Summary
libguestfs
[1:1.38.4-10.1.0.1]
- Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
- Set DISTRO_ORACLE_LINUX correspeonding to ol
[1:1.38.4-10.1]
- Fix inspection of partition-less devices
resolves: rhbz#1714747
libssh2
[1.8.0-7.el8_0.1]
- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)
libvirt
[4.5.0-23.3.0.1.el8]
- added librbd1 as dependency (Keshav Sharma)
[4.5.0-23.3.el8]
- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)
qemu-kvm
[2.12.0-64.el8.0.0.2]
- Bump release version to fix the versioning problem (zstream release lower than ystream).
- Resolves: bz#1704545
(CVE-2018-12126 virt:rhel/qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-8.0.0.z])
Fixed packages 96
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | hivex | 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | hivex-devel | 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-bash-completion | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-benchmarking | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-devel | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-gfs2 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-gobject | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-gobject-devel | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-inspect-icons | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-java | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-java-devel | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-javadoc | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-man-pages-ja | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-man-pages-uk | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-rescue | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-rsync | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-tools | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-tools-c | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-winsupport | 0:8.0-2.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libguestfs-xfs | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libiscsi | 0:1.18.0-6.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libiscsi-devel | 0:1.18.0-6.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libiscsi-utils | 0:1.18.0-6.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libssh2 | 0:1.8.0-7.module+el8.0.0.z+5234+5e9073e3.1 |
| Oracle Linux · 8 | libvirt | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-admin | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-bash-completion | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-client | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-config-network | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-config-nwfilter | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-interface | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-network | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-nodedev | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-nwfilter | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-qemu | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-secret | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-core | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-disk | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-gluster | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-iscsi | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-logical | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-mpath | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-rbd | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-scsi | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-daemon-kvm | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-dbus | 0:1.2.0-2.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-devel | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-docs | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-libs | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-lock-sanlock | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | libvirt-nss | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | lua-guestfs | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | nbdkit | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | nbdkit-bash-completion | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | nbdkit-basic-plugins | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | nbdkit-devel | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | nbdkit-example-plugins | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | nbdkit-plugin-gzip | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | nbdkit-plugin-python-common | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | nbdkit-plugin-python3 | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | nbdkit-plugin-vddk | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | nbdkit-plugin-xz | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | netcf | 0:0.2.8-10.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | netcf-devel | 0:0.2.8-10.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | netcf-libs | 0:0.2.8-10.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | perl-hivex | 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | perl-Sys-Guestfs | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | perl-Sys-Virt | 0:4.5.0-4.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | python3-hivex | 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | python3-libguestfs | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | python3-libvirt | 0:4.5.0-1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | qemu-guest-agent | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| Oracle Linux · 8 | qemu-img | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| Oracle Linux · 8 | qemu-kvm | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| Oracle Linux · 8 | qemu-kvm-block-curl | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| Oracle Linux · 8 | qemu-kvm-block-gluster | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| Oracle Linux · 8 | qemu-kvm-block-iscsi | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| Oracle Linux · 8 | qemu-kvm-block-rbd | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| Oracle Linux · 8 | qemu-kvm-block-ssh | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| Oracle Linux · 8 | qemu-kvm-common | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| Oracle Linux · 8 | qemu-kvm-core | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| Oracle Linux · 8 | ruby-hivex | 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | ruby-libguestfs | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | seabios | 0:1.11.1-3.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | seabios-bin | 0:1.11.1-3.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | seavgabios-bin | 0:1.11.1-3.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | sgabios | 1:0.20170427git-2.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | sgabios-bin | 1:0.20170427git-2.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | supermin | 0:5.1.19-8.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | supermin-devel | 0:5.1.19-8.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | virt-dib | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | virt-p2v-maker | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| Oracle Linux · 8 | virt-v2v | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
Vulnerabilities 4
-
High 8.8
It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSav…
-
High 8.8
The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emu…
-
High 8.8
The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x …
-
High 7.8
It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to …