Skip to content
OpenAdvisories
Medium ELSA-2018-3113 1 CVE

Moderate: libvirt security, bug fix, and enhancement update (Oracle Linux 7)

Published Nov 5, 2018 · Updated Nov 5, 2018

Summary

[4.5.0-10]
- conf: correct false boot order error during domain parse (rhbz#1601318)

[4.5.0-9]
- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1621910)
- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1621910)
- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623157)

[4.5.0-8]
- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1613746)
- access: Fix nwfilter-binding ACL access API name generation (rhbz#1611320)
- qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624735)

[4.5.0-7]
- qemu_migration: Avoid writing to freed memory (rhbz#1593137)
- qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618622)
- tests: rename hugepages to hugepages-default (rhbz#1591235)
- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1591235)
- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1591235)
- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1591235)
- tests: extract pages-discard out of hugepages-pages (rhbz#1591235)
- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1591235)
- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1591235)
- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1591235)
- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1591235)
- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1591235)
- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1591235)
- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1591235)
- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1591235)
- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1591235)
- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1591235)
- tests: introduce hugepages-nodeset (rhbz#1591235)
- conf: Move hugepage XML validation check out of qemu_command (rhbz#1591235)
- conf: Move hugepages validation out of XML parser (rhbz#1591235)
- conf: Introduce virDomainDefPostParseMemtune (rhbz#1591235)
- tests: sev: Test launch-security with specific QEMU version (rhbz#1612009)
- qemu: Fix probing of AMD SEV support (rhbz#1612009)
- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1612009)

[4.5.0-6]
- qemu: Exempt video model 'none' from getting a PCI address on Q35 (rhbz#1609087)
- conf: Fix a error msg typo in virDomainVideoDefValidate (rhbz#1607825)

[4.5.0-5]
- esx storage: Fix typo lsilogic -> lsiLogic (rhbz#1571759)
- networkGetDHCPLeases: Dont always report error if unable to read leases file (rhbz#1600468)
- nwfilter: Resolve SEGV for NWFilter Snoop processing (rhbz#1599973)
- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs (rhbz#1589115)
- qemuDomainSaveMemory: Dont enforce dynamicOwnership (rhbz#1589115)
- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl (rhbz#1607831)
- examples: Add clean-traffic-gateway into nwfilters (rhbz#1603115)

[4.5.0-4]
- qemu: hotplug: dont overwrite error message in qemuDomainAttachNetDevice (rhbz#1598311)
- qemu: hotplug: report error when changing rom enabled attr for net iface (rhbz#1599513)
- qemu: Fix setting global_period cputune element (rhbz#1600427)
- tests: qemucaps: Add test data for upcoming qemu 3.0.0 (rhbz#1475770)
- qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend (rhbz#1475770)
- qemu: command: Move graphics iteration to its own function (rhbz#1475770)
- qemu: address: Handle all the video devices within a single loop (rhbz#1475770)
- conf: Introduce virDomainVideoDefClear helper (rhbz#1475770)
- conf: Introduce virDomainDefPostParseVideo helper (rhbz#1475770)
- qemu: validate: Enforce compile time switch type checking for videos (rhbz#1475770)
- tests: Add capabilities data for QEMU 2.11 x86_64 (rhbz#1475770)
- tests: Update capabilities data for QEMU 3.0.0 x86_64 (rhbz#1475770)
- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc (rhbz#1475770)
- qemu: caps: Introduce a capability for egl-headless (rhbz#1475770)
- qemu: Introduce a new graphics display type 'headless' (rhbz#1475770)
- qemu: caps: Add vfio-pci.display capability (rhbz#1475770)
- conf: Introduce virDomainGraphicsDefHasOpenGL helper (rhbz#1475770)
- conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys (rhbz#1475770)
- conf: Introduce new <hostdev> attribute 'display' (rhbz#1475770)
- qemu: command: Enable formatting vfio-pci.display option onto cmdline (rhbz#1475770)
- docs: Rephrase the mediated devices hostdev section a bit (rhbz#1475770)
- conf: Introduce new video type 'none' (rhbz#1475770)
- virt-xml-validate: Add schema for nwfilterbinding (rhbz#1600330)
- tools: Fix typo generating adapter_wwpn field (rhbz#1601377)
- src: Fix memory leak in virNWFilterBindingDispose (rhbz#1603025)

[4.5.0-3]
- qemu: hotplug: Do not try to add secret object for TLS if it does not exist (rhbz#1598015)
- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors (rhbz#1598015)
- spec: Explicitly require matching libvirt-libs (rhbz#1600122)
- virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash (rhbz#1599545)
- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one (rhbz#1470007)
- qemuDomainValidateStorageSource: Relax PR validation (rhbz#1470007)
- virStoragePRDefFormat: Suppress path formatting for migratable XML (rhbz#1470007)
- qemu: Wire up PR_MANAGER_STATUS_CHANGED event (rhbz#1470007)
- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo (rhbz#1470007)
- qemu: Fetch pr-helper process info on reconnect (rhbz#1470007)
- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject (rhbz#1598015)
- virsh.pod: Fix a command name typo in nwfilter-binding-undefine (rhbz#1600329)
- docs: schema: Add missing <alias> to vsock device (rhbz#1600345)
- virnetdevtap: Dont crash on !ifname in virNetDevTapInterfaceStats (rhbz#1595184

Fixed packages 31

ReleasePackageFixed in
Oracle Linux · 7 libvirt 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-admin 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-bash-completion 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-client 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-config-network 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-config-nwfilter 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-interface 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-lxc 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-network 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-nodedev 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-nwfilter 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-qemu 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-secret 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-storage 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-core 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-disk 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-gluster 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-iscsi 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-logical 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-mpath 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-rbd 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-scsi 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-kvm 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-daemon-lxc 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-devel 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-docs 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-libs 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-lock-sanlock 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-login-shell 0:4.5.0-10.el7
Oracle Linux · 7 libvirt-nss 0:4.5.0-10.el7

Vulnerabilities 1