Skip to content
OpenAdvisories
High ELSA-2021-9568 14 CVEs

Important: virt:kvm_utils security update (Oracle Linux 8)

Published Dec 1, 2021 · Updated Dec 1, 2021

Summary

hivex
[1.3.18]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.3.18]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

libguestfs
[1:1.40.2-25.0.1]
- Replace upstream references from description tag
- Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
- Set DISTRO_ORACLE_LINUX correspeonding to ol

[1:1.40.2-25]
- v2v: handle HTTP/2 replies from vCenter
resolves: rhbz#1854380

[1:1.40.2-24]
- v2v: ship a newer version of rhev-apt.exe
resolves: rhbz#1849997

[1:1.40.2-23]
- Ignore the user.WofCompressedData xattr
resolves: rhbz#1811539
- sysprep: new ipa-client and kerberos-hostkeytab operations
resolves: rhbz#1789592

[1.40.2]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1:1.38.4-15]
- Stop building virt-p2v-maker, as it will be built by its own source
resolves: rhbz#1777924

libguestfs-winsupport
[8.2]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[8.0-4]
- Rebuild all virt packages to fix RHEL's upgrade path
- Resolves: rhbz#1695587
(Ensure modular RPM upgrade path)

[8.0-3]
- Fix for CVE-2019-9755
(heap-based buffer overflow leads to local root privilege escalation)
resolves: rhbz#1698503

[8.0-2]
- Fix for ntfsclone crash (RHBZ#1601146).

[8.0-1]
- Rebase to 2017.3.23.
- Remove patches which are now upstream.
- Resynch with Fedora package.
- Enable all architectures for RHEL 8.

[7.2-2]
- Fix for handling guest filenames with invalid or incomplete
multibyte or wide characters
resolves: rhbz#1301593

[7.2-1]
- Rebase and rebuild for RHEL 7.2
resolves: rhbz#1240278

[7.1-6]
- Bump version and rebuild.
related: rhbz#1221583

[7.1-5]
- Enable aarch64 architecture.
resolves: rhbz#1221583

[7.1-4]
- Enable debuginfo support and stripping.
resolves: rhbz#1100319

[7.1-3]
- Add patches from Fedora package which add fstrim support.
resolves: rhbz#1100319

[7.1-2]
- New package for RHEL 7.1
- Rebase to ntfs-3g 2014.2.15
resolves: rhbz#1100319
- Change the package so it works with supermin5.
- Remove dependency on external FUSE.

[7.0-2]
- Resync against Rawhide package (ntfs-3g 2013.1.13).
- Drop HAL file since HAL is dead.
resolves: rhbz#819939

[7.0-1]
- New package for RHEL 7
resolves: rhbz#819939
- Resync against Rawhide package.

[1.0-7]
- Disable debuginfo package.
resolves: RHBZ#691555.

[1.0-6]
- Require libguestfs 1.7.17 (newer version in RHEL 6.1).
- Require febootstrap-supermin-helper instead of febootstrap
resolves: RHBZ#670299.

[1.0-5]
- Make sure intermediate lib* directories are created in hostfiles (RHBZ#603429)

[1.0-4]
- Requires fuse-libs (RHBZ#599300).

[1.0-3]
- ExclusiveArch x86_64.

[1.0-2]
- Package Windows support for libguestfs.

libiscsi
libnbd
[1.2.2]
- Resolves: bz#1844296
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

libvirt
[5.7.0-31.el8]
- qemu: Do not latch guestCPUs when guests hotplug with active domain groups (Wim ten Have) [Orabug: 33440015]

[5.7.0-30.el8]
- qemuDomainSnapshotDiskPrepareOne: Fix logic of relative backing store update (Peter Krempa) [Orabug: 33086913]
- qemu: Don't set NVRAM label when creating it (Michal Privoznik) [Orabug: 33319048]
- qemu: protect guestCPUs from drift under vcpu guest timeouts (Wim ten Have) [Orabug: 33368490]

