Summary
[1.5.3-126.el7]
- kvm-virtio-recalculate-vq-inuse-after-migration.patch [bz#1376542]
- Resolves: bz#1376542
(RHSA-2016-1756 breaks migration of instances)
[1.5.3-125.el7]
- kvm-nbd-server-Set-O_NONBLOCK-on-client-fd.patch [bz#1285453]
- Resolves: bz#1285453
(An NBD client can cause QEMU main loop to block when connecting to built-in NBD server)
[1.5.3-124.el7]
- kvm-target-i386-Add-support-for-FEAT_7_0_ECX.patch [bz#1372459]
- kvm-target-i386-Add-more-Intel-AVX-512-instructions-supp.patch [bz#1372459]
- Resolves: bz#1372459
([Intel 7.3 Bug] SKL-SP Guest cpu doesnt support avx512 instruction sets(avx512bw, avx512dq and avx512vl) (qemu-kvm))
[1.5.3-123.el7]
- kvm-Fix-backport-of-target-i386-add-feature-flags-for-CP.patch [bz#1371619]
- kvm-Add-skip_dump-flag-to-ignore-memory-region-during-du.patch [bz#1373088]
- Resolves: bz#1371619
(Flags xsaveopt xsavec xgetbv1 are missing on qemu-kvm)
- Resolves: bz#1373088
([FJ7.3 Bug]: virsh dump with both --memory-only and --format option fails)
[1.5.3-122.el7]
- kvm-virtio-validate-the-existence-of-handle_output-befor.patch [bz#1367040]
- Resolves: bz#1367040
(QEMU crash when guest notifies non-existent virtqueue)
[1.5.3-121.el7]
- kvm-json-parser-drop-superfluous-assignment-for-token-va.patch [bz#1276036]
- kvm-qjson-Apply-nesting-limit-more-sanely.patch [bz#1276036]
- kvm-qjson-Don-t-crash-when-input-exceeds-nesting-limit.patch [bz#1276036]
- kvm-check-qjson-Add-test-for-JSON-nesting-depth-limit.patch [bz#1276036]
- kvm-qjson-Spell-out-some-silent-assumptions.patch [bz#1276036]
- kvm-qjson-Give-each-of-the-six-structural-chars-its-own-.patch [bz#1276036]
- kvm-qjson-Inline-token_is_keyword-and-simplify.patch [bz#1276036]
- kvm-qjson-Inline-token_is_escape-and-simplify.patch [bz#1276036]
- kvm-qjson-replace-QString-in-JSONLexer-with-GString.patch [bz#1276036]
- kvm-qjson-Convert-to-parser-to-recursive-descent.patch [bz#1276036]
- kvm-qjson-store-tokens-in-a-GQueue.patch [bz#1276036]
- kvm-qjson-surprise-allocating-6-QObjects-per-token-is-ex.patch [bz#1276036]
- kvm-qjson-Limit-number-of-tokens-in-addition-to-total-si.patch [bz#1276036]
- kvm-json-streamer-Don-t-leak-tokens-on-incomplete-parse.patch [bz#1276036]
- kvm-json-streamer-fix-double-free-on-exiting-during-a-pa.patch [bz#1276036]
- kvm-trace-remove-malloc-tracing.patch [bz#1360137]
- Resolves: bz#1276036
(Crash on QMP input exceeding limits)
- Resolves: bz#1360137
(GLib-WARNING **: gmem.c:482: custom memory allocation vtable not supported)
[1.5.3-120.el7]
- kvm-Add-install-dependency-to-newer-libusbx-version.patch [bz#1351106]
- kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359729]
- Resolves: bz#1351106
(symbol lookup error: /usr/libexec/qemu-kvm: undefined symbol: libusb_get_port_numbers)
- Resolves: bz#1359729
(CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-7.3])
[1.5.3-119.el7]
- kvm-qxl-factor-out-qxl_get_check_slot_offset.patch [bz#1355730]
- kvm-qxl-store-memory-region-and-offset-instead-of-pointe.patch [bz#1355730]
- kvm-qxl-fix-surface-migration.patch [bz#1355730]
- kvm-qxl-fix-qxl_set_dirty-call-in-qxl_dirty_one_surface.patch [bz#1355730]
- Resolves: bz#1355730
