Skip to content
OpenAdvisories
High ELSA-2019-1580 4 CVEs

Important: virt:ol security update (Oracle Linux 8)

Published Jul 30, 2019 · Updated Jul 30, 2019

Summary

libguestfs
[1:1.38.4-10.1.0.1]
- Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
- Set DISTRO_ORACLE_LINUX correspeonding to ol

[1:1.38.4-10.1]
- Fix inspection of partition-less devices
resolves: rhbz#1714747

libssh2
[1.8.0-7.el8_0.1]
- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)

libvirt
[4.5.0-23.3.0.1.el8]
- added librbd1 as dependency (Keshav Sharma)

[4.5.0-23.3.el8]
- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)

qemu-kvm
[2.12.0-64.el8.0.0.2]
- Bump release version to fix the versioning problem (zstream release lower than ystream).
- Resolves: bz#1704545
(CVE-2018-12126 virt:rhel/qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling [rhel-8.0.0.z])

Fixed packages 96

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 hivex-devel 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-bash-completion 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-benchmarking 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-devel 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-gfs2 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-gobject 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-gobject-devel 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-inspect-icons 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-java 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-java-devel 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-javadoc 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-rescue 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-rsync 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-tools 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-tools-c 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-winsupport 0:8.0-2.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libguestfs-xfs 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libiscsi 0:1.18.0-6.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libiscsi-devel 0:1.18.0-6.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libiscsi-utils 0:1.18.0-6.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libssh2 0:1.8.0-7.module+el8.0.0.z+5234+5e9073e3.1
Oracle Linux · 8 libvirt 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-admin 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-bash-completion 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-client 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-config-network 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-interface 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-network 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-secret 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-storage 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-daemon-kvm 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-dbus 0:1.2.0-2.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-devel 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-docs 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-libs 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-lock-sanlock 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 libvirt-nss 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 lua-guestfs 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 nbdkit 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 nbdkit-bash-completion 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 nbdkit-basic-plugins 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 nbdkit-devel 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 nbdkit-example-plugins 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 nbdkit-plugin-gzip 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 nbdkit-plugin-python-common 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 nbdkit-plugin-python3 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 nbdkit-plugin-vddk 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 nbdkit-plugin-xz 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 netcf 0:0.2.8-10.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 netcf-devel 0:0.2.8-10.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 netcf-libs 0:0.2.8-10.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 perl-hivex 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 perl-Sys-Guestfs 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 perl-Sys-Virt 0:4.5.0-4.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 python3-hivex 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 python3-libguestfs 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 python3-libvirt 0:4.5.0-1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 qemu-guest-agent 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2
Oracle Linux · 8 qemu-img 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2
Oracle Linux · 8 qemu-kvm 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2
Oracle Linux · 8 qemu-kvm-block-curl 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2
Oracle Linux · 8 qemu-kvm-block-gluster 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2
Oracle Linux · 8 qemu-kvm-block-iscsi 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2
Oracle Linux · 8 qemu-kvm-block-rbd 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2
Oracle Linux · 8 qemu-kvm-block-ssh 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2
Oracle Linux · 8 qemu-kvm-common 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2
Oracle Linux · 8 qemu-kvm-core 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2
Oracle Linux · 8 ruby-hivex 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 ruby-libguestfs 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 seabios 0:1.11.1-3.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 seabios-bin 0:1.11.1-3.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 seavgabios-bin 0:1.11.1-3.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 sgabios 1:0.20170427git-2.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 sgabios-bin 1:0.20170427git-2.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 supermin 0:5.1.19-8.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 supermin-devel 0:5.1.19-8.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 virt-dib 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 virt-p2v-maker 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3
Oracle Linux · 8 virt-v2v 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3

Vulnerabilities 4