UbuntuUpdates.org

Package "qemu-utils"

Name: qemu-utils

Description:

QEMU utilities
Latest version: 1:8.2.2+ds-0ubuntu1.18
Release: noble (24.04)
Level: updates
Repository: main
Head package: qemu
Homepage: http://www.qemu.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "qemu-utils"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "qemu-utils" in Noble

Repository Area Version
base main 1:8.2.2+ds-0ubuntu1
security main 1:8.2.2+ds-0ubuntu1.16
proposed main 1:8.2.2+ds-0ubuntu1.18

Changelog

Version: 1:8.2.2+ds-0ubuntu1.18 2026-08-06 09:07:21 UTC
No changelog available yet.
Source diff to previous version

Version: 1:8.2.2+ds-0ubuntu1.17 2026-06-18 16:07:44 UTC

  qemu (1:8.2.2+ds-0ubuntu1.17) noble; urgency=medium

  * d/qemu-guest-agent.postinst: trigger udev rule to start the service
    (LP: #2102093)
  * d/p/u/lp2133804/*: linux-user: Add termios2 support (LP: #2133804)

 -- Hector Cao <email address hidden> Wed, 22 Apr 2026 11:24:43 +0200
Source diff to previous version
2102093 qemu-guest-agent does not start automatically
2133804 QEMU does not emulate IOCTL TCGETS2

Version: 1:8.2.2+ds-0ubuntu1.16 2026-04-10 06:08:18 UTC

  qemu (1:8.2.2+ds-0ubuntu1.16) noble-security; urgency=medium

  * SECURITY UPDATE: use-after-free
    - debian/patches/CVE-2024-6519.patch: keep a reference to the device while
      SCRIPTS in hw/scsi/lsi53c895a.c.
    - CVE-2024-6519
  * SECURITY UPDATE: out-of-bounds read
    - debian/patches/CVE-2026-2243.patch: fix OOB read in vmdk_read_extent()
      in block/vmdk.c.
    - CVE-2026-2243
  * SECURITY UPDATE: heap buffer overflow
    - debian/patches/CVE-2026-3195-1.patch: fix max_size bounds check in input
      cb in hw/audio/virtio-snd.c.
    - debian/patches/CVE-2026-3195-2.patch: tighten read amount in in_cb in
      hw/audio/virtio-snd.c.
    - CVE-2026-3195
  * SECURITY UPDATE: integer overflow
    - debian/patches/CVE-2026-3196.patch: handle 5.14.6.2 for PCM_INFO properly
      in hw/audio/virtio-snd.c.
    - CVE-2026-3196
  * SECURITY UPDATE: out-of-bounds write
    - debian/patches/CVE-2026-3842.patch: check length returned by
      cpu_physical_memory_map() in hw/hyperv/syndbg.c.
    - CVE-2026-3842

 -- Fabian Toepfer <email address hidden> Wed, 08 Apr 2026 11:57:03 +0200
Source diff to previous version
CVE-2024-6519 A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.
CVE-2026-2243 A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of

Version: 1:8.2.2+ds-0ubuntu1.15 2026-04-09 02:12:02 UTC

  qemu (1:8.2.2+ds-0ubuntu1.15) noble; urgency=medium

  * d/p/u/lp2142099-*: fix wrong feature dependency for waitpkg
     (LP: #2142099)

 -- Hector Cao <email address hidden> Fri, 20 Mar 2026 11:41:09 +0100
Source diff to previous version
2142099 migration jammy to noble fails due to missing feature : waitpkg

Version: 1:8.2.2+ds-0ubuntu1.14 2026-04-01 11:10:30 UTC

  qemu (1:8.2.2+ds-0ubuntu1.14) noble; urgency=medium

  * Fix crash on concurrent `block-stream` and `query-named-block-nodes`
    (LP: #2126951)
    - d/p/ubuntu/lp2126951-block-Drop-detach_subchain-for-bdrv_replace_node.patch

 -- Wesley Hershberger <email address hidden> Wed, 11 Mar 2026 10:42:17 -0500
2126951 `block-stream` segfault with concurrent `query-named-block-nodes`


About   -   Send Feedback to @ubuntu_updates