Skip to content
OpenAdvisories
Medium ELSA-2021-4191 7 CVEs

Moderate: virt:ol and virt-devel:ol security, bug fix, and enhancement update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Summary

libguestfs-winsupport
[8.2]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

libguestfs
[1.40.2-28.0.1]
- Replace upstream references from description tag
- Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
- Set DISTRO_ORACLE_LINUX correspeonding to ol

[1:1.40.2-28]
- daemon: lvm: Use lvcreate --yes to avoid interactive prompts
resolves: rhbz#1933640

libnbd
[1.2.2]
- Resolves: bz#1844296
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.2.2-1]
- New stable release 1.2.2.

libvirt-dbus
[1.3.0]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

libvirt-python
[6.0.0]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

libvirt
[6.0.0-37.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
- Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)
- Disable parallel builds (Karl Heubaum)

[6.0.0-37]
- security: fix SELinux label generation logic (CVE-2021-3631)
- storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath (CVE-2021-3667)

[6.0.0-36]
- network: make it safe to call networkSetupPrivateChains() multiple times (rhbz#1942805)
- network: force re-creation of iptables private chains on firewalld restart (rhbz#1942805)
- hostdev: Update mdev pointer reference after checking device type (rhbz#1940449)
- hostdev: mdev: Lookup mdevs by sysfs path rather than mdev struct (rhbz#1940449)
- qemu_firmware: dont error out for unknown firmware features (rhbz#1961562)
- docs: improve description of secure attribute for loader element (rhbz#1929357)
- conf: introduce virDomainDefParseBootInitOptions (rhbz#1929357)
- conf: introduce virDomainDefParseBootKernelOptions (rhbz#1929357)
- conf: introduce virDomainDefParseBootFirmwareOptions (rhbz#1929357)
- conf: introduce virDomainDefParseBootLoaderOptions (rhbz#1929357)
- conf: introduce virDomainDefParseBootAcpiOptions (rhbz#1929357)
- conf: use switch in virDomainDefParseBootOptions (rhbz#1929357)
- conf: introduce support for firmware auto-selection feature filtering (rhbz#1929357)
- qemu: implement support for firmware auto-selection feature filtering (rhbz#1929357)
- domain_conf: Dont leak def->os.firmwareFeatures (rhbz#1929357)
- conf: remove duplicated firmware type attribute (rhbz#1929357)

nbdkit
[1.16.2-4.0.1]
- Replace upstream references within the description tag

[1.16.2]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.16.2]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

perl-Sys-Virt
[6.0.0]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

qemu-kvm
[4.2.0-59]
- kvm-scsi-make-io_timeout-configurable.patch [bz#1994041]
- Resolves: bz#1994041
(qemu-kvm scsi: change default passthrough timeout to non-infinite)

[4.2.0-58.el8]
- kvm-virtiofsd-Disable-remote-posix-locks-by-default.patch [bz#1967496]
- kvm-virtiofsd-Fix-the-help-message-of-posix-lock.patch [bz#1967496]
- Resolves: bz#1967496
([virtio-fs] nfs/xfstest generic/089 generic/478 generic/632 failed)

[4.2.0-57]
- kvm-aio-wait-delegate-polling-of-main-AioContext-if-BQL-.patch [bz#1969848]
- kvm-async-use-explicit-memory-barriers.patch [bz#1969848]
- Resolves: bz#1969848
(qemu-img convert hangs on aarch64)

[4.2.0-56]
- kvm-glib-compat-add-g_unix_get_passwd_entry_qemu.patch [bz#1967716]
- kvm-qga-add-ssh-add-remove-authorized-keys.patch [bz#1967716]
- kvm-qga-add-reset-argument-to-ssh-add-authorized-keys.patch [bz#1967716]
- kvm-qga-add-ssh-get-authorized-keys.patch [bz#1967716]
- kvm-Add-mtod_check.patch [bz#1970819 bz#1970835 bz#1970843 bz#1970853]
- kvm-bootp-limit-vendor-specific-area-to-input-packet-mem.patch [bz#1970819 bz#1970835 bz#1970843 bz#1970853]
- kvm-bootp-check-bootp_input-buffer-size.patch [bz#1970819]
- kvm-upd6-check-udp6_input-buffer-size.patch [bz#1970835]
- kvm-tftp-check-tftp_input-buffer-size.patch [bz#1970843]
- kvm-tftp-introduce-a-header-structure.patch [bz#1970819 bz#1970835 bz#1970843 bz#1970853]
- kvm-udp-check-upd_input-buffer-size.patch [bz#1970853]
- kvm-Fix-DHCP-broken-in-libslirp-v4.6.0.patch [bz#1970819 bz#1970835 bz#1970843 bz#1970853]
- kvm-net-check-if-the-file-descriptor-is-valid-before-usi.patch [bz#1982134]
- kvm-net-detect-errors-from-probing-vnet-hdr-flag-for-TAP.patch [bz#1982134]
- Resolves: bz#1967716
(RFE: rebuild guest agent to include public ssh injection api support)
- Resolves: bz#1970819
(CVE-2021-3592 virt:rhel/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) [rhel-8])
- Resolves: bz#1970835
(CVE-2021-3593 virt:rhel/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) [rhel-8])
- Resolves: bz#1970843
(CVE-2021-3595 virt:rhel/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) [rhel-8])
- Resolves: bz#1970853
(CVE-2021-3594 virt:rhel/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) [rhel-8])
- Resolves: bz#1982134
(QEMU core dump while booting guest with a non-exist fd on tap)

seabios
[1.13.0]
- Resolves: bz#1844296
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.13.0]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

supermin
[5.1.19]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

Fixed packages 110

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.18-21.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 hivex-devel 0:1.3.18-21.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libguestfs 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-bash-completion 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-benchmarking 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-devel 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-gfs2 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-gobject 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-gobject-devel 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-inspect-icons 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-java 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-java-devel 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-javadoc 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-rescue 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-rsync 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-tools 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-tools-c 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libguestfs-winsupport 0:8.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libguestfs-xfs 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libnbd 0:1.2.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libnbd-devel 0:1.2.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libvirt 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-admin 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-bash-completion 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-client 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-config-network 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-interface 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-network 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-secret 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-storage 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi-direct 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-daemon-kvm 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 libvirt-devel 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-docs 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-libs 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-lock-sanlock 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 libvirt-nss 0:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 lua-guestfs 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 nbdfuse 0:1.2.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-bash-completion 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-basic-filters 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-basic-plugins 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-curl-plugin 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-devel 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-example-plugins 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-gzip-plugin 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-linuxdisk-plugin 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-python-plugin 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-server 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-ssh-plugin 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-vddk-plugin 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 nbdkit-xz-filter 0:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 ocaml-hivex 0:1.3.18-21.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 ocaml-hivex-devel 0:1.3.18-21.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 ocaml-libguestfs 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 ocaml-libguestfs-devel 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 ocaml-libnbd 0:1.2.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 ocaml-libnbd-devel 0:1.2.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 perl-hivex 0:1.3.18-21.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 perl-Sys-Guestfs 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 perl-Sys-Virt 0:6.0.0-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 python3-hivex 0:1.3.18-21.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 python3-libguestfs 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 python3-libnbd 0:1.2.2-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 python3-libvirt 0:6.0.0-1.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 qemu-guest-agent 15:4.2.0-59.module+el8.5.0+20410+46b2d321
Oracle Linux · 8 qemu-img 15:4.2.0-59.module+el8.5.0+20410+46b2d321
Oracle Linux · 8 qemu-kvm 15:4.2.0-59.module+el8.5.0+20410+46b2d321
Oracle Linux · 8 qemu-kvm-block-curl 15:4.2.0-59.module+el8.5.0+20410+46b2d321
Oracle Linux · 8 qemu-kvm-block-gluster 15:4.2.0-59.module+el8.5.0+20410+46b2d321
Oracle Linux · 8 qemu-kvm-block-iscsi 15:4.2.0-59.module+el8.5.0+20410+46b2d321
Oracle Linux · 8 qemu-kvm-block-rbd 15:4.2.0-59.module+el8.5.0+20410+46b2d321
Oracle Linux · 8 qemu-kvm-block-ssh 15:4.2.0-59.module+el8.5.0+20410+46b2d321
Oracle Linux · 8 qemu-kvm-common 15:4.2.0-59.module+el8.5.0+20410+46b2d321
Oracle Linux · 8 qemu-kvm-core 15:4.2.0-59.module+el8.5.0+20410+46b2d321
Oracle Linux · 8 qemu-kvm-tests 15:4.2.0-59.module+el8.5.0+20410+46b2d321
Oracle Linux · 8 ruby-hivex 0:1.3.18-21.module+el8.5.0+20365+3abb8f5b
Oracle Linux · 8 ruby-libguestfs 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 seabios 0:1.13.0-2.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 seabios-bin 0:1.13.0-2.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 seavgabios-bin 0:1.13.0-2.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 supermin 0:5.1.19-10.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 supermin-devel 0:5.1.19-10.module+el8.3.0+7860+a7792d29
Oracle Linux · 8 virt-dib 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
Oracle Linux · 8 virt-v2v 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b

Vulnerabilities 7