Skip to content
OpenAdvisories
High ELSA-2021-9335 2 CVEs

Important: qemu security update (Oracle Linux 7)

Published Jun 28, 2021 · Updated Jun 28, 2021

Summary

[15:4.2.1-10.el7]
- e1000: fail early for evil descriptor (Jason Wang) [Orabug: 32560552] {CVE-2021-20257}
- Document CVE-2020-27661 as fixed (Mark Kanda) [Orabug: 32960200] {CVE-2020-27661}
- block: Avoid stale pointer dereference in blk_get_aio_context() (Greg Kurz)
- block: Fix blk->in_flight during blk_wait_while_drained() (Kevin Wolf)
- block: Increase BB.in_flight for coroutine and sync interfaces (Kevin Wolf)
- block-backend: Reorder flush/pdiscard function definitions (Kevin Wolf)

Fixed packages 13

ReleasePackageFixed in
Oracle Linux · 7 ivshmem-tools 15:4.2.1-10.el7
Oracle Linux · 7 qemu 15:4.2.1-10.el7
Oracle Linux · 7 qemu-block-gluster 15:4.2.1-10.el7
Oracle Linux · 7 qemu-block-iscsi 15:4.2.1-10.el7
Oracle Linux · 7 qemu-block-rbd 15:4.2.1-10.el7
Oracle Linux · 7 qemu-common 15:4.2.1-10.el7
Oracle Linux · 7 qemu-img 15:4.2.1-10.el7
Oracle Linux · 7 qemu-kvm 15:4.2.1-10.el7
Oracle Linux · 7 qemu-kvm-core 15:4.2.1-10.el7
Oracle Linux · 7 qemu-system-aarch64 15:4.2.1-10.el7
Oracle Linux · 7 qemu-system-aarch64-core 15:4.2.1-10.el7
Oracle Linux · 7 qemu-system-x86 15:4.2.1-10.el7
Oracle Linux · 7 qemu-system-x86-core 15:4.2.1-10.el7

Vulnerabilities 2