Skip to content
OpenAdvisories
Medium ELSA-2020-4000 2 CVEs

Moderate: libvirt security and bug fix update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Summary

[4.5.0-36]
- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)

[4.5.0-35]
- qemu: dont take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: dont hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: dont hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)

[4.5.0-34]
- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)

Fixed packages 31

ReleasePackageFixed in
Oracle Linux · 7 libvirt 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-admin 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-bash-completion 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-client 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-config-network 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-config-nwfilter 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-interface 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-lxc 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-network 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-nodedev 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-nwfilter 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-qemu 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-secret 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-storage 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-core 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-disk 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-gluster 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-iscsi 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-logical 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-mpath 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-rbd 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-driver-storage-scsi 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-kvm 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-daemon-lxc 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-devel 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-docs 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-libs 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-lock-sanlock 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-login-shell 0:4.5.0-36.el7
Oracle Linux · 7 libvirt-nss 0:4.5.0-36.el7

Vulnerabilities 2