{ "document": { "aggregate_severity": { "namespace": "https://nvd.nist.gov/vuln-metrics/cvss", "text": "High" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https:/www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "general", "text": "qemu security update", "title": "Synopsis" }, { "category": "general", "text": "An update for qemu is now available for openEuler-24.03-LTS-SP4", "title": "Summary" }, { "category": "general", "text": "QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.\n\nSecurity Fix(es):\n\nAn unknown vulnerability exists in QEMU, with no detailed description available at this time.(CVE-2026-15264)\n\nCVE-2026-16457 is a security vulnerability in QEMU. The specific details of this vulnerability have not been fully disclosed. This vulnerability may affect the normal operation of the QEMU virtualization platform and poses potential security risks.(CVE-2026-16457)\n\nCVE-2026-18054 is a vulnerability in QEMU, details are not yet disclosed.(CVE-2026-18054)\n\nThis update to qemu-10.2.4-2.mga10 fixes 14 CVEs from 10.2.3 and 2 from\n10.2.4(CVE-2026-3890)\n\nThis update to qemu-10.2.4-2.mga10 fixes 14 CVEs from 10.2.3 and 2 from 10.2.4. This vulnerability (CVE-2026-48004) is one of them.(CVE-2026-48004)\n\nQEMU's virtio-rng frontend does not cancel or detach an RngRequest that is still pending on the rng-random backend before releasing the VirtIORNG object in virtio_rng_device_unrealize(). When a virtio-rng device is hot-plugged (device_del) and there are still entropy requests pending, the delayed backend completion calls the chr_read callback on the released object, causing the host heap to be use-after-free. An attacker able to trigger hot-plugging of the device could exploit this memory security flaw to compromise the QEMU process, causing a denial of service or potential code execution on the host.(CVE-2026-50624)\n\nAn unknown vulnerability exists in QEMU, details are not yet disclosed.(CVE-2026-50626)\n\nNo detailed vulnerability information available.(CVE-2026-61402)\n\nAn unspecified vulnerability exists in QEMU, with no detailed information available at this time.(CVE-2026-61476)\n\nCVE-2026-63109 is a vulnerability in QEMU. Details of this vulnerability have not been publicly disclosed yet.(CVE-2026-63109)\n\nNo detailed description available.(CVE-2026-63110)\n\nAn unknown vulnerability exists in QEMU, the details of which have not yet been disclosed. Attackers may exploit this vulnerability to cause unknown impacts.(CVE-2026-63320)\n\nAn unknown vulnerability exists in QEMU, the details of which have not yet been disclosed. Attackers may exploit this vulnerability to cause unknown impacts.(CVE-2026-63321)\n\nWhen QEMU's uefi-vars-x64 virtual device processes the VarCheckPolicy REGISTER command, the uefi_vars_mm_check_policy_register() function directly reads pe->size without first verifying whether the request length contains the complete variable_policy_entry header. The guest can send a REGISTER request with a length of exactly sizeof(mm_check_policy) (excluding variable_policy_entry), causing the func pointer to cross the end of the allocated MM communication buffer, causing the host heap buffer to read out of bounds (heap-buffer-overflow). An attacker could exploit this memory security flaw to compromise the QEMU process, causing a denial of service or potential code execution on the host.(CVE-2026-63322)\n\nAn undisclosed vulnerability exists in QEMU, the details of which are not yet publicly available.(CVE-2026-63323)\n\nAn unknown type vulnerability exists in QEMU (Quick Emulator). The specific details have not been disclosed yet.(CVE-2026-65928)\n\nCVE-2026-65929 is a security vulnerability affecting QEMU, with no detailed technical information disclosed yet.(CVE-2026-65929)\n\nQEMU (Quick Emulator) is an open-source machine emulator and virtualizer widely used to run operating systems for different architectures. CVE-2026-66021 is a security vulnerability affecting QEMU, with specific details not yet fully disclosed.(CVE-2026-66021)\n\nAn unspecified vulnerability exists in QEMU, the details of which have not been disclosed.(CVE-2026-66022)\n\nQEMU's VNC extended clipboard handler, after decompressing a client-controlled clipboard payload, compares the declared text size to the entire decompression buffer size, but then copies tsize bytes from buf + 4. The correct boundary is the remaining data length after the 4-byte length field. Therefore, a VNC client can cause QEMU to read up to 3 bytes out of bounds from the end of the decompressed heap buffer; a second VNC client can observe these bytes through the normal VNC extended clipboard PROVIDE path.(CVE-2026-8343)", "title": "Description" }, { "category": "general", "text": "An update for qemu is now available for master/openEuler-20.03-LTS-SP4/openEuler-24.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "High", "title": "Severity" }, { "category": "general", "text": "qemu", "title": "Affected Component" } ], "publisher": { "category": "vendor", "contact_details": "openeuler-security@openeuler.org", "issuing_authority": "openEuler security committee", "name": "openEuler", "namespace": "https://www.openeuler.org" }, "references": [ { "category": "self", "summary": "openEuler-SA-2026-3845", "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" }, { "category": "self", "summary": "CVE-2026-15264", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-15264&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-16457", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-16457&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-18054", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-18054&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-3890", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-3890&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-48004", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-48004&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-50624", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-50624&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-50626", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-50626&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-61402", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-61402&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-61476", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-61476&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-63109", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63109&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-63110", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63110&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-63320", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63320&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-63321", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63321&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-63322", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63322&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-63323", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63323&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-65928", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-65928&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-65929", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-65929&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-66021", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-66021&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-66022", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-66022&packageName=qemu" }, { "category": "self", "summary": "CVE-2026-8343", "url": "https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-8343&packageName=qemu" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15264" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16457" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18054" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3890" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48004" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50624" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50626" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61402" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61476" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63109" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63110" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63320" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63321" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63322" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63323" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65928" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65929" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66021" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66022" }, { "category": "external", "summary": "nvd cve", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8343" }, { "category": "self", "summary": "openEuler-SA-2026-3845 vex file", "url": "https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-3845.json" } ], "title": "An update for qemu is now available for openEuler-24.03-LTS-SP4", "tracking": { "current_release_date": "2026-09-16T17:55:33+08:00", "generator": { "date": "2026-09-16T17:55:33+08:00", "engine": { "name": "openEuler CSAF Tool V1.0" } }, "id": "openEuler-SA-2026-3845", "initial_release_date": "2026-09-16T17:55:33+08:00", "revision_history": [ { "date": "2026-09-16T17:55:33+08:00", "number": "1.0.0", "summary": "Initial" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "openEuler-24.03-LTS-SP4", "product": { "name": "openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } } ], "category": "product_name", "name": "openEuler" }, { "branches": [ { "category": "product_version", "name": "qemu-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-block-curl-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-block-curl-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-block-curl-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-debugsource-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-debugsource-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-debugsource-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-img-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-img-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-img-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-system-arm-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-system-arm-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-system-arm-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-user-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-user-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-user-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-user-static-8.2.0-86.oe2403sp4.aarch64.rpm", "product": { "name": "qemu-user-static-8.2.0-86.oe2403sp4.aarch64.rpm", "product_id": "qemu-user-static-8.2.0-86.oe2403sp4.aarch64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "qemu-8.2.0-86.oe2403sp4.src.rpm", "product": { "name": "qemu-8.2.0-86.oe2403sp4.src.rpm", "product_id": "qemu-8.2.0-86.oe2403sp4.src.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "qemu-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-block-curl-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-block-curl-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-block-curl-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-debugsource-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-debugsource-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-debugsource-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-img-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-img-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-img-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-seabios-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-seabios-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-seabios-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-system-arm-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-system-arm-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-system-arm-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-user-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-user-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-user-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } }, { "category": "product_version", "name": "qemu-user-static-8.2.0-86.oe2403sp4.x86_64.rpm", "product": { "name": "qemu-user-static-8.2.0-86.oe2403sp4.x86_64.rpm", "product_id": "qemu-user-static-8.2.0-86.oe2403sp4.x86_64.