Access
local, remote
Bugs
#514680 #519506 #520688 #522364 #523428 #527088
Advisory
https://security.gentoo.org/glsa/201412-01

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.1.2-r1>= 2.1.2-r1

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

A context-dependent attacker could cause a Denial of Service condition and a local user can obtain sensitive information.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.1.2-r1"

References

▸ GLSA 201408-17 QEMU: Multiple vulnerabilities this version unaffected high local 2014-08-30

Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code.

Announced
2014-08-30
Revised
2014-09-02 (revision 3)
Access
local
Bugs
#201434 #486352 #505946 #507692 #507790 #507796 #510208 #510234
Advisory
https://security.gentoo.org/glsa/201408-17

Affected packages

PackageArchVulnerableUnaffected
app-emulation/qemu*< 2.0.0-r1>= 2.0.0-r1

Background

QEMU is a generic and open source machine emulator and virtualizer.

Description

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

Impact

A local attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All QEMU users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/qemu-2.0.0-r1"

References