[ubuntu/jammy-security] qemu 1:6.2+dfsg-2ubuntu6.30 (Accepted)

[Fabian Toepfer]

qemu (1:6.2+dfsg-2ubuntu6.30) jammy-security; urgency=medium

  * SECURITY UPDATE: use-after-free
    - debian/patches/CVE-2024-6519-pre1.patch: dd missing decrement of
      reentrancy counter in hw/scsi/lsi53c895a.c.
    - debian/patches/CVE-2024-6519.patch: keep a reference to the device while
      SCRIPTS in hw/scsi/lsi53c895a.c.
    - CVE-2024-6519
  * SECURITY UPDATE: out-of-bounds read
    - debian/patches/CVE-2026-2243.patch: fix OOB read in vmdk_read_extent()
      in block/vmdk.c.
    - CVE-2026-2243

qemu (1:6.2+dfsg-2ubuntu6.29) jammy; urgency=medium

  * Fix crash on concurrent `block-stream` and `query-named-block-nodes`
    (LP: #2126951)
    - d/p/ubuntu/lp2126951-block-Drop-detach_subchain-for-bdrv_replace_node.patch

Date: 2026-04-01 20:25:13.530364+00:00
Changed-By: Fabian Toepfer <fabian.toepfer at canonical.com>
https://launchpad.net/ubuntu/+source/qemu/1:6.2+dfsg-2ubuntu6.30
-------------- next part --------------
Sorry, changesfile not available.