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "qemu-help-8.2.0-86.oe2403sp4.noarch.rpm", "product": { "name": "qemu-help-8.2.0-86.oe2403sp4.noarch.rpm", "product_id": "qemu-help-8.2.0-86.oe2403sp4.noarch.rpm", "product_identification_helper": { "cpe": "cpe:/a:openEuler:openEuler:24.03-LTS-SP4" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "openEuler" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "qemu-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-block-curl-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-debugsource-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-debugsource-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-img-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-system-arm-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-system-arm-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-user-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-user-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-user-static-8.2.0-86.oe2403sp4.aarch64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64" }, "product_reference": "qemu-user-static-8.2.0-86.oe2403sp4.aarch64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-8.2.0-86.oe2403sp4.src as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src" }, "product_reference": "qemu-8.2.0-86.oe2403sp4.src.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-block-curl-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-debugsource-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-debugsource-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-img-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-img-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-seabios-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-seabios-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-system-arm-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-system-arm-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-user-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-user-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-user-static-8.2.0-86.oe2403sp4.x86_64 as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64" }, "product_reference": "qemu-user-static-8.2.0-86.oe2403sp4.x86_64.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-help-8.2.0-86.oe2403sp4.noarch as a component of openEuler-24.03-LTS-SP4", "product_id": "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" }, "product_reference": "qemu-help-8.2.0-86.oe2403sp4.noarch.rpm", "relates_to_product_reference": "openEuler-24.03-LTS-SP4" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-15264", "notes": [ { "category": "description", "text": "An unknown vulnerability exists in QEMU, with no detailed description available at this time.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "High" } ], "title": "CVE-2026-15264" }, { "cve": "CVE-2026-16457", "notes": [ { "category": "description", "text": "CVE-2026-16457 is a security vulnerability in QEMU. The specific details of this vulnerability have not been fully disclosed. This vulnerability may affect the normal operation of the QEMU virtualization platform and poses potential security risks.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Medium" } ], "title": "CVE-2026-16457" }, { "cve": "CVE-2026-18054", "notes": [ { "category": "description", "text": "CVE-2026-18054 is a vulnerability in QEMU, details are not yet disclosed.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 3.8, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "CVE-2026-18054" }, { "cve": "CVE-2026-3890", "notes": [ { "category": "description", "text": "This update to qemu-10.2.4-2.mga10 fixes 14 CVEs from 10.2.3 and 2 from\n10.2.4", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Medium" } ], "title": "CVE-2026-3890" }, { "cve": "CVE-2026-48004", "notes": [ { "category": "description", "text": "This update to qemu-10.2.4-2.mga10 fixes 14 CVEs from 10.2.3 and 2 from 10.2.4. This vulnerability (CVE-2026-48004) is one of them.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Medium" } ], "title": "CVE-2026-48004" }, { "cve": "CVE-2026-50624", "notes": [ { "category": "description", "text": "QEMU's virtio-rng frontend does not cancel or detach an RngRequest that is still pending on the rng-random backend before releasing the VirtIORNG object in virtio_rng_device_unrealize(). When a virtio-rng device is hot-plugged (device_del) and there are still entropy requests pending, the delayed backend completion calls the chr_read callback on the released object, causing the host heap to be use-after-free. An attacker able to trigger hot-plugging of the device could exploit this memory security flaw to compromise the QEMU process, causing a denial of service or potential code execution on the host.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 4.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Medium" } ], "title": "CVE-2026-50624" }, { "cve": "CVE-2026-50626", "notes": [ { "category": "description", "text": "An unknown vulnerability exists in QEMU, details are not yet disclosed.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "High" } ], "title": "CVE-2026-50626" }, { "cve": "CVE-2026-61402", "notes": [ { "category": "description", "text": "No detailed vulnerability information available.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "High" } ], "title": "CVE-2026-61402" }, { "cve": "CVE-2026-61476", "notes": [ { "category": "description", "text": "An unspecified vulnerability exists in QEMU, with no detailed information available at this time.