ALSA-2026:18479

[ALSA-2026:18479] Important: qemu-kvm security update

Type:

security

Severity:

important

Release date:

2026-05-26

Description:

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.  

Security Fix(es):  

  * firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694)
  * firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696)
  * firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692)
  * firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 (CVE-2024-11699)
  * firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters (CVE-2024-11695)
  * firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697)


For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  

Additional Changes:  

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
aarch64	qemu-kvm-block-curl-10.1.0-16.el10_2.alma.1.aarch64.rpm	31f3b926435e3c2e527c1f91b280beb47eeb21a1835edd532b7c8f61f7d9a632
aarch64	qemu-guest-agent-10.1.0-16.el10_2.alma.1.aarch64.rpm	38b8a361b0b6399d4ba15276834092e9a10b6acee39f30ee09978344b347c0f2
aarch64	qemu-kvm-device-usb-host-10.1.0-16.el10_2.alma.1.aarch64.rpm	40541f87c632d6ad215112d5c01d8effe288343fb2143369069f0ee1654bc954
aarch64	qemu-kvm-device-usb-redirect-10.1.0-16.el10_2.alma.1.aarch64.rpm	40727c8dfa9b582a7e33845dfa71354a9c6e2665e7e5f544a426d9b419a25a69
aarch64	qemu-kvm-audio-pa-10.1.0-16.el10_2.alma.1.aarch64.rpm	5c2ec485f04562b5309184b534e0121b58b1e9dbfb2027400e2e3de6c24baeba
aarch64	qemu-kvm-device-display-virtio-gpu-pci-10.1.0-16.el10_2.alma.1.aarch64.rpm	5e54ac24fde7edfcb5371c29a08b12943201fa69494162f73e986dadfa5d729e
aarch64	qemu-kvm-10.1.0-16.el10_2.alma.1.aarch64.rpm	5f57da9510d01e86aef483d8f0d5b57a6876ebd42bd287c992fe4a9e926deaad
aarch64	qemu-kvm-block-blkio-10.1.0-16.el10_2.alma.1.aarch64.rpm	704c6a6265104281f690c9d76a500be6e47efa23d8da8bcfe10f561c4ecfa2bc
aarch64	qemu-kvm-tools-10.1.0-16.el10_2.alma.1.aarch64.rpm	870acad5d7ba5af50a08e946fcf281dc4c5674225fe42881d7afdef4e6bdf776
aarch64	qemu-kvm-docs-10.1.0-16.el10_2.alma.1.aarch64.rpm	8e46414ac60910f7e35167feef14b576dbf7c0e57f151c530f7e2afb70bbab21
aarch64	qemu-kvm-core-10.1.0-16.el10_2.alma.1.aarch64.rpm	ab125ace2853908077dc7a4864c0eb09798edd56711eb65d796ef6ce552c4bc5
aarch64	qemu-kvm-common-10.1.0-16.el10_2.alma.1.aarch64.rpm	ac15bde0a4ec061d79c1d59a55a20580a504a4c8f62f2821a489191b1f7792e4
aarch64	qemu-kvm-block-rbd-10.1.0-16.el10_2.alma.1.aarch64.rpm	b206a2e184c68aaa49ec7bb0712ca6d1158ea091273c9f54fb18fc65848e0ad8
aarch64	qemu-kvm-device-display-virtio-gpu-10.1.0-16.el10_2.alma.1.aarch64.rpm	c92fb00063f0a973ce0229fb42316a56e74d3323fb633688abcb7d9059db4202
aarch64	qemu-pr-helper-10.1.0-16.el10_2.alma.1.aarch64.rpm	d6f2fc3603612ad547d6c1ec5bd666d7f7e615b533a170e0b6d97786078c49f8
aarch64	qemu-img-10.1.0-16.el10_2.alma.1.aarch64.rpm	f32dc609e54a27b644fa98935ee831fc413d733c506e793c54f83512cb0c530e
ppc64le	qemu-img-10.1.0-16.el10_2.alma.1.ppc64le.rpm	93e9077725cde55a5cbcd8cbcc528804b91999613450b31b0ef628e2545acf56
ppc64le	qemu-guest-agent-10.1.0-16.el10_2.alma.1.ppc64le.rpm	a9bbc75c134a61583e3631bef10ffd869930c3e31bbd8908fd82fd23ec758fba
s390x	qemu-kvm-block-rbd-10.1.0-16.el10_2.alma.1.s390x.rpm	01f30413f529a28b44a195f7dfd566f3e44c3d4a65a3f6a45d5c0d43d561033c
s390x	qemu-kvm-common-10.1.0-16.el10_2.alma.1.s390x.rpm	1991d9d537778f169344010804e8c46d9a8566e3c9e9ff135b8252adfff0ff18
s390x	qemu-kvm-block-blkio-10.1.0-16.el10_2.alma.1.s390x.rpm	1cd3714070032bb25d12ba52ec1198ee94304c0dd50e50f878c5fee8498fb1da
