Skip to content
OpenAdvisories
Medium ELSA-2021-1762 10 CVEs

Moderate: virt:ol and virt-devel:rhel security, bug fix, and enhancement update (Oracle Linux 8)

Published May 25, 2021 · Updated May 25, 2021

Summary

libvirt
[6.0.0-35.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
- Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)
- Disable parallel builds (Karl Heubaum)

libvirt-dbus
[1.3.0]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

libvirt-python
[6.0.0]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

nbdkit
[1.16.2-4.0.1]
- Replace upstream references within the description tag

[1.16.2]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.16.2]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

perl-Sys-Virt
[6.0.0]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

qemu-kvm
[4.2.0-48.el8]
- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917451]
- Resolves: bz#1917451
(CVE-2020-29443 virt:rhel/qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-8.4.0])

[4.2.0-47.el8]
- kvm-x86-cpu-Enable-AVX512_VP2INTERSECT-cpu-feature.patch [bz#1790620]
- kvm-target-i386-add-fast-short-REP-MOV-support.patch [bz#1790620]
- kvm-x86-cpu-Populate-SVM-CPUID-feature-bits.patch [bz#1790620]
- kvm-i386-Add-the-support-for-AMD-EPYC-3rd-generation-pro.patch [bz#1790620]
- Resolves: bz#1790620
([RFE] AMD Milan - Add KVM/support for EPYC-Milan CPU Model - Slow Train)

[4.2.0-46.el8]
- kvm-redhat-makes-qemu-respect-system-s-crypto-profile.patch [bz#1902960]
- kvm-spapr-Adjust-firmware-path-of-PCI-devices.patch [bz#1912891]
- Resolves: bz#1902960
(QEMU doesnt honour system crypto policies)
- Resolves: bz#1912891
([ppc64le] --disk cdimage.iso,bus=usb fails to boot)

[4.2.0-45.el8]
- kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1919111]
- kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1919111]
- kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1919111]
- Resolves: bz#1919111
(CVE-2020-35517 virt:rhel/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest [rhel-8.4.0])

[4.2.0-44.el8]
- kvm-spapr-Improve-handling-of-fdt-buffer-size.patch [bz#1901837]
- kvm-spapr-Fold-h_cas_compose_response-into-h_client_arch.patch [bz#1901837]
- kvm-spapr-Don-t-use-spapr_drc_needed-in-CAS-code.patch [bz#1901837]
- kvm-spapr-Fix-handling-of-unplugged-devices-during-CAS-a.patch [bz#1901837]
- kvm-spapr-Allow-memory-unplug-to-always-succeed.patch [bz#1901837]
- kvm-spapr-Improve-handling-of-memory-unplug-with-old-gue.patch [bz#1901837]
- kvm-block-Require-aligned-image-size-to-avoid-assertion-.patch [bz#1834281]
- kvm-file-posix-Allow-byte-aligned-O_DIRECT-with-NFS.patch [bz#1834281]
- kvm-block-iscsi-fix-heap-buffer-overflow-in-iscsi_aio_io.patch [bz#1912974]
- Resolves: bz#1834281
(qemu-img convert abort when converting image with unaligned size)
- Resolves: bz#1901837
(Failed to hotunplug pc-dimm device)
- Resolves: bz#1912974
(CVE-2020-11947 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure [rhel-8])

[4.2.0-43.el8]
- kvm-Drop-bogus-IPv6-messages.patch [bz#1918054]
- Resolves: bz#1918054
(CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-8.4.0])

[4.2.0-42.el8]
- kvm-linux-headers-add-vfio-DMA-available-capability.patch [bz#1905391]
- kvm-s390x-pci-Move-header-files-to-include-hw-s390x.patch [bz#1905391]
- kvm-vfio-Create-shared-routine-for-scanning-info-capabil.patch [bz#1905391]
- kvm-vfio-Find-DMA-available-capability.patch [bz#1905391]
- kvm-s390x-pci-Add-routine-to-get-the-vfio-dma-available-.patch [bz#1905391]
- kvm-s390x-pci-Honor-DMA-limits-set-by-vfio.patch [bz#1905391]
- kvm-s390x-fix-build-for-without-default-devices.patch [bz#1905391]
- Resolves: bz#1905391
(RHEL8.4 - s390x/pci: Honor vfio DMA limiting (qemu-kvm))

