Skip to content
OpenAdvisories
Medium ELSA-2020-0279 1 CVE

Moderate: virt:ol security update (Oracle Linux 8)

Published Feb 17, 2020 · Updated Feb 17, 2020

Summary

hivex
libguestfs
[1:1.38.4-14.0.1]
- Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
- Set DISTRO_ORACLE_LINUX correspeonding to ol

[1:1.38.4-14]
- v2v: use -T as argument of scp when copying vmx files via ssh
resolves: rhbz#1738886

* Fri Jun 28 2019 Danilo de Paula <ddepaula@redhat.com>
- Rebuild all virt packages to fix RHEL's upgrade path
- Resolves: rhbz#1695587
(Ensure modular RPM upgrade path)

[1:1.38.4-12]
- v2v: update nbdkit information in documentation
resolves: rhbz#1651115
- v2v: use proper SELinux label for nbdkit sockets
resolves: rhbz#1717088

libguestfs-winsupport
[8.0-4]
- Rebuild all virt packages to fix RHEL's upgrade path
- Resolves: rhbz#1695587
(Ensure modular RPM upgrade path)

libiscsi
[1.18.0-8]
- Rebuild all virt packages to fix RHEL's upgrade path
- Resolves: rhbz#1695587
(Ensure modular RPM upgrade path)

[1.18.0-7.el8]
- libiscsi-redhat-Remove-disable-werror-from-spec-file.patch [bz#1581025]
- Resolves: bz#1581025
(Remove --disable-werror from spec file)

[-]
- libiscsi-fix-connection-to-LUN-with-IPv6-address.patch [bz#1597942]
- Resolves: bz#1597942
(Qemu-kvm fails to connect to iscsi LUN by IPV6 address)

[1.18.0-5.el8]
- libiscsi-iser_rcv_completion-unify-error-handling.patch [bz#1634541]
- libiscsi-iser-fix-posting-of-receive-descriptors.patch [bz#1634541]
- libiscsi-sync-remove-unnecessary-checks.patch [bz#1634541]
- libiscsi-do-not-warn-for-strncpy.patch [bz#1634541]
- libiscsi-avoid-fallthrough.patch [bz#1634541]
- libiscsi-avoid-truncation-when-logging-message-that-includes-.patch [bz#1634541]
- Resolves: bz#1634541
(Fix important coverity issues (libiscsi))

[1.18.0-4.el8]
- Fixed a build issue with the latest rdma-core

[1.18.0-2]
- Fix rdma deps and don't restrict archs
- Add --disable-werror to fix gcc8 build (bz #1556044)
- Spec file cleanups (bz #1483290)

[1.18.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.18.0-1]
- Rebased to version 1.18.0
- Added patch to fix gcc7 warnings

[1.15.0-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.15.0-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.15.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.15.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.15.0-1]
- Rebased to version 1.15.0
- Removed patch 20 as it has been upstreamed
- Disabled patch 12 as need for revised one is in question
- Updated patch 13 to current tree
- New tool iscsi-perf

[1.11.0-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.11.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.11.0-1]
- Rebased to version 1.11.0
- Most patches removed
- New tool iscsi-swp + manpages

[1.9.0-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.9.0-5]
- Rebuild for new libgcrypt

[1.9.0-4]
- Cleaned up patches 18/19 to match upstream more closely

[1.9.0-3]
- Improved patch 18 to cover write side too

[1.9.0-2]
- Add patch 18 to fix QEMU's scsi-generic mode

[1.9.0-1]
- Rebase to 1.9.0
- Cherry-pick selected patches from upstream

[1.7.0-6]
- Add patch 5 to silence strict aliasing warnings

[1.7.0-5]
- Add patch 4 to enable installing of iscsi-test binary

[1.7.0-4]
- Add patch 2 for FIPS mode
- Add patch 3 to avoid segmentation fault on iscsi-tools

[1.7.0-3]
- Correct license for libiscsi-utils, prefer %global to %define
- Add Requires
- Remove percent-clean section

[1.7.0-2]
- Use percent-config for ld.so.conf.d file.

[1.7.0-1]
- Initial version (bug 914752)

libvirt
[4.5.0-35.2.0.1.el8]
- added librbd1 as dependency (Keshav Sharma)

[4.5.0-35.2.el8]
- cpu_map: Add TAA_NO bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135)
- cpu_map: Add TSX_CTRL bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135)

[4.5.0-35.1.el8]
- cpu_conf: Pass policy to CPU feature filtering callbacks (rhbz#1775133, rhbz#1775134, rhbz#1775137)
- qemuxml2*test: Add tests for Icelake-Server, -pconfig (rhbz#1775133, rhbz#1775134, rhbz#1775137)
- qemu: Drop disabled CPU features unknown to QEMU (rhbz#1775133, rhbz#1775134, rhbz#1775137)
- cputest: Add data for Ice Lake Server CPU (rhbz#1775133, rhbz#1775134, rhbz#1775137)
- cpu_map: Drop pconfig from Icelake-Server CPU model (rhbz#1775133, rhbz#1775134, rhbz#1775137)
- qemu: Fix NULL ptr dereference caused by qemuDomainDefFormatBufInternal (rhbz#1775133, rhbz#1775134, rhbz#1775137)