s390x	qemu-kvm-core-10.1.0-16.el10_2.alma.1.s390x.rpm	265c64d4af61d41e5ddd12dc9658e58013f5f5abc47c68a87697e509a0467327
s390x	qemu-kvm-device-usb-host-10.1.0-16.el10_2.alma.1.s390x.rpm	2f15448aca8fb69b6b4cd2bdf5a845e7ed6a6808cb51df498cea09c81690a805
s390x	qemu-kvm-device-display-virtio-gpu-10.1.0-16.el10_2.alma.1.s390x.rpm	33e4b45a0060d0eb211595bdfb7558d1f4914ddf5d3451248c09cf680c475813
s390x	qemu-guest-agent-10.1.0-16.el10_2.alma.1.s390x.rpm	347b0aba0712414da88b365d9f5c05d1197eb943cdaa30fecc95e7a78bc2b91d
s390x	qemu-kvm-tools-10.1.0-16.el10_2.alma.1.s390x.rpm	3ea879433509c4eedb9420a32367dab71897a74c19959f5760dc5caf3295128a
s390x	qemu-pr-helper-10.1.0-16.el10_2.alma.1.s390x.rpm	411aba59a91df85eeb591a0ea8e9aed46eafa4c7a5595ba65b18c636cf46edb6
s390x	qemu-kvm-block-curl-10.1.0-16.el10_2.alma.1.s390x.rpm	585d557526c9ccae7791498663520075d826e4a0b10016d24579e0703431d0b2
s390x	qemu-kvm-audio-pa-10.1.0-16.el10_2.alma.1.s390x.rpm	5f6001fe88dc60ba758fed0a4c1896443848ef6bd65a57621cfb67951b9f5699
s390x	qemu-kvm-docs-10.1.0-16.el10_2.alma.1.s390x.rpm	65d64c4ea67a821911f6e7ff94d26955a279551cc3ad9b21f8deab4844267425
s390x	qemu-kvm-device-display-virtio-gpu-ccw-10.1.0-16.el10_2.alma.1.s390x.rpm	770b220d5a1427a45ae2491ed43795f0b469753170a21105e63e2392d61c0c67
s390x	qemu-kvm-10.1.0-16.el10_2.alma.1.s390x.rpm	e41638e84143df9afd5bef17d7d2a0474966c00cd59429dbc21f7153168b29e3
s390x	qemu-img-10.1.0-16.el10_2.alma.1.s390x.rpm	ee59505654068c9d3a844ed73d3ebeaefee96ce75698f5795d3e9a5734f1ce94
x86_64	qemu-pr-helper-10.1.0-16.el10_2.alma.1.x86_64.rpm	019407cb3652942e54dcf50f6482c8df79876d1e4ef5138242294e94cc93a83f
x86_64	qemu-kvm-device-display-virtio-gpu-10.1.0-16.el10_2.alma.1.x86_64.rpm	08853c2463e96d9daef009ebb0ed3d641fc541c7214266b5d7409625afcd964c
x86_64	qemu-kvm-device-display-virtio-vga-10.1.0-16.el10_2.alma.1.x86_64.rpm	0d1d5d8e50aaa3ce6c7408f4b8869f0583fbf67659ccfb8715a4e3cb9ac61456
x86_64	qemu-kvm-core-10.1.0-16.el10_2.alma.1.x86_64.rpm	125aaaef99bfeab8ec08b1f3e21c4eb6b65a6acb209f474c6ffcf0be2f7e5836
x86_64	qemu-kvm-device-display-virtio-gpu-pci-10.1.0-16.el10_2.alma.1.x86_64.rpm	1b81cdf5f300587129ffec89daf2dd673ce0e475f440ee5abb50f2800610e2c6
x86_64	qemu-kvm-10.1.0-16.el10_2.alma.1.x86_64.rpm	2637aae0447c4e4f8f4197b6ff8a719a6a3e6cd5af196c3261cdf831d7068f2c
x86_64	qemu-img-10.1.0-16.el10_2.alma.1.x86_64.rpm	3607c03d618999bed5ff9839d53a67e09d62209ca58953536f691edb348b4163
x86_64	qemu-kvm-device-usb-redirect-10.1.0-16.el10_2.alma.1.x86_64.rpm	45a016929648b5f37b38d47da5ad2aaeafccefc173aaec86fce7cd4843f964ef
x86_64	qemu-kvm-ui-opengl-10.1.0-16.el10_2.alma.1.x86_64.rpm	544918e25b8280c527b878d5c78ed1251f7c6df68a7be3de54115f384cdee24c
x86_64	qemu-kvm-docs-10.1.0-16.el10_2.alma.1.x86_64.rpm	69268a26048e75b9aacc653782a915cc782dcf60e1168e39d82a0ede4ad1c6d8
x86_64	qemu-kvm-block-curl-10.1.0-16.el10_2.alma.1.x86_64.rpm	6d5c0bead0b505adb2feaddbf521789a4e21dacb53a55f4be13c81414f89dc79
x86_64	qemu-kvm-block-rbd-10.1.0-16.el10_2.alma.1.x86_64.rpm	aaaaa67d0d0959db2062837b837c18c45d541523a66fee882d7f5fbd83fcf31b
x86_64	qemu-kvm-audio-pa-10.1.0-16.el10_2.alma.1.x86_64.rpm	ab1169e7182ea9c590ec54a72885372c0d40d6af5b957d1213ea08ad90410529
x86_64	qemu-kvm-common-10.1.0-16.el10_2.alma.1.x86_64.rpm	c1fa996b6f2fc6019b2beb88e7e6bb78cfcce63193674f2bdc4bb3175b830069
x86_64	qemu-guest-agent-10.1.0-16.el10_2.alma.1.x86_64.rpm	c894655255fb8e3e391db8abf1b7bb2bed01c50c331d05fe625f4505b38903bf
