Summary
hivex
[1.3.18-21]
- Bounds check for block exceeding page length (CVE-2021-3504)
resolves: rhbz#1950501
libvirt
[6.0.0-35.1.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
- Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)
- Disable parallel builds (Karl Heubaum)
[6.0.0-35.1.el8]
- network: make it safe to call networkSetupPrivateChains() multiple times (rhbz#1958301)
- network: force re-creation of iptables private chains on firewalld restart (rhbz#1958301)
qemu-kvm
[4.2.0-48.el8_4.3]
- kvm-net-introduce-qemu_receive_packet.patch [bz#1932917]
- kvm-e1000-switch-to-use-qemu_receive_packet-for-loopback.patch [bz#1932917]
- kvm-dp8393x-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
- kvm-sungem-switch-to-use-qemu_receive_packet-for-loopbac.patch [bz#1932917]
- kvm-tx_pkt-switch-to-use-qemu_receive_packet_iov-for-loo.patch [bz#1932917]
- kvm-rtl8139-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
- kvm-pcnet-switch-to-use-qemu_receive_packet-for-loopback.patch [bz#1932917]
- kvm-cadence_gem-switch-to-use-qemu_receive_packet-for-lo.patch [bz#1932917]
- kvm-lan9118-switch-to-use-qemu_receive_packet-for-loopba.patch [bz#1932917]
- Resolves: bz#1932917
(CVE-2021-3416 virt:rhel/qemu-kvm: QEMU: net: infinite loop in loopback mode may lead to stack overflow [rhel-8.4.z])
[4.2.0-48.el8_4.2]
- kvm-pc-bios-s390-ccw-fix-off-by-one-error.patch [bz#1975679]
- kvm-pc-bios-s390-ccw-break-loop-if-a-null-block-number-i.patch [bz#1975679]
- kvm-pc-bios-s390-ccw-don-t-try-to-read-the-next-block-if.patch [bz#1975679]
- Resolves: bz#1975679
(RHEL8.4 Nightly[0322] - KVM guest fails to find zipl boot menu index (qemu-kvm) [rhel-8.4.0.z])
[4.2.0-48.el8_4]
- kvm-net-remove-an-assert-call-in-eth_get_gso_type.patch [bz#1939494]
- kvm-libqos-usb-hcd-ehci-use-32-bit-write-for-config-regi.patch [bz#1944621]
- kvm-libqos-pci-pc-use-32-bit-write-for-EJ-register.patch [bz#1944621]
- kvm-memory-Revert-memory-accept-mismatching-sizes-in-mem.patch [bz#1944621]
- kvm-acpi-accept-byte-and-word-access-to-core-ACPI-regist.patch [bz#1944621]
- kvm-xhci-fix-valid.max_access_size-to-access-address-reg.patch [bz#1944621]
- kvm-softmmu-memory-Log-invalid-memory-accesses.patch [bz#1944621]
- kvm-hw-intc-arm_gic-Fix-interrupt-ID-in-GICD_SGIR-regist.patch [bz#1952986]
- Resolves: bz#1939494
(CVE-2020-27617 virt:rhel/qemu-kvm: QEMU: net: an assert failure via eth_get_gso_type [rhel-8.4.0.z])
- Resolves: bz#1944621
(CVE-2020-13754 virt:rhel/qemu-kvm: QEMU: msix: OOB access during mmio operations may lead to DoS [rhel-8.4.0.z])
- Resolves: bz#1952986
(CVE-2021-20221 virt:rhel/qemu-kvm: qemu: out-of-bound heap buffer access via an interrupt ID field [rhel-8.4.0.z])
Fixed packages 110
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | hivex | 0:1.3.18-21.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | hivex-devel | 0:1.3.18-21.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libguestfs | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-bash-completion | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-benchmarking | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-devel | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-gfs2 | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-gobject | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-gobject-devel | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-inspect-icons | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-java | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-java-devel | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-javadoc | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-man-pages-ja | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-man-pages-uk | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-rescue | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-rsync | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-tools | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-tools-c | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libguestfs-winsupport | 0:8.2-1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | libguestfs-xfs | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | libiscsi | 0:1.18.0-8.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | libiscsi-devel | 0:1.18.0-8.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | libiscsi-utils | 0:1.18.0-8.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | libnbd | 0:1.2.2-1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | libnbd-devel | 0:1.2.2-1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | libvirt | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-admin | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-bash-completion | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-client | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-config-network | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-config-nwfilter | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-interface | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-network | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-nodedev | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-nwfilter | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-qemu | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-secret | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-storage | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-core | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-disk | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-gluster | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-iscsi | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-iscsi-direct | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-logical | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-mpath | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-rbd | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-scsi | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-daemon-kvm | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-dbus | 0:1.3.0-2.