{"document":{"aggregate_severity":{"namespace":"https://nvd.nist.gov/vuln-metrics/cvss","text":"High"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https:/www.first.org/tlp/"}},"lang":"en","notes":[{"category":"general","text":"qemu security update","title":"Synopsis"},{"category":"general","text":"An update for qemu is now available for openEuler-22.03-LTS-SP4","title":"Summary"},{"category":"general","text":"QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.\n\nSecurity Fix(es):\n\nAn unknown vulnerability exists in QEMU, with no detailed description available at this time.(CVE-2026-15264)\n\nCVE-2026-18054 is a vulnerability in QEMU, details are not yet disclosed.(CVE-2026-18054)\n\nThis update to qemu-10.2.4-2.mga10 fixes 14 CVEs from 10.2.3 and 2 from\n10.2.4(CVE-2026-3890)\n\nThis update to qemu-10.2.4-2.mga10 fixes 14 CVEs from 10.2.3 and 2 from 10.2.4. This vulnerability (CVE-2026-48004) is one of them.(CVE-2026-48004)\n\nQEMU's virtio-rng frontend does not cancel or detach an RngRequest that is still pending on the rng-random backend before releasing the VirtIORNG object in virtio_rng_device_unrealize(). When a virtio-rng device is hot-plugged (device_del) and there are still entropy requests pending, the delayed backend completion calls the chr_read callback on the released object, causing the host heap to be use-after-free. An attacker able to trigger hot-plugging of the device could exploit this memory security flaw to compromise the QEMU process, causing a denial of service or potential code execution on the host.(CVE-2026-50624)\n\nAn unspecified vulnerability exists in QEMU, with no detailed information available at this time.(CVE-2026-61476)\n\nCVE-2026-63109 is a vulnerability in QEMU. Details of this vulnerability have not been publicly disclosed yet.(CVE-2026-63109)\n\nNo detailed description available.(CVE-2026-63110)\n\nAn unknown vulnerability exists in QEMU, the details of which have not yet been disclosed. Attackers may exploit this vulnerability to cause unknown impacts.(CVE-2026-63320)\n\nAn unknown vulnerability exists in QEMU, the details of which have not yet been disclosed. Attackers may exploit this vulnerability to cause unknown impacts.(CVE-2026-63321)\n\nWhen QEMU's uefi-vars-x64 virtual device processes the VarCheckPolicy REGISTER command, the uefi_vars_mm_check_policy_register() function directly reads pe->size without first verifying whether the request length contains the complete variable_policy_entry header. The guest can send a REGISTER request with a length of exactly sizeof(mm_check_policy) (excluding variable_policy_entry), causing the func pointer to cross the end of the allocated MM communication buffer, causing the host heap buffer to read out of bounds (heap-buffer-overflow). An attacker could exploit this memory security flaw to compromise the QEMU process, causing a denial of service or potential code execution on the host.(CVE-2026-63322)\n\nAn undisclosed vulnerability exists in QEMU, the details of which are not yet publicly available.(CVE-2026-63323)\n\nAn unknown type vulnerability exists in QEMU (Quick Emulator). The specific details have not been disclosed yet.(CVE-2026-65928)\n\nCVE-2026-65929 is a security vulnerability affecting QEMU, with no detailed technical information disclosed yet.(CVE-2026-65929)\n\nAn unspecified vulnerability exists in QEMU, the details of which have not been disclosed.(CVE-2026-66022)\n\nQEMU's VNC extended clipboard handler, after decompressing a client-controlled clipboard payload, compares the declared text size to the entire decompression buffer size, but then copies tsize bytes from buf + 4. The correct boundary is the remaining data length after the 4-byte length field. Therefore, a VNC client can cause QEMU to read up to 3 bytes out of bounds from the end of the decompressed heap buffer; a second VNC client can observe these bytes through the normal VNC extended clipboard PROVIDE path.(CVE-2026-8343)","title":"Description"},{"category":"general","text":"An update for qemu is now available for master/openEuler-20.03-LTS-SP4/openEuler-22.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.","title":"Topic"},{"category":"general","text":"High","title":"Severity"},{"category":"general","text":"qemu","title":"Affected Component"}],"publisher":{"category":"vendor","contact_details":"openeuler-security@openeuler.org","issuing_authority":"openEuler security committee","name":"openEuler","namespace":"https://www.openeuler.org"},"references":[{"category":"self","summary":"openEuler-SA-2026-3843","url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"},{"category":"self","summary":"CVE-2026-15264","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-15264&packageName=qemu"},{"category":"self","summary":"CVE-2026-18054","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-18054&packageName=qemu"},{"category":"self","summary":"CVE-2026-3890","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-3890&packageName=qemu"},{"category":"self","summary":"CVE-2026-48004","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-48004&packageName=qemu"},{"category":"self","summary":"CVE-2026-50624","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-50624&packageName=qemu"},{"category":"self","summary":"CVE-2026-61476","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-61476&packageName=qemu"},{"category":"self","summary":"CVE-2026-63109","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63109&packageName=qemu"},{"category":"self","summary":"CVE-2026-63110","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63110&packageName=qemu"},{"category":"self","summary":"CVE-2026-63320","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63320&packageName=qemu"},{"category":"self","summary":"CVE-2026-63321","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63321&packageName=qemu"},{"category":"self","summary":"CVE-2026-63322","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63322&packageName=qemu"},{"category":"self","summary":"CVE-2026-63323","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63323&packageName=qemu"},{"category":"self","summary":"CVE-2026-65928","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-65928&packageName=qemu"},{"category":"self","summary":"CVE-2026-65929","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-65929&packageName=qemu"},{"category":"self","summary":"CVE-2026-66022","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-66022&packageName=qemu"},{"category":"self","summary":"CVE-2026-8343","url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-8343&packageName=qemu"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15264"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18054"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3890"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48004"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50624"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61476"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63109"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63110"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63320"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63321"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63322"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63323"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65928"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65929"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66022"},{"category":"external","summary":"nvd