Summary
[15:4.2.1-10.el7]
- e1000: fail early for evil descriptor (Jason Wang) [Orabug: 32560552] {CVE-2021-20257}
- Document CVE-2020-27661 as fixed (Mark Kanda) [Orabug: 32960200] {CVE-2020-27661}
- block: Avoid stale pointer dereference in blk_get_aio_context() (Greg Kurz)
- block: Fix blk->in_flight during blk_wait_while_drained() (Kevin Wolf)
- block: Increase BB.in_flight for coroutine and sync interfaces (Kevin Wolf)
- block-backend: Reorder flush/pdiscard function definitions (Kevin Wolf)
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ivshmem-tools | 15:4.2.1-10.el7 |
| Oracle Linux · 7 | qemu | 15:4.2.1-10.el7 |
| Oracle Linux · 7 | qemu-block-gluster | 15:4.2.1-10.el7 |
| Oracle Linux · 7 | qemu-block-iscsi | 15:4.2.1-10.el7 |
| Oracle Linux · 7 | qemu-block-rbd | 15:4.2.1-10.el7 |
| Oracle Linux · 7 | qemu-common | 15:4.2.1-10.el7 |
| Oracle Linux · 7 | qemu-img | 15:4.2.1-10.el7 |
| Oracle Linux · 7 | qemu-kvm | 15:4.2.1-10.el7 |
| Oracle Linux · 7 | qemu-kvm-core | 15:4.2.1-10.el7 |
| Oracle Linux · 7 | qemu-system-aarch64 | 15:4.2.1-10.el7 |
| Oracle Linux · 7 | qemu-system-aarch64-core | 15:4.2.1-10.el7 |
| Oracle Linux · 7 | qemu-system-x86 | 15:4.2.1-10.el7 |
| Oracle Linux · 7 | qemu-system-x86-core | 15:4.2.1-10.el7 |
Vulnerabilities 2
-
Unscored —
A divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulati…
-
Unscored —
An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx…