RHSA-2024:9136
- Source
- https://access.redhat.com/errata/RHSA-2024:9136
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2024:9136.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2024:9136
- Related
- Published
- 2024-11-15T18:46:28Z
- Modified
- 2024-12-12T10:03:59Z
- Severity
-
- 8.2 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: qemu-kvm security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2024:9136
- https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
- https://access.redhat.com/security/updates/classification/#moderate
- https://bugzilla.redhat.com/show_bug.cgi?id=2264844
- https://bugzilla.redhat.com/show_bug.cgi?id=2274211
- https://bugzilla.redhat.com/show_bug.cgi?id=2302487
- https://issues.redhat.com/browse/RHEL-17719
- https://issues.redhat.com/browse/RHEL-21695
- https://issues.redhat.com/browse/RHEL-24024
- https://issues.redhat.com/browse/RHEL-28073
- https://issues.redhat.com/browse/RHEL-28686
- https://issues.redhat.com/browse/RHEL-28813
- https://issues.redhat.com/browse/RHEL-30362
- https://issues.redhat.com/browse/RHEL-33440
- https://issues.redhat.com/browse/RHEL-33889
- https://issues.redhat.com/browse/RHEL-34618
- https://issues.redhat.com/browse/RHEL-34621
- https://issues.redhat.com/browse/RHEL-34945
- https://issues.redhat.com/browse/RHEL-36159
- https://issues.redhat.com/browse/RHEL-38697
- https://issues.redhat.com/browse/RHEL-40708
- https://issues.redhat.com/browse/RHEL-42411
- https://issues.redhat.com/browse/RHEL-50000
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9136.json
- https://access.redhat.com/security/cve/CVE-2024-3446
- https://www.cve.org/CVERecord?id=CVE-2024-3446
- https://nvd.nist.gov/vuln/detail/CVE-2024-3446
- https://patchew.org/QEMU/20240409105537.18308-1-philmd@linaro.org/
- https://access.redhat.com/security/cve/CVE-2024-7409
- https://www.cve.org/CVERecord?id=CVE-2024-7409
- https://nvd.nist.gov/vuln/detail/CVE-2024-7409
- https://access.redhat.com/security/cve/CVE-2024-26327
- https://www.cve.org/CVERecord?id=CVE-2024-26327
- https://nvd.nist.gov/vuln/detail/CVE-2024-26327
- https://lore.kernel.org/all/20240214-reuse-v4-5-89ad093a07f4@daynix.com/
Affected packages
Red Hat:enterprise_linux:9::appstream / qemu-guest-agent
Package
- Name
- qemu-guest-agent
- Purl
- pkg:rpm/redhat/qemu-guest-agent
Red Hat:enterprise_linux:9::appstream / qemu-guest-agent-debuginfo
Package
- Name
- qemu-guest-agent-debuginfo
- Purl
- pkg:rpm/redhat/qemu-guest-agent-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-img
Package
- Name
- qemu-img
- Purl
- pkg:rpm/redhat/qemu-img
Red Hat:enterprise_linux:9::appstream / qemu-img-debuginfo
Package
- Name
- qemu-img-debuginfo
- Purl
- pkg:rpm/redhat/qemu-img-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm
Package
- Name
- qemu-kvm
- Purl
- pkg:rpm/redhat/qemu-kvm
Red Hat:enterprise_linux:9::appstream / qemu-kvm-audio-dbus-debuginfo
Package
- Name
- qemu-kvm-audio-dbus-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-audio-dbus-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-audio-pa
Package
- Name
- qemu-kvm-audio-pa
- Purl
- pkg:rpm/redhat/qemu-kvm-audio-pa
Red Hat:enterprise_linux:9::appstream / qemu-kvm-audio-pa-debuginfo
Package
- Name
- qemu-kvm-audio-pa-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-audio-pa-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-block-blkio
Package
- Name
- qemu-kvm-block-blkio
- Purl
- pkg:rpm/redhat/qemu-kvm-block-blkio
Red Hat:enterprise_linux:9::appstream / qemu-kvm-block-blkio-debuginfo
Package
- Name
- qemu-kvm-block-blkio-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-block-blkio-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-block-curl
Package
- Name
- qemu-kvm-block-curl
- Purl
- pkg:rpm/redhat/qemu-kvm-block-curl
Red Hat:enterprise_linux:9::appstream / qemu-kvm-block-curl-debuginfo
Package
- Name
- qemu-kvm-block-curl-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-block-curl-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-block-rbd
Package
- Name
- qemu-kvm-block-rbd
- Purl
- pkg:rpm/redhat/qemu-kvm-block-rbd
Red Hat:enterprise_linux:9::appstream / qemu-kvm-block-rbd-debuginfo
Package
- Name
- qemu-kvm-block-rbd-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-block-rbd-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-common
Package
- Name
- qemu-kvm-common
- Purl
- pkg:rpm/redhat/qemu-kvm-common
Red Hat:enterprise_linux:9::appstream / qemu-kvm-common-debuginfo