x86_64	qemu-kvm-ui-egl-headless-10.1.0-16.el10_2.alma.1.x86_64.rpm	d698d480a433a89fcbe4cf83b812c5886cead0d72ce5b2183be2e0cb279406ce
x86_64	qemu-kvm-tools-10.1.0-16.el10_2.alma.1.x86_64.rpm	ed9d3e6c114aa069d9d38066dbbf3e3875b64018942dbc136b2b997f278b65fa
x86_64	qemu-kvm-device-usb-host-10.1.0-16.el10_2.alma.1.x86_64.rpm	fd6c6875935d98c771dda60be1f87d2fb9cece2cd1bea63fd6ccd627ed103256
x86_64	qemu-kvm-block-blkio-10.1.0-16.el10_2.alma.1.x86_64.rpm	ffba073828bb140038d0be2d25e8ea5c17368841123e133550b230fd5260f4b0
x86_64_v2	qemu-kvm-core-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	02b913b8f1acd264f2e5aebccea9db3efbaf74b5bc217ff40a9a53ccdad375f5
x86_64_v2	qemu-img-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	04c72b50b2b090490a08441f78f6f83320e579af3a1a8d30ca5d7f206da1294f
x86_64_v2	qemu-kvm-device-usb-host-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	1c7fa6758b04e0b5b7a6b04e5756324be39cd9204ad6979f79d58847d4c7c706
x86_64_v2	qemu-kvm-block-curl-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	30beb677a15450421d0702198c8f45e78ba2ffc0ad30f85e257415e75799bbc2
x86_64_v2	qemu-kvm-device-display-virtio-gpu-pci-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	317b10f1f8625c3ad16bbfc7257ab61f4869e4156babc5f34c19ed5e721e54ba
x86_64_v2	qemu-kvm-block-blkio-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	31ad3df9dfa243bcb48b161689c0524db0441b1ced3e2f8c8c01349f26f3f404
x86_64_v2	qemu-kvm-device-display-virtio-gpu-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	4cc88712e173b7711fddc6137fbaab97ddb00f43ed2fca7a8637c569c0024632
x86_64_v2	qemu-kvm-ui-egl-headless-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	4ef278a0e6d3ea128261224da75024f6c0a53e80a09031fcd1f10a80d5c1a721
x86_64_v2	qemu-kvm-device-display-virtio-vga-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	56bc6a479277e0c74d5b7ccf2754a84809dd449fe076beead495e85e80909e5d
x86_64_v2	qemu-kvm-block-rbd-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	681a2955c4991648b0900f514b5c1917c24297c9f7642f39155faf751c09a370
x86_64_v2	qemu-kvm-audio-pa-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	793c6f828dac538ff5af996201e7e25b47ff99cc1e247ddf9b887d8f799fd4df
x86_64_v2	qemu-kvm-docs-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	7d8b7d7411245eea40531ec56a72384bc87ec338e9400c9419ea2172931cc898
x86_64_v2	qemu-pr-helper-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	7e25e79731ed77d33ac546fedd090d918fbb845a9f620a1e414d6a01839297ca
x86_64_v2	qemu-kvm-ui-opengl-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	83c8dd4caffb920c9976da6c6532f9434beeeaf9d3b5af31d7f487d434be72f1
x86_64_v2	qemu-kvm-device-usb-redirect-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	91e741cd589bc5d7c580611dc8a9ee14c4789e5b64d3250031c845706ed164b9
x86_64_v2	qemu-kvm-common-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	a796843e38ce74c2a964c97fe3b3386ff28fde5751bf141e62db69493e4c6493
x86_64_v2	qemu-kvm-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	b0dac79d289be95bbc053a1ca35f0accd654d39f3834613bc9709278c5ed67a9
x86_64_v2	qemu-guest-agent-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	c87aa68cc76df5d7d8b9acdee2c534917b2004ab6d88702b09061a9df0c741dd
x86_64_v2	qemu-kvm-tools-10.1.0-16.el10_2.alma.1.x86_64_v2.rpm	c982bd1e0d40d8f4c442b89df0d6d08dce84ab1418354b0fc67bc441fcc20024

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.