cve","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8343"},{"category":"self","summary":"openEuler-SA-2026-3843 vex file","url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-3843.json"}],"title":"An update for qemu is now available for openEuler-22.03-LTS-SP4","tracking":{"current_release_date":"2026-09-16T17:55:31+08:00","generator":{"date":"2026-09-16T17:55:31+08:00","engine":{"name":"openEuler CSAF Tool V1.0"}},"id":"openEuler-SA-2026-3843","initial_release_date":"2026-09-16T17:55:31+08:00","revision_history":[{"date":"2026-09-16T17:55:31+08:00","number":"1.0.0","summary":"Initial"}],"status":"final","version":"1.0.0"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version","name":"openEuler-22.03-LTS-SP4","product":{"name":"openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}}],"category":"product_name","name":"openEuler"},{"branches":[{"category":"product_version","name":"qemu-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-block-curl-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-block-curl-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-block-curl-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-debugsource-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-debugsource-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-debugsource-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-img-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-img-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-img-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-system-arm-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-system-arm-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-system-arm-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64.rpm","product":{"name":"qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64.rpm","product_id":"qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}}],"category":"architecture","name":"aarch64"},{"branches":[{"category":"product_version","name":"qemu-6.2.0-119.oe2203sp4.src.rpm","product":{"name":"qemu-6.2.0-119.oe2203sp4.src.rpm","product_id":"qemu-6.2.0-119.oe2203sp4.src.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}}],"category":"architecture","name":"src"},{"branches":[{"category":"product_version","name":"qemu-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-block-curl-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-block-curl-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-block-curl-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-debugsource-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-debugsource-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-debugsource-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-img-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-img-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-img-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-seabios-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-seabios-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-seabios-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-system-arm-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-system-arm-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-system-arm-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}},{"category":"product_version","name":"qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64.rpm","product":{"name":"qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64.rpm","product_id":"qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}}],"category":"architecture","name":"x86_64"},{"branches":[{"category":"product_version","name":"qemu-help-6.2.0-119.oe2203sp4.noarch.rpm","product":{"name":"qemu-help-6.2.0-119.oe2203sp4.noarch.rpm","product_id":"qemu-help-6.2.0-119.oe2203sp4.noarch.rpm","product_identification_helper":{"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4"}}}],"category":"architecture","name":"noarch"}],"category":"vendor","name":"openEuler"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"qemu-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-block-curl-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-block-curl-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-debugsource-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-debugsource-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-img-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-img-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-system-arm-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-system-arm-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64"},"product_reference":"qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-6.2.0-119.oe2203sp4.src as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src"},"product_reference":"qemu-6.2.0-119.oe2203sp4.src.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-block-curl-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-block-curl-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-debugsource-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-debugsource-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-img-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-img-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-seabios-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-seabios-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-system-arm-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-system-arm-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64"},"product_reference":"qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"},{"category":"default_component_of","full_product_name":{"name":"qemu-help-6.2.0-119.oe2203sp4.noarch as a component of openEuler-22.03-LTS-SP4","product_id":"openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"},"product_reference":"qemu-help-6.2.0-119.oe2203sp4.noarch.rpm","relates_to_product_reference":"openEuler-22.03-LTS-SP4"}]},"vulnerabilities":[{"cve":"CVE-2026-15264","notes":[{"category":"description","text":"An unknown vulnerability exists in QEMU, with no detailed description available at this time.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"High"}],"title":"CVE-2026-15264"},{"cve":"CVE-2026-18054","notes":[{"category":"description","text":"CVE-2026-18054 is a vulnerability in QEMU, details are not yet disclosed.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":3.8,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Low"}],"title":"CVE-2026-18054"},{"cve":"CVE-2026-3890","notes":[{"category":"description","text":"This update to qemu-10.2.4-2.mga10 fixes 14 CVEs from 10.2.3 and 2 from\n10.2.4","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Medium"}],"title":"CVE-2026-3890"},{"cve":"CVE-2026-48004","notes":[{"category":"description","text":"This update to qemu-10.2.4-2.mga10 fixes 14 CVEs from 10.2.3 and 2 from 10.2.4. This vulnerability (CVE-2026-48004) is one of them.