OESA-2026-3696

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3696
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-3696.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-3696
Upstream
  • CVE-2026-16457
  • CVE-2026-50626
  • CVE-2026-66021
Published
2026-09-05T15:04:02Z
Modified
2026-09-05T15:16:37.835224985Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
qemu security update
Details

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.

Security Fix(es):

CVE-2026-16457 is a security vulnerability in QEMU. The specific details of this vulnerability have not been fully disclosed. This vulnerability may affect the normal operation of the QEMU virtualization platform and poses potential security risks.(CVE-2026-16457)

An unknown vulnerability exists in QEMU, details are not yet disclosed.(CVE-2026-50626)

QEMU (Quick Emulator) is an open-source machine emulator and virtualizer widely used to run operating systems for different architectures. CVE-2026-66021 is a security vulnerability affecting QEMU, with specific details not yet fully disclosed.(CVE-2026-66021)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:22.03-LTS-SP4 / qemu

Package

Name
qemu
Purl
pkg:rpm/openEuler/qemu&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.2.0-118.oe2203sp4

Ecosystem specific 

{
    "src": [
        "qemu-6.2.0-118.oe2203sp4.src.rpm"
    ],
    "x86_64": [
        "qemu-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-block-curl-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-block-iscsi-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-block-rbd-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-block-ssh-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-debuginfo-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-debugsource-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-guest-agent-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-hw-usb-host-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-img-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-seabios-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-system-aarch64-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-system-arm-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-system-riscv-6.2.0-118.oe2203sp4.x86_64.rpm",
        "qemu-system-x86_64-6.2.0-118.oe2203sp4.x86_64.rpm"
    ],
    "aarch64": [
        "qemu-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-block-curl-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-block-iscsi-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-block-rbd-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-block-ssh-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-debuginfo-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-debugsource-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-guest-agent-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-hw-usb-host-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-img-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-system-aarch64-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-system-arm-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-system-riscv-6.2.0-118.oe2203sp4.aarch64.rpm",
        "qemu-system-x86_64-6.2.0-118.oe2203sp4.aarch64.rpm"
    ],
    "noarch": [
        "qemu-help-6.2.0-118.oe2203sp4.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3696.json"