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | libvirt-devel | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-docs | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-libs | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-lock-sanlock | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | libvirt-nss | 0:6.0.0-35.1.0.1.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | lua-guestfs | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | nbdfuse | 0:1.2.2-1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-bash-completion | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-basic-filters | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-basic-plugins | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-curl-plugin | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-devel | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-example-plugins | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-gzip-plugin | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-linuxdisk-plugin | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-python-plugin | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-server | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-ssh-plugin | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-vddk-plugin | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | nbdkit-xz-filter | 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | netcf | 0:0.2.8-12.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | netcf-devel | 0:0.2.8-12.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | netcf-libs | 0:0.2.8-12.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | ocaml-hivex | 0:1.3.18-21.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | ocaml-hivex-devel | 0:1.3.18-21.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | ocaml-libguestfs | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | ocaml-libguestfs-devel | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | ocaml-libnbd | 0:1.2.2-1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | ocaml-libnbd-devel | 0:1.2.2-1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | perl-hivex | 0:1.3.18-21.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | perl-Sys-Guestfs | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | perl-Sys-Virt | 0:6.0.0-1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | python3-hivex | 0:1.3.18-21.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | python3-libguestfs | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | python3-libnbd | 0:1.2.2-1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | python3-libvirt | 0:6.0.0-1.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | qemu-guest-agent | 15:4.2.0-48.module+el8.4.0+20285+126f2e4b.3 |
| Oracle Linux · 8 | qemu-img | 15:4.2.0-48.module+el8.4.0+20285+126f2e4b.3 |
| Oracle Linux · 8 | qemu-kvm | 15:4.2.0-48.module+el8.4.0+20285+126f2e4b.3 |
| Oracle Linux · 8 | qemu-kvm-block-curl | 15:4.2.0-48.module+el8.4.0+20285+126f2e4b.3 |
| Oracle Linux · 8 | qemu-kvm-block-gluster | 15:4.2.0-48.module+el8.4.0+20285+126f2e4b.3 |
| Oracle Linux · 8 | qemu-kvm-block-iscsi | 15:4.2.0-48.module+el8.4.0+20285+126f2e4b.3 |
| Oracle Linux · 8 | qemu-kvm-block-rbd | 15:4.2.0-48.module+el8.4.0+20285+126f2e4b.3 |
| Oracle Linux · 8 | qemu-kvm-block-ssh | 15:4.2.0-48.module+el8.4.0+20285+126f2e4b.3 |
| Oracle Linux · 8 | qemu-kvm-common | 15:4.2.0-48.module+el8.4.0+20285+126f2e4b.3 |
| Oracle Linux · 8 | qemu-kvm-core | 15:4.2.0-48.module+el8.4.0+20285+126f2e4b.3 |
| Oracle Linux · 8 | qemu-kvm-tests | 15:4.2.0-48.module+el8.4.0+20285+126f2e4b.3 |
| Oracle Linux · 8 | ruby-hivex | 0:1.3.18-21.module+el8.4.0+20285+126f2e4b |
| Oracle Linux · 8 | ruby-libguestfs | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | seabios | 0:1.13.0-2.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | seabios-bin | 0:1.13.0-2.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | seavgabios-bin | 0:1.13.0-2.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | sgabios | 1:0.20170427git-3.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | sgabios-bin | 1:0.20170427git-3.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | supermin | 0:5.1.19-10.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | supermin-devel | 0:5.1.19-10.module+el8.3.0+7860+a7792d29 |
| Oracle Linux · 8 | virt-dib | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
| Oracle Linux · 8 | virt-v2v | 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 |
Vulnerabilities 5
-
Unscored —
hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x …
-
Unscored —
eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash th…
-
Unscored —
An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and …
-
Unscored —
A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and inc…
-
Unscored —
A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the …