[4.5.0-35]
- vircgroupv2: fix setting cpu.max period (rhbz#1749227)

[4.5.0-34]
- vircgroupv2: fix abort in VIR_AUTOFREE (rhbz#1747440)

[4.5.0-33]
- vircgroupv2: fix parsing multiple values in single file (rhbz#1741825)
- vircgroupv2: fix virCgroupV2GetCpuCfsQuota for 'max' value (rhbz#1741837)

[4.5.0-32]
- virDomainObjListAddLocked: Produce better error message than 'Duplicate key' (rhbz#1737790)
- virdbus: Grab a ref as long as the while loop is executed (rhbz#1741900)

[4.5.0-31]
- virDomainObjListAddLocked: fix double free (rhbz#1728530)
- docs: schemas: Decouple the virtio options from each other (rhbz#1729675)
- util: command: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
- util: command: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1721434)
- util: netdevopenvswitch: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434)
- util: virnetdevopenvswitch: Drop an unused variable @ovs_timeout (rhbz#1721434)
- util: netdevopenvswitch: use VIR_AUTOPTR for aggregate types (rhbz#1721434)
- util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1721434)
- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1721434)
- test: Introduce virnetdevopenvswitchtest (rhbz#1721434)
- vircommand: Separate mass FD closing into a function (rhbz#1721434)
- virCommand: use procfs to learn opened FDs (rhbz#1721434)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1721434)
- util: Avoid possible err

Fixed packages 100

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 hivex-devel 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-bash-completion 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-benchmarking 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-devel 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-gfs2 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-gobject 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-gobject-devel 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-inspect-icons 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-java 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-java-devel 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-javadoc 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-rescue 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-rsync 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-tools 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-tools-c 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-winsupport 0:8.0-4.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libguestfs-xfs 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libvirt 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-admin 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-bash-completion 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-client 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-config-network 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-interface 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-network 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-secret 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-storage 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-daemon-kvm 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-dbus 0:1.2.0-3.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 libvirt-devel 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-docs 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-libs 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-lock-sanlock 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 libvirt-nss 0:4.5.0-35.2.0.1.module+el8.1.0+5470+cad7d629
Oracle Linux · 8 lua-guestfs 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 nbdkit 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 nbdkit-bash-completion 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 nbdkit-basic-plugins 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 nbdkit-devel 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 nbdkit-example-plugins 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 nbdkit-plugin-gzip 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 nbdkit-plugin-python-common 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 nbdkit-plugin-python3 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 nbdkit-plugin-vddk 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 nbdkit-plugin-xz 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 ocaml-hivex 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 ocaml-hivex-devel 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 ocaml-libguestfs 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 ocaml-libguestfs-devel 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 perl-hivex 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 perl-Sys-Guestfs 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 perl-Sys-Virt 0:4.5.0-5.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 python3-hivex 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 python3-libguestfs 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 python3-libvirt 0:4.5.0-2.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 qemu-guest-agent 15:2.12.0-88.0.1.module+el8.1.0+5470+cad7d629.2
Oracle Linux · 8 qemu-img 15:2.12.0-88.0.1.module+el8.1.0+5470+cad7d629.2
Oracle Linux · 8 qemu-kvm 15:2.12.0-88.0.1.module+el8.1.0+5470+cad7d629.2
Oracle Linux · 8 qemu-kvm-block-curl 15:2.12.0-88.0.1.module+el8.1.0+5470+cad7d629.2
Oracle Linux · 8 qemu-kvm-block-gluster 15:2.12.0-88.0.1.module+el8.1.0+5470+cad7d629.2
Oracle Linux · 8 qemu-kvm-block-iscsi 15:2.12.0-88.0.1.module+el8.1.0+5470+cad7d629.2
Oracle Linux · 8 qemu-kvm-block-rbd 15:2.12.0-88.0.1.module+el8.1.0+5470+cad7d629.2
Oracle Linux · 8 qemu-kvm-block-ssh 15:2.12.0-88.0.1.module+el8.1.0+5470+cad7d629.2
Oracle Linux · 8 qemu-kvm-common 15:2.12.0-88.0.1.module+el8.1.0+5470+cad7d629.2
Oracle Linux · 8 qemu-kvm-core 15:2.12.0-88.0.1.module+el8.1.0+5470+cad7d629.2
Oracle Linux · 8 qemu-kvm-tests 15:2.12.0-88.0.1.module+el8.1.0+5470+cad7d629.2
Oracle Linux · 8 ruby-hivex 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 ruby-libguestfs 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 seabios 0:1.11.1-4.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 seabios-bin 0:1.11.1-4.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 seavgabios-bin 0:1.11.1-4.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 supermin 0:5.1.19-9.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 supermin-devel 0:5.1.19-9.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 virt-dib 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 virt-p2v-maker 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
Oracle Linux · 8 virt-v2v 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7

Vulnerabilities 1