QEMU

QEMU at a glance

QEMU is the open-source machine emulator and virtualizer underpinning much of Linux virtualization (often with KVM), and the engine beneath platforms like Proxmox. QEMU ships regular releases plus coordinated security fixes; as software that runs untrusted guest OSes, those fixes matter.

For admins QEMU usually comes from the distribution or a virtualization platform, which set the version. The key concern is guest-to-host isolation: QEMU has had security advisories in device emulation that could allow a guest to affect the host, so apply security updates promptly — and note that running VMs must be restarted (or live-migrated) to pick up a patched QEMU. Take snapshots before larger updates. Keep the device model minimal and use hardening (sVirt/AppArmor) where available. After updating, verify that VMs boot and migrate. Track the version your platform ships; patchletter surfaces new QEMU releases.