gpp_maybe
Security update for qemu
SUSE-SL-Micro-6.2-112
This update for qemu fixes the following issues: Update to version 10.0.7. Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host (bsc#1253002). - CVE-2025-11234: use-after-free in WebSocket handshake operations can be exploited by a malicious client with network access to the VNC WebSocket port to cause a denial-of-service (bsc#1250984). Other updates and bugfixes: - Version 10.0.7: * kvm: Fix kvm_vm_ioctl() and kvm_device_ioctl() return value * docs/devel: Update URL for make-pullreq script * target/arm: Fix assert on BRA. * hw/aspeed/{xdma, rtc, sdhci}: Fix endianness to DEVICE_LITTLE_ENDIAN * hw/core/machine: Provide a description for aux-ram-share property * hw/pci: Make msix_init take a uint32_t for nentries * block/io_uring: avoid potentially getting stuck after resubmit at the end of ioq_submit() * block-backend: Fix race when resuming queued requests * ui/vnc: Fix qemu abort when query vnc info * chardev/char-pty: Do not ignore chr_write() failures * hw/display/exynos4210_fimd: Account for zero length in fimd_update_memory_section() * hw/arm/armv7m: Disable reentrancy guard for v7m_sysreg_ns_ops MRs * hw/arm/aspeed: Fix missing SPI IRQ connection causing DMA interrupt failure * migration: Fix transition to COLO state from precopy * Full backport list: https://lore.kernel.org/qemu-devel/1765037524.347582.2700543.nullmailer@tls.msk.ru/ - Version 10.0.6: * linux-user/microblaze: Fix little-endianness binary * target/hppa: correct size bit parity for fmpyadd * target/i386: user: do not set up a valid LDT on reset * async: access bottom half flags with qatomic_read * target/i386: fix x86_64 pushw op * i386/tcg/smm_helper: Properly apply DR values on SMM entry / exit * i386/cpu: Prevent delivering SIPI during SMM in TCG mode * i386/kvm: Expose ARCH_CAP_FB_CLEAR when invulnerable to MDS * target/i386: Fix CR2 handling for non-canonical addresses * block/curl.c: Use explicit long constants in curl_easy_setopt calls * pcie_sriov: Fix broken MMIO accesses from SR-IOV VFs * target/riscv: rvv: Fix vslide1[up|down].vx unexpected result when XLEN2 and SEWd * target/riscv: Fix ssamoswap error handling * Full backport list: https://lore.kernel.org/qemu-devel/1761022287.744330.6357.nullmailer@tls.msk.ru/ - Version 10.0.5: * tests/functional/test_aarch64_sbsaref_freebsd: Fix the URL of the ISO image * tests/functional/test_ppc_bamboo: Replace broken link with working assets * physmem: Destroy all CPU AddressSpaces on unrealize * memory: New AS helper to serialize destroy+free * include/system/memory.h: Clarify address_space_destroy() behaviour * migration: Fix state transition in postcopy_start() error handling * target/riscv: rvv: Modify minimum VLEN according to enabled vector extensions * target/riscv: rvv: Replace checking V by checking Zve32x * target/riscv: Fix endianness swap on compressed instructions * hw/riscv/riscv-iommu: Fixup PDT Nested Walk * Full backport list: https://lore.kernel.org/qemu-devel/1759986125.676506.643525.nullmailer@tls.msk.ru/ - [openSUSE][RPM]: really fix *-virtio-gpu-pci dependency on ARM (bsc#1254286). - [openSUSE][RPM] spec: make glusterfs support conditional (bsc#1254494).