[4.2.0-41.el8]
- kvm-udev-kvm-check-remove-the-exceeded-subscription-limi.patch [bz#1909244]
- kvm-hw-arm-smmu-common-Factorize-some-code-in-smmu_ptw_6.patch [bz#1843852]
- kvm-hw-arm-smmu-common-Add-IOTLB-helpers.patch [bz#1843852]
- kvm-hw-arm-smmu-Introduce-smmu_get_iotlb_key.patch [bz#1843852]
- kvm-hw-arm-smmu-Introduce-SMMUTLBEntry-for-PTW-and-IOTLB.patch [bz#1843852]
- kvm-hw-arm-smmu-common-Manage-IOTLB-block-entries.patch [bz#1843852]
- kvm-hw-arm-smmuv3-Introduce-smmuv3_s1_range_inval-helper.patch [bz#1843852]
- kvm-hw-arm-smmuv3-Get-prepared-for-range-invalidation.patch [bz#1843852]
- kvm-hw-arm-smmuv3-Fix-potential-integer-overflow-CID-143.patch [bz#1843852]
- kvm-memory-Rename-memory_region_notify_one-to-memory_reg.patch [bz#1843852]
- kvm-memory-Add-IOMMUTLBEvent.patch [bz#1843852]
- kvm-memory-Add-IOMMU_NOTIFIER_DEVIOTLB_UNMAP-IOMMUTLBNot.patch [bz#1843852]
- kvm-intel_iommu-Skip-page-walking-on-device-iotlb-invali.patch [bz#1843852]
- kvm-memory-Skip-bad-range-assertion-if-notifier-is-DEVIO.patch [bz#1843852]
- kvm-memory-clamp-cached-translation-in-case-it-points-to.patch [bz#1904393]
- kvm-hw-ehci-check-return-value-of-usb_packet_map.patch [bz#1898628]
- kvm-hw-net-e1000e-advance-desc_offset-in-case-of-null-de.patch [bz#1903070]
- Resolves: bz#1909244
(Remove KVM guest count and limit info message)
- Resolves: bz#1843852
(qemu core dumped: qemu-kvm: /builddir/build/BUILD/qemu-4.2.0/memory.c:1928: memory_region_notify_one: Assertion entry->iova >= notifier->start && entry_end <= notifier->end failed.)
- Resolves: bz#1904393
(CVE-2020-27821 virt:rhel/qemu-kvm: QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c [rhel-8])
- Resolves: bz#1898628
(CVE-2020-25723 virt:rhel/qemu-kvm: QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c [rhel-8])
- Resolves: bz#1903070
(CVE-2020-25707 CVE-2020-28916 virt:rhel/qemu-kvm: various flaws [rhel-8])

[4.2.0-40.el8]
- kvm-redhat-link-etc-qemu-ga-fsfreeze-hook-to-etc-qemu-kv.patch [bz#1910267]
- kvm-qga-rename-

Fixed packages 110

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.18-20.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 hivex-devel 0:1.3.18-20.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libguestfs 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-bash-completion 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-benchmarking 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-devel 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-gfs2 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-gobject 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-gobject-devel 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-inspect-icons 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-java 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-java-devel 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-javadoc 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-rescue 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-rsync 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-tools 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-tools-c 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libguestfs-winsupport 0:8.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libguestfs-xfs 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libnbd 0:1.2.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libnbd-devel 0:1.2.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libvirt 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-admin 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-bash-completion 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-client 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-config-network 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-interface 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-network 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-secret 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-storage 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi-direct 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-daemon-kvm 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libvirt-devel 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-docs 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-libs 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-lock-sanlock 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 libvirt-nss 0:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
Oracle Linux · 8 lua-guestfs 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 nbdfuse 0:1.2.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-bash-completion 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-basic-filters 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-basic-plugins 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-curl-plugin 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-devel 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-example-plugins 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-gzip-plugin 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-linuxdisk-plugin 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-python-plugin 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-server 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-ssh-plugin 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-vddk-plugin 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-xz-filter 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 ocaml-hivex 0:1.3.18-20.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 ocaml-hivex-devel 0:1.3.18-20.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 ocaml-libguestfs 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 ocaml-libguestfs-devel 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 ocaml-libnbd 0:1.2.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 ocaml-libnbd-devel 0:1.2.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 perl-hivex 0:1.3.18-20.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 perl-Sys-Guestfs 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 perl-Sys-Virt 0:6.0.0-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 python3-hivex 0:1.3.18-20.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 python3-libguestfs 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 python3-libnbd 0:1.2.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 python3-libvirt 0:6.0.0-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 qemu-guest-agent 15:4.2.0-48.module+el8.4.0+20158+f6690737
Oracle Linux · 8 qemu-img 15:4.2.0-48.module+el8.4.0+20158+f6690737
Oracle Linux · 8 qemu-kvm 15:4.2.0-48.module+el8.4.0+20158+f6690737
Oracle Linux · 8 qemu-kvm-block-curl 15:4.2.0-48.module+el8.4.0+20158+f6690737
Oracle Linux · 8 qemu-kvm-block-gluster 15:4.2.0-48.module+el8.4.0+20158+f6690737
Oracle Linux · 8 qemu-kvm-block-iscsi 15:4.2.0-48.module+el8.4.0+20158+f6690737
Oracle Linux · 8 qemu-kvm-block-rbd 15:4.2.0-48.module+el8.4.0+20158+f6690737
Oracle Linux · 8 qemu-kvm-block-ssh 15:4.2.0-48.module+el8.4.0+20158+f6690737
Oracle Linux · 8 qemu-kvm-common 15:4.2.0-48.module+el8.4.0+20158+f6690737
Oracle Linux · 8 qemu-kvm-core 15:4.2.0-48.module+el8.4.0+20158+f6690737
Oracle Linux · 8 qemu-kvm-tests 15:4.2.0-48.module+el8.4.0+20158+f6690737
Oracle Linux · 8 ruby-hivex 0:1.3.18-20.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 ruby-libguestfs 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 seabios 0:1.13.0-2.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 seabios-bin 0:1.13.0-2.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 seavgabios-bin 0:1.13.0-2.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 supermin 0:5.1.19-10.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 supermin-devel 0:5.1.19-10.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 virt-dib 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
Oracle Linux · 8 virt-v2v 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712

Vulnerabilities 10