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":4.7,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Medium"}],"title":"CVE-2026-48004"},{"cve":"CVE-2026-50624","notes":[{"category":"description","text":"QEMU's virtio-rng frontend does not cancel or detach an RngRequest that is still pending on the rng-random backend before releasing the VirtIORNG object in virtio_rng_device_unrealize(). When a virtio-rng device is hot-plugged (device_del) and there are still entropy requests pending, the delayed backend completion calls the chr_read callback on the released object, causing the host heap to be use-after-free. An attacker able to trigger hot-plugging of the device could exploit this memory security flaw to compromise the QEMU process, causing a denial of service or potential code execution on the host.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":4.1,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Medium"}],"title":"CVE-2026-50624"},{"cve":"CVE-2026-61476","notes":[{"category":"description","text":"An unspecified vulnerability exists in QEMU, with no detailed information available at this time.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Medium"}],"title":"CVE-2026-61476"},{"cve":"CVE-2026-63109","notes":[{"category":"description","text":"CVE-2026-63109 is a vulnerability in QEMU. Details of this vulnerability have not been publicly disclosed yet.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":3.8,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Low"}],"title":"CVE-2026-63109"},{"cve":"CVE-2026-63110","notes":[{"category":"description","text":"No detailed description available.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":3.4,"baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Low"}],"title":"CVE-2026-63110"},{"cve":"CVE-2026-63320","notes":[{"category":"description","text":"An unknown vulnerability exists in QEMU, the details of which have not yet been disclosed. Attackers may exploit this vulnerability to cause unknown impacts.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Medium"}],"title":"CVE-2026-63320"},{"cve":"CVE-2026-63321","notes":[{"category":"description","text":"An unknown vulnerability exists in QEMU, the details of which have not yet been disclosed. Attackers may exploit this vulnerability to cause unknown impacts.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":5.2,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Medium"}],"title":"CVE-2026-63321"},{"cve":"CVE-2026-63322","notes":[{"category":"description","text":"When QEMU's uefi-vars-x64 virtual device processes the VarCheckPolicy REGISTER command, the uefi_vars_mm_check_policy_register() function directly reads pe->size without first verifying whether the request length contains the complete variable_policy_entry header. The guest can send a REGISTER request with a length of exactly sizeof(mm_check_policy) (excluding variable_policy_entry), causing the func pointer to cross the end of the allocated MM communication buffer, causing the host heap buffer to read out of bounds (heap-buffer-overflow). An attacker could exploit this memory security flaw to compromise the QEMU process, causing a denial of service or potential code execution on the host.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":4.4,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Medium"}],"title":"CVE-2026-63322"},{"cve":"CVE-2026-63323","notes":[{"category":"description","text":"An undisclosed vulnerability exists in QEMU, the details of which are not yet publicly available.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":7.0,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"High"}],"title":"CVE-2026-63323"},{"cve":"CVE-2026-65928","notes":[{"category":"description","text":"An unknown type vulnerability exists in QEMU (Quick Emulator). The specific details have not been disclosed yet.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":4.4,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Medium"}],"title":"CVE-2026-65928"},{"cve":"CVE-2026-65929","notes":[{"category":"description","text":"CVE-2026-65929 is a security vulnerability affecting QEMU, with no detailed technical information disclosed yet.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":5.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Medium"}],"title":"CVE-2026-65929"},{"cve":"CVE-2026-66022","notes":[{"category":"description","text":"An unspecified vulnerability exists in QEMU, the details of which have not been disclosed.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"High"}],"title":"CVE-2026-66022"},{"cve":"CVE-2026-8343","notes":[{"category":"description","text":"QEMU's VNC extended clipboard handler, after decompressing a client-controlled clipboard payload, compares the declared text size to the entire decompression buffer size, but then copies tsize bytes from buf + 4. The correct boundary is the remaining data length after the 4-byte length field. Therefore, a VNC client can cause QEMU to read up to 3 bytes out of bounds from the end of the decompressed heap buffer; a second VNC client can observe these bytes through the normal VNC extended clipboard PROVIDE path.","title":"Vulnerability Description"}],"product_status":{"fixed":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]},"remediations":[{"category":"vendor_fix","details":"qemu security update","product_ids":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"],"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3843"}],"scores":[{"cvss_v3":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"products":["openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.aarch64","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.src","openEuler-22.03-LTS-SP4:qemu-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-curl-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-iscsi-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-rbd-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-block-ssh-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debuginfo-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-debugsource-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-guest-agent-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-hw-usb-host-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-img-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-seabios-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-aarch64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-arm-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-riscv-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-system-x86_64-6.2.0-119.oe2203sp4.x86_64","openEuler-22.03-LTS-SP4:qemu-help-6.2.0-119.oe2203sp4.noarch"]}],"threats":[{"category":"impact","details":"Medium"}],"title":"CVE-2026-8343"}]}