Summary
[15:3.1.0-7.el7]
- qemu-img: Add --target-is-zero to convert (David Edmondson)
[15:3.1.0-6.el7]
- qemu.spec: Remove 'BuildRequires: kernel' (Karl Heubaum) [Orabug: 30858754]
- target/i386: add support for MSR_IA32_TSX_CTRL (Paolo Bonzini) [Orabug: 30652327]
- iscsi: Cap block count from GET LBA STATUS (CVE-2020-1711) (Felipe Franciosi) [Orabug: 30807256] {CVE-2020-1711}
- scsi: lsi: exit infinite loop while executing script (CVE-2019-12068) (Paolo Bonzini) [Orabug: 30351703] {CVE-2019-12068}
- lsi: use enum type for s->waiting (Sven Schnelle) {CVE-2019-12068}
- json: Fix % handling when not interpolating (Christophe Fergeau) [Orabug: 30640103]
- qemu.spec: enable have_curl in spec (Dongli Zhang) [Orabug: 30640103]
- Fix heap overflow in ip_reass on big packet input (Samuel Thibault) [Orabug: 30229916] {CVE-2019-14378}
- Make poll_control_msr default 1 (Mark Kanda)
- Remove redundant check for host support of halt polling (Mark Kanda) [Orabug: 30240121]
- Enable '-Werror' compiler flag (Mark Kanda) [Orabug: 30213025]
- qemu-submodule-init: Add Git submodule init script (Karl Heubaum) [Orabug: 30729551]
Fixed packages 10
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | qemu | 15:3.1.0-7.el7 |
| Oracle Linux · 7 | qemu-block-gluster | 15:3.1.0-7.el7 |
| Oracle Linux · 7 | qemu-block-iscsi | 15:3.1.0-7.el7 |
| Oracle Linux · 7 | qemu-block-rbd | 15:3.1.0-7.el7 |
| Oracle Linux · 7 | qemu-common | 15:3.1.0-7.el7 |
| Oracle Linux · 7 | qemu-img | 15:3.1.0-7.el7 |
| Oracle Linux · 7 | qemu-kvm | 15:3.1.0-7.el7 |
| Oracle Linux · 7 | qemu-kvm-core | 15:3.1.0-7.el7 |
| Oracle Linux · 7 | qemu-system-x86 | 15:3.1.0-7.el7 |
| Oracle Linux · 7 | qemu-system-x86-core | 15:3.1.0-7.el7 |
Vulnerabilities 3
-
High 7.7
An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2…
-
Unscored —
In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-…
-
Unscored —
ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a ca…