-
Release DateDec 18 2025
-
References
-
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Micro 6.2 s390x
-
Packagesqemu
Machine emulator and virtualizerqemu-audio-spice10.0.7-160000.1.1 lock rpm
Spice based audio support for QEMUqemu-block-iscsi10.0.7-160000.1.1 lock rpm
iSCSI block support for QEMUqemu-block-ssh10.0.7-160000.1.1 lock rpm
SSH (SFTP) block support for QEMUqemu-chardev-spice10.0.7-160000.1.1 lock rpm
Spice vmc and port chardev support for QEMUqemu-guest-agent10.0.7-160000.1.1 lock rpm
Guest agent for QEMUqemu-hw-display-qxl10.0.7-160000.1.1 lock rpm
QXL display support for QEMUqemu-hw-display-virtio-gpu10.0.7-160000.1.1 lock rpm
Virtio GPU display support for QEMUqemu-hw-display-virtio-gpu-pci10.0.7-160000.1.1 lock rpm
Virtio-gpu pci device for QEMUqemu-hw-display-virtio-vga10.0.7-160000.1.1 lock rpm
Virtio vga device for QEMUqemu-hw-s390x-virtio-gpu-ccw10.0.7-160000.1.1 lock rpm
S390x virtio-gpu ccw device for QEMUqemu-hw-usb-host10.0.7-160000.1.1 lock rpm
USB passthrough driver support for QEMUqemu-hw-usb-redirect10.0.7-160000.1.1 lock rpm
USB redirection support for QEMUqemu-img10.0.7-160000.1.1 lock rpm
QEMU disk image utilityqemu-ksm10.0.7-160000.1.1 lock rpm
Kernel Samepage Merging servicesqemu-lang10.0.7-160000.1.1 lock rpm
Translations for package qemuqemu-pr-helper10.0.7-160000.1.1 lock rpm
QEMU persistent reservation helperqemu-s390x10.0.7-160000.1.1 lock rpm
Machine emulator and virtualizer for S/390 architecturesqemu-tools10.0.7-160000.1.1 lock rpm
Tools for QEMUqemu-ui-opengl10.0.7-160000.1.1 lock rpm
OpenGL based UI support for QEMUqemu-ui-spice-core10.0.7-160000.1.1 lock rpm
Core Spice support for QEMU10.0.7-160000.1.1 lock rpm
SUSE Linux Micro 6.2 x86_64
-
Packagesqemu
Machine emulator and virtualizerqemu-audio-spice10.0.7-160000.1.1 lock rpm
Spice based audio support for QEMUqemu-block-iscsi10.0.7-160000.1.1 lock rpm
iSCSI block support for QEMUqemu-block-ssh10.0.7-160000.1.1 lock rpm
SSH (SFTP) block support for QEMUqemu-chardev-spice10.0.7-160000.1.1 lock rpm
Spice vmc and port chardev support for QEMUqemu-guest-agent10.0.7-160000.1.1 lock rpm
Guest agent for QEMUqemu-hw-display-qxl10.0.7-160000.1.1 lock rpm
QXL display support for QEMUqemu-hw-display-virtio-gpu10.0.7-160000.1.1 lock rpm
Virtio GPU display support for QEMUqemu-hw-display-virtio-gpu-pci10.0.7-160000.1.1 lock rpm
Virtio-gpu pci device for QEMUqemu-hw-display-virtio-vga10.0.7-160000.1.1 lock rpm
Virtio vga device for QEMUqemu-hw-usb-host10.0.7-160000.1.1 lock rpm
USB passthrough driver support for QEMUqemu-hw-usb-redirect10.0.7-160000.1.1 lock rpm
USB redirection support for QEMUqemu-img10.0.7-160000.1.1 lock rpm
QEMU disk image utilityqemu-ipxe10.0.7-160000.1.1 lock rpm
PXE ROMs for QEMU NICsqemu-ksm10.0.7-160000.1.1 lock rpm
Kernel Samepage Merging servicesqemu-lang10.0.7-160000.1.1 lock rpm
Translations for package qemuqemu-pr-helper10.0.7-160000.1.1 lock rpm
QEMU persistent reservation helperqemu-seabios10.0.7-160000.1.1 lock rpm
x86 Legacy BIOS for QEMUqemu-tools10.0.71.16.3_3_g3d33c746-160000.1.1 lock rpm
Tools for QEMUqemu-ui-opengl10.0.7-160000.1.1 lock rpm
OpenGL based UI support for QEMUqemu-ui-spice-core10.0.7-160000.1.1 lock rpm
Core Spice support for QEMUqemu-vgabios10.0.7-160000.1.1 lock rpm
VGA BIOSes for QEMUqemu-vmsr-helper10.0.71.16.3_3_g3d33c746-160000.1.1 lock rpm
QEMU virtual RAPL MSR helperqemu-x8610.0.7-160000.1.1 lock rpm
