QEMU: Multiple vulnerabilities Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. qemu 2020-03-30 2020-03-30 709490 711334 local 4.2.0-r2 4.2.0-r2

QEMU is a generic and open source machine emulator and virtualizer.

Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details.

An attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.

There is no known workaround at this time.

All QEMU users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/qemu-4.2.0-r2"
CVE-2019-13164 CVE-2020-8608 whissi whissi