shield Security update for qemu

SUSE-SLE-Module-Server-Applications-15-SP7-2026-2388

This update for qemu fixes the following issues: Security fixes: - CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak when processing specially crafted VMDK files (bsc#1258509). - CVE-2026-3842: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host OOB write (bsc#1262089). Other fixes: - [openSUSE] qemu-ga: fix service file against no-autostart (bsc#1199023)

• Release Date
  Jun 12 2026
• References
  Bugzilla: 1199023, 1258509, 1262089
  CVEs: CVE-2026-2243, CVE-2026-3842
• Type
  security
• Severity
  moderate

cloud_download Downloads

Server Applications Module 15.7 x86_64

• Packages
  qemu
  Machine emulator and virtualizer

  7.1.0-150500.49.42.1 lock src

  qemu-sgabios
  Serial Graphics Adapter BIOS for QEMU

  8-150500.49.42.1 lock rpm