Machine emulator and virtualizer for x86 architectures10.0.7-160000.1.1 lock rpm
SUSE Linux Micro 6.2 aarch64
-
Packagesqemu
Machine emulator and virtualizerqemu-arm10.0.7-160000.1.1 lock rpm
Machine emulator and virtualizer for ARM architecturesqemu-audio-spice10.0.7-160000.1.1 lock rpm
Spice based audio support for QEMUqemu-block-iscsi10.0.7-160000.1.1 lock rpm
iSCSI block support for QEMUqemu-block-ssh10.0.7-160000.1.1 lock rpm
SSH (SFTP) block support for QEMUqemu-chardev-spice10.0.7-160000.1.1 lock rpm
Spice vmc and port chardev support for QEMUqemu-guest-agent10.0.7-160000.1.1 lock rpm
Guest agent for QEMUqemu-hw-display-qxl10.0.7-160000.1.1 lock rpm
QXL display support for QEMUqemu-hw-display-virtio-gpu10.0.7-160000.1.1 lock rpm
Virtio GPU display support for QEMUqemu-hw-display-virtio-gpu-pci10.0.7-160000.1.1 lock rpm
Virtio-gpu pci device for QEMUqemu-hw-display-virtio-vga10.0.7-160000.1.1 lock rpm
Virtio vga device for QEMUqemu-hw-usb-host10.0.7-160000.1.1 lock rpm
USB passthrough driver support for QEMUqemu-hw-usb-redirect10.0.7-160000.1.1 lock rpm
USB redirection support for QEMUqemu-img10.0.7-160000.1.1 lock rpm
QEMU disk image utilityqemu-ipxe10.0.7-160000.1.1 lock rpm
PXE ROMs for QEMU NICsqemu-ksm10.0.7-160000.1.1 lock rpm
Kernel Samepage Merging servicesqemu-lang10.0.7-160000.1.1 lock rpm
Translations for package qemuqemu-pr-helper10.0.7-160000.1.1 lock rpm
QEMU persistent reservation helperqemu-seabios10.0.7-160000.1.1 lock rpm
x86 Legacy BIOS for QEMUqemu-tools10.0.71.16.3_3_g3d33c746-160000.1.1 lock rpm
Tools for QEMUqemu-ui-opengl10.0.7-160000.1.1 lock rpm
OpenGL based UI support for QEMUqemu-ui-spice-core10.0.7-160000.1.1 lock rpm
Core Spice support for QEMUqemu-vgabios10.0.7-160000.1.1 lock rpm
VGA BIOSes for QEMU10.0.71.16.3_3_g3d33c746-160000.1.1 lock rpm
SUSE Linux Micro 6.2 ppc64le
-
Packagesqemu
Machine emulator and virtualizerqemu-SLOF10.0.7-160000.1.1 lock rpm
Slimline Open Firmware - SLOFqemu-audio-spice10.0.7-160000.1.1 lock rpm
Spice based audio support for QEMUqemu-block-iscsi10.0.7-160000.1.1 lock rpm
iSCSI block support for QEMUqemu-block-ssh10.0.7-160000.1.1 lock rpm
SSH (SFTP) block support for QEMUqemu-chardev-spice10.0.7-160000.1.1 lock rpm
Spice vmc and port chardev support for QEMUqemu-guest-agent10.0.7-160000.1.1 lock rpm
Guest agent for QEMUqemu-hw-display-qxl10.0.7-160000.1.1 lock rpm
QXL display support for QEMUqemu-hw-display-virtio-gpu10.0.7-160000.1.1 lock rpm
Virtio GPU display support for QEMUqemu-hw-display-virtio-gpu-pci10.0.7-160000.1.1 lock rpm
Virtio-gpu pci device for QEMUqemu-hw-display-virtio-vga10.0.7-160000.1.1 lock rpm
Virtio vga device for QEMUqemu-hw-usb-host10.0.7-160000.1.1 lock rpm
USB passthrough driver support for QEMUqemu-hw-usb-redirect10.0.7-160000.1.1 lock rpm
USB redirection support for QEMUqemu-img10.0.7-160000.1.1 lock rpm
QEMU disk image utilityqemu-ksm10.0.7-160000.1.1 lock rpm
Kernel Samepage Merging servicesqemu-lang10.0.7-160000.1.1 lock rpm
Translations for package qemuqemu-ppc10.0.7-160000.1.1 lock rpm
Machine emulator and virtualizer for Power architecturesqemu-pr-helper10.0.7-160000.1.1 lock rpm
QEMU persistent reservation helperqemu-tools10.0.7-160000.1.1 lock rpm
Tools for QEMUqemu-ui-opengl10.0.7-160000.1.1 lock rpm
OpenGL based UI support for QEMUqemu-ui-spice-core10.0.7-160000.1.1 lock rpm
Core Spice support for QEMU10.0.7-160000.1.1 lock rpm