[CLSA-2025:1761214095] qemu-kvm: Fix of CVE-2023-5088
Type:
security
Severity:
Important
Release date:
2025-10-23 10:08:23 UTC
Description:
- CVE-2023-5088: fix incorrect guest I/O redirection to offset 0 that could allow data overwrite at LBA 0 and potential VM escape
Updated packages:
  • qemu-guest-agent-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:82c85c5662d7715261eb011e09ef6368c517876738b4f1dd3db12587d78a6a38
  • qemu-img-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:45644af91a8512109f8e2ae11843a92265e587b05609f96eb1191cfe96f21065
  • qemu-kvm-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:b153c1d8273a0a106ff32928c1c93d52811ebfccd16b2c76a3510e5a7a3bdbe3
  • qemu-kvm-audio-pa-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:525b030d08f88995420aa3b833ab530a59c0043cbfffce5c6a472b03b1df9ead
  • qemu-kvm-block-curl-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:04fda858183f34bc60476e3ef4b40bc1e8ced57f81a6b663b617675bd2c98b90
  • qemu-kvm-block-rbd-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:3a47dfe8ef030b87a044d889d5f08e0be6b56fb9443a865d052389a06b809b27
  • qemu-kvm-common-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:a91f39842203e566abb36d53dd12e8c5926949a4e6e6830b4a024428d3a10bea
  • qemu-kvm-core-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:875bdffe15bdd27a74bedeb3c8b7ea840eb52279e1ce5e5143a920e764750b22
  • qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:e4316047d0c0c6539c6546ae3155751a1954e6f5045e9f6f2e7f3c71f46f882b
  • qemu-kvm-device-display-virtio-gpu-pci-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:24d57c25653ee48980ad9c459ba5a25e185624ef2911d697a103356f39a88dff
  • qemu-kvm-device-display-virtio-vga-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:703cc0b984e6c2b1e21745edda72b1432d00753d26738dd80b35d2903333198b
  • qemu-kvm-device-usb-host-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:2e402b9fe4ef365f6820167f9b0c535337656ba5fb7763aeccf22e5fe3d57c21
  • qemu-kvm-device-usb-redirect-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:e69850c4110095fa05c8cfcb53b92c4c2732cc64260f27d8dbb9d32929af9c44
  • qemu-kvm-docs-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:014a310eed0e132effab629494354ddc6d527f9067f9ea8bf459ea59bb33842d
  • qemu-kvm-tests-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:0d32af90df000ea4a4a2a60d003792dccb4410d8440eafcdb8eb7b550b0fccf8
  • qemu-kvm-tools-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:0e657eb1bdc933b94410badfa1a91f62cbe41b6d4dd2ef583f447daa3efd6e47
  • qemu-kvm-ui-egl-headless-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:94e3c065b24ae64505db2be2697e620d3ce9791b275680cd8c41fa95cb185d11
  • qemu-kvm-ui-opengl-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:0572ec58e2288a89c79d39538300c26d5ecceb7b00433ae09e130cbc703321d2
  • qemu-pr-helper-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm
    sha:baab747faed30cc4cefbfb5a8bfa0c7c51a324af6f97adb54f2cd6096fc72d06
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.