QEMU CVE

[guillaume34500]

Hello

Any information about:

Package        : qemu
CVE ID         : CVE-2018-11806 CVE-2018-12617 CVE-2018-16872 CVE-2018-17958
                 CVE-2018-18849 CVE-2018-18954 CVE-2018-19364 CVE-2018-19489
                 CVE-2019-3812 CVE-2019-6778 CVE-2019-9824 CVE-2019-12155

Multiple security issues were discovered in QEMU, a fast processor
emulator, which could result in denial of service, the execution of
arbitrary code or information disclosure.

In addition this update backports support to passthrough the new
md-clear CPU flag added in the intel-microcode update shipped in DSA 4447
to x86-based guests.

For the stable distribution (stretch), these problems have been fixed in
version 1:2.8+dfsg-6+deb9u6.

We recommend that you upgrade your qemu packages.

Regards

 

[tom]

This is a security update for the qemu version shipped with Debian. Proxmox VE uses a newer qemu version (3.0.1), not from Debian.