(spice-gtk shows outdated screen state after migration [qemu-kvm])
[1.5.3-118.el7]
- kvm-util-introduce-MIN_NON_ZERO.patch [bz#1318199]
- kvm-BlockLimits-introduce-max_transfer_length.patch [bz#1318199]
- kvm-block-backend-expose-bs-bl.max_transfer_length.patch [bz#1318199]
- kvm-scsi-generic-Merge-block-max-xfer-len-in-INQUIRY-res.patch [bz#1318199]
- kvm-raw-posix-Fetch-max-sectors-for-host-block-device.patch [bz#1318199]
- kvm-scsi-Advertise-limits-by-blocksize-not-512.patch [bz#1318199]
- kvm-util-Fix-MIN_NON_ZERO.patch [bz#1318199]
- Resolves: bz#1318199
(expose host BLKSECTGET limit in scsi-block (qemu-kvm))
[1.5.3-117.el7]
- kvm-target-i386-add-feature-flags-for-CPUID-EAX-0xd-ECX-.patch [bz#1327599]
- kvm-target-i386-add-Skylake-Client-cpu-model.patch [bz#1327599]
- Resolves: bz#1327599
(Add Skylake CPU model)
[1.5.3-116.el7]
- kvm-block-iscsi-avoid-potential-overflow-of-acb-task-cdb.patch [bz#1340929]
- Resolves: bz#1340929
(CVE-2016-5126 qemu-kvm: Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl [rhel-7.3])
[1.5.3-115.el7]
- kvm-spice-do-not-require-TCP-ports.patch [bz#1336491]
- kvm-vga-add-sr_vbe-register-set.patch [bz#1346982]
- Resolves: bz#1336491
(Ship FD connection patches qemu-kvm part)
- Resolves: bz#1346982
(Regression from CVE-2016-3712: windows installer fails to start)
[1.5.3-114.el7]
- kvm-hw-input-hid.c-Fix-capslock-hid-code.patch [bz#1256741]
- kvm-target-i386-fix-pcmpxstrx-equal-ordered-strstr-mode.patch [bz#1340971]
- kvm-spec-Update-rules-before-triggering-for-kvm-device.patch [bz#1333159]
- Resolves: bz#1256741
('CapsLock' will work as '\' when boot a guest with usb-kbd)
- Resolves: bz#1333159
(qemu-kvm doesnt reload udev rules before triggering for kvm device)
- Resolves: bz#1340971
(qemu: accel=tcg does not implement SSE 4 properly)
[1.5.3-113.el7]
- kvm-qxl-allow-to-specify-head-limit-to-qxl-driver.patch [bz#1283198]
- kvm-qxl-Fix-new-function-name-for-spice-server-library.patch [bz#1283198]
- kvm-block-raw-posix-Open-file-descriptor-O_RDWR-to-work-.patch [bz#1268345]
- Resolves: bz#1268345
(posix_fallocate emulation on NFS fails with Bad file descriptor if fd is opened O_WRONLY)
- Resolves: bz#1283198
(RFE: backport max monitor limitation from Qemu upstream)
[1.5.3-112.el7]
- kvm-virtio-scsi-Prevent-assertion-on-missed-events.patch [bz#1312289]
- kvm-seccomp-adding-sysinfo-system-call-to-whitelist.patch [bz#1177318]
- kvm-acpi-strip-compiler-info-in-built-in-DSDT.patch [bz#1330969]
- kvm-acpi-fix-endian-ness-for-table-ids.patch [bz#1330969]
- kvm-acpi-support-specified-oem-table-id-for-build_header.patch [bz#1330969]
- kvm-acpi-take-oem_id-in-build_header-optionally.patch [bz#1330969]
- kvm-acpi-expose-oem_id-and-oem_table_id-in-build_rsdt.patch [bz#1330969]
- kvm-acpi-add-fun
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | qemu-img | 10:1.5.3-126.el7 |
| Oracle Linux · 7 | qemu-kvm | 10:1.5.3-126.el7 |
| Oracle Linux · 7 | qemu-kvm-common | 10:1.5.3-126.el7 |
| Oracle Linux · 7 | qemu-kvm-tools | 10:1.5.3-126.el7 |
Vulnerabilities 2
-
Unscored —
QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could …
-
Unscored —
Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read…