Package
- Name
- qemu-kvm-common-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-common-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-core
Package
- Name
- qemu-kvm-core
- Purl
- pkg:rpm/redhat/qemu-kvm-core
Red Hat:enterprise_linux:9::appstream / qemu-kvm-core-debuginfo
Package
- Name
- qemu-kvm-core-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-core-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-debuginfo
Package
- Name
- qemu-kvm-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-debugsource
Package
- Name
- qemu-kvm-debugsource
- Purl
- pkg:rpm/redhat/qemu-kvm-debugsource
Red Hat:enterprise_linux:9::appstream / qemu-kvm-device-display-virtio-gpu
Package
- Name
- qemu-kvm-device-display-virtio-gpu
- Purl
- pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu
Red Hat:enterprise_linux:9::appstream / qemu-kvm-device-display-virtio-gpu-ccw
Package
- Name
- qemu-kvm-device-display-virtio-gpu-ccw
- Purl
- pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-ccw
Red Hat:enterprise_linux:9::appstream / qemu-kvm-device-display-virtio-gpu-ccw-debuginfo
Package
- Name
- qemu-kvm-device-display-virtio-gpu-ccw-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-ccw-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-device-display-virtio-gpu-debuginfo
Package
- Name
- qemu-kvm-device-display-virtio-gpu-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-device-display-virtio-gpu-pci
Package
- Name
- qemu-kvm-device-display-virtio-gpu-pci
- Purl
- pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-pci
Red Hat:enterprise_linux:9::appstream / qemu-kvm-device-display-virtio-gpu-pci-debuginfo
Package
- Name
- qemu-kvm-device-display-virtio-gpu-pci-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-device-display-virtio-gpu-pci-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-device-display-virtio-vga
Package
- Name
- qemu-kvm-device-display-virtio-vga
- Purl
- pkg:rpm/redhat/qemu-kvm-device-display-virtio-vga
Red Hat:enterprise_linux:9::appstream / qemu-kvm-device-display-virtio-vga-debuginfo
Package
- Name
- qemu-kvm-device-display-virtio-vga-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-device-display-virtio-vga-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-device-usb-host
Package
- Name
- qemu-kvm-device-usb-host
- Purl
- pkg:rpm/redhat/qemu-kvm-device-usb-host
Red Hat:enterprise_linux:9::appstream / qemu-kvm-device-usb-host-debuginfo
Package
- Name
- qemu-kvm-device-usb-host-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-device-usb-host-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-device-usb-redirect
Package
- Name
- qemu-kvm-device-usb-redirect
- Purl
- pkg:rpm/redhat/qemu-kvm-device-usb-redirect
Red Hat:enterprise_linux:9::appstream / qemu-kvm-device-usb-redirect-debuginfo
Package
- Name
- qemu-kvm-device-usb-redirect-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-device-usb-redirect-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-docs
Package
- Name
- qemu-kvm-docs
- Purl
- pkg:rpm/redhat/qemu-kvm-docs
Red Hat:enterprise_linux:9::appstream / qemu-kvm-tests-debuginfo
Package
- Name
- qemu-kvm-tests-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-tests-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-tools
Package
- Name
- qemu-kvm-tools
- Purl
- pkg:rpm/redhat/qemu-kvm-tools
Red Hat:enterprise_linux:9::appstream / qemu-kvm-tools-debuginfo
Package
- Name
- qemu-kvm-tools-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-tools-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-ui-dbus-debuginfo
Package
- Name
- qemu-kvm-ui-dbus-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-ui-dbus-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-ui-egl-headless
Package
- Name
- qemu-kvm-ui-egl-headless
- Purl
- pkg:rpm/redhat/qemu-kvm-ui-egl-headless
Red Hat:enterprise_linux:9::appstream / qemu-kvm-ui-egl-headless-debuginfo
Package
- Name
- qemu-kvm-ui-egl-headless-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-ui-egl-headless-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-kvm-ui-opengl
Package
- Name
- qemu-kvm-ui-opengl
- Purl
- pkg:rpm/redhat/qemu-kvm-ui-opengl
Red Hat:enterprise_linux:9::appstream / qemu-kvm-ui-opengl-debuginfo
Package
- Name
- qemu-kvm-ui-opengl-debuginfo
- Purl
- pkg:rpm/redhat/qemu-kvm-ui-opengl-debuginfo
Red Hat:enterprise_linux:9::appstream / qemu-pr-helper
Package
- Name
- qemu-pr-helper
- Purl
- pkg:rpm/redhat/qemu-pr-helper