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Medium" } ], "title": "CVE-2026-61476" }, { "cve": "CVE-2026-63109", "notes": [ { "category": "description", "text": "CVE-2026-63109 is a vulnerability in QEMU. Details of this vulnerability have not been publicly disclosed yet.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 3.8, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "CVE-2026-63109" }, { "cve": "CVE-2026-63110", "notes": [ { "category": "description", "text": "No detailed description available.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 3.4, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "CVE-2026-63110" }, { "cve": "CVE-2026-63320", "notes": [ { "category": "description", "text": "An unknown vulnerability exists in QEMU, the details of which have not yet been disclosed. Attackers may exploit this vulnerability to cause unknown impacts.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Medium" } ], "title": "CVE-2026-63320" }, { "cve": "CVE-2026-63321", "notes": [ { "category": "description", "text": "An unknown vulnerability exists in QEMU, the details of which have not yet been disclosed. Attackers may exploit this vulnerability to cause unknown impacts.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 5.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Medium" } ], "title": "CVE-2026-63321" }, { "cve": "CVE-2026-63322", "notes": [ { "category": "description", "text": "When QEMU's uefi-vars-x64 virtual device processes the VarCheckPolicy REGISTER command, the uefi_vars_mm_check_policy_register() function directly reads pe->size without first verifying whether the request length contains the complete variable_policy_entry header. The guest can send a REGISTER request with a length of exactly sizeof(mm_check_policy) (excluding variable_policy_entry), causing the func pointer to cross the end of the allocated MM communication buffer, causing the host heap buffer to read out of bounds (heap-buffer-overflow). An attacker could exploit this memory security flaw to compromise the QEMU process, causing a denial of service or potential code execution on the host.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Medium" } ], "title": "CVE-2026-63322" }, { "cve": "CVE-2026-63323", "notes": [ { "category": "description", "text": "An undisclosed vulnerability exists in QEMU, the details of which are not yet publicly available.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 7.0, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "High" } ], "title": "CVE-2026-63323" }, { "cve": "CVE-2026-65928", "notes": [ { "category": "description", "text": "An unknown type vulnerability exists in QEMU (Quick Emulator). The specific details have not been disclosed yet.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Medium" } ], "title": "CVE-2026-65928" }, { "cve": "CVE-2026-65929", "notes": [ { "category": "description", "text": "CVE-2026-65929 is a security vulnerability affecting QEMU, with no detailed technical information disclosed yet.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Medium" } ], "title": "CVE-2026-65929" }, { "cve": "CVE-2026-66021", "notes": [ { "category": "description", "text": "QEMU (Quick Emulator) is an open-source machine emulator and virtualizer widely used to run operating systems for different architectures. CVE-2026-66021 is a security vulnerability affecting QEMU, with specific details not yet fully disclosed.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "High" } ], "title": "CVE-2026-66021" }, { "cve": "CVE-2026-66022", "notes": [ { "category": "description", "text": "An unspecified vulnerability exists in QEMU, the details of which have not been disclosed.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "High" } ], "title": "CVE-2026-66022" }, { "cve": "CVE-2026-8343", "notes": [ { "category": "description", "text": "QEMU's VNC extended clipboard handler, after decompressing a client-controlled clipboard payload, compares the declared text size to the entire decompression buffer size, but then copies tsize bytes from buf + 4. The correct boundary is the remaining data length after the 4-byte length field. Therefore, a VNC client can cause QEMU to read up to 3 bytes out of bounds from the end of the decompressed heap buffer; a second VNC client can observe these bytes through the normal VNC extended clipboard PROVIDE path.", "title": "Vulnerability Description" } ], "product_status": { "fixed": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] }, "remediations": [ { "category": "vendor_fix", "details": "qemu security update", "product_ids": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ], "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3845" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.aarch64", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.src", "openEuler-24.03-LTS-SP4:qemu-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-curl-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-iscsi-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-rbd-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-block-ssh-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debuginfo-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-debugsource-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-guest-agent-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-hw-usb-host-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-img-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-seabios-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-aarch64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-arm-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-riscv-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-system-x86_64-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-binfmt-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-user-static-8.2.0-86.oe2403sp4.x86_64", "openEuler-24.03-LTS-SP4:qemu-help-8.2.0-86.oe2403sp4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Medium" } ], "title": "CVE-2026-8343" } ] }