ALSA-2026:18479

See a problem?
Please try reporting it to the source first.
Source
https://errata.almalinux.org/10/ALSA-2026-18479.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALSA-2026:18479
Related
Published
2026-05-19T00:00:00Z
Modified
2026-05-26T16:59:19.461092630Z
Summary
Important: qemu-kvm security update
Details

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

  • firefox: thunderbird: CSP Bypass and XSS Exposure via Web Compatibility Shims (CVE-2024-11694)
  • firefox: thunderbird: Unhandled Exception in Add-on Signature Verification (CVE-2024-11696)
  • firefox: thunderbird: Select list elements could be shown over another site (CVE-2024-11692)
  • firefox: thunderbird: Memory safety bugs fixed in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5 (CVE-2024-11699)
  • firefox: thunderbird: URL Bar Spoofing via Manipulated Punycode and Whitespace Characters (CVE-2024-11695)
  • firefox: thunderbird: Improper Keypress Handling in Executable File Confirmation Dialog (CVE-2024-11697)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:10
qemu-guest-agent

Package

Name
qemu-guest-agent
Purl
pkg:rpm/almalinux/qemu-guest-agent

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-img

Package

Name
qemu-img
Purl
pkg:rpm/almalinux/qemu-img

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm

Package

Name
qemu-kvm
Purl
pkg:rpm/almalinux/qemu-kvm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-audio-pa

Package

Name
qemu-kvm-audio-pa
Purl
pkg:rpm/almalinux/qemu-kvm-audio-pa

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-block-blkio

Package

Name
qemu-kvm-block-blkio
Purl
pkg:rpm/almalinux/qemu-kvm-block-blkio

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-block-curl

Package

Name
qemu-kvm-block-curl
Purl
pkg:rpm/almalinux/qemu-kvm-block-curl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-block-rbd

Package

Name
qemu-kvm-block-rbd
Purl
pkg:rpm/almalinux/qemu-kvm-block-rbd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-common

Package

Name
qemu-kvm-common
Purl
pkg:rpm/almalinux/qemu-kvm-common

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-core

Package

Name
qemu-kvm-core
Purl
pkg:rpm/almalinux/qemu-kvm-core

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-device-display-virtio-gpu

Package

Name
qemu-kvm-device-display-virtio-gpu
Purl
pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-device-display-virtio-gpu-ccw

Package

Name
qemu-kvm-device-display-virtio-gpu-ccw
Purl
pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu-ccw

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-device-display-virtio-gpu-pci

Package

Name
qemu-kvm-device-display-virtio-gpu-pci
Purl
pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu-pci

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-device-display-virtio-vga

Package

Name
qemu-kvm-device-display-virtio-vga
Purl
pkg:rpm/almalinux/qemu-kvm-device-display-virtio-vga

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-device-usb-host

Package

Name
qemu-kvm-device-usb-host
Purl
pkg:rpm/almalinux/qemu-kvm-device-usb-host

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-device-usb-redirect

Package

Name
qemu-kvm-device-usb-redirect
Purl
pkg:rpm/almalinux/qemu-kvm-device-usb-redirect

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-docs

Package

Name
qemu-kvm-docs
Purl
pkg:rpm/almalinux/qemu-kvm-docs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-tools

Package

Name
qemu-kvm-tools
Purl
pkg:rpm/almalinux/qemu-kvm-tools

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-ui-egl-headless

Package

Name
qemu-kvm-ui-egl-headless
Purl
pkg:rpm/almalinux/qemu-kvm-ui-egl-headless

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-kvm-ui-opengl

Package

Name
qemu-kvm-ui-opengl
Purl
pkg:rpm/almalinux/qemu-kvm-ui-opengl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"
qemu-pr-helper

Package

Name
qemu-pr-helper
Purl
pkg:rpm/almalinux/qemu-pr-helper

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18:10.1.0-16.el10_2.alma.1

Database specific

source 
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:18479.json"