[5.7.0-29.el8]
- qemu: vCORE distribution under vNUMA host partitioning should balance guests vCPU:pCPU pinning (Wim ten Have) [Orabug: 32355455]
- qemuDomainSnapshotDiskPrepareOne: Don't load the relative path with blockdev (Peter Krempa) [Orabug: 33151464]
- qemu: block: Support VIR_DOMAIN_BLOCK_COMMIT/PULL/REBASE_RELATIVE with blockdev (Peter Krempa) [Orabug: 33151464]
- qemu: Tell secdrivers which images are top parent (Michal Privoznik) [Orabug: 33086913]
- security: Introduce VIR_SECURITY_DOMAIN_IMAGE_PARENT_CHAIN_TOP flag (Michal Privoznik) [Orabug: 33086913]

[5.7.0-28.el8]
- qemu_capabilities: Rework domain caps cache (Michal Privoznik) [Orabug: 32664432]
- tests: fix virArchFromHost() redefine error (Joe Jin) [Orabug: 32664432]
- qemu: cache host arch separately from virCapsPtr (Daniel P. Berrange) [Orabug: 32664432]
- cpu.c: Check properly for virCapabilitiesGetNodeInfo() retval (Michal Privoznik) [Orabug: 32664432]
- virStorageSourceParseBackingJSONRaw: Parse 'offset' and 'size' attributes (Peter Krempa) [Orabug: 32164351]
- tests: qemu: Add test data for the new <slice> element (Peter Krempa) [Orabug: 32164351]
- qemu: Add support for slices of type 'storage' (Peter Krempa) [Orabug: 32164351]
- tests: qemublock: Add cases for creating image overlays on top of disks with <slice> (Peter Krempa) [Orabug: 32164351]
- qemu: block: Properly format storage slice into backing store strings (Peter Krempa) [Orabug: 32164351]
- qemu: domain: Store nodenames of slice in status XML (Peter Krempa) [Orabug: 32164351]
- conf: Implement support for <slices> of disk source (Peter Krempa) [Orabug: 32164351]
- docs: Document the new <slices> sub-element of disk's <source> (Peter Krempa) [Orabug: 32164351]
- qemu: block: forbid creation of storage sources with <slice> (Peter Krempa) [Orabug: 32164351]
- qemuDomainValidateStorageSource: Reject unsupported slices (Peter Krempa) [Orabug: 32164351]
- qemuBlockStorageSourceGetFormatRawProps: format 'offset' and 'size' for slice (Peter Krempa) [Orabug: 32164351]
- util: virstoragefile: Add data structure for storing storage source slices (Peter Krempa) [Orabug: 32164351]
- tests: virstorage: Add test data for json specified raw image with offset/size (Peter Krempa) [Orabug: 32164351]
- docs: formatdomain: Close <source> on one of disk examples (Peter Krempa) [Orabug: 32164351]
- qemu: domain: Refactor formatting of node names into status XML (Peter Krempa) [Orabug: 32164351]
- tests: virstorage: Add test cases for 'json:' pseudo-URI without 'file' wrapper (Peter Krempa) [Orabug: 32164351]
- virStorageSourceParseBackingJSON: Prevent ar

Fixed packages 103

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.18-20.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 hivex-devel 0:1.3.18-20.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-bash-completion 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-benchmarking 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-devel 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-gfs2 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-gobject 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-gobject-devel 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-inspect-icons 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-java 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-java-devel 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-javadoc 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-rescue 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-rsync 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-tools 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-tools-c 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-winsupport 0:8.2-1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libguestfs-xfs 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libnbd 0:1.2.2-1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libnbd-devel 0:1.2.2-1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-admin 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-bash-completion 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-client 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-config-network 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-interface 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-network 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-secret 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-storage 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi-direct 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-daemon-kvm 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-devel 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-docs 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-libs 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-lock-sanlock 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 libvirt-nss 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 lua-guestfs 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdfuse 0:1.2.2-1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-bash-completion 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-basic-filters 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-basic-plugins 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-curl-plugin 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-devel 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-example-plugins 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-gzip-plugin 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-linuxdisk-plugin 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-python-plugin 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-server 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-ssh-plugin 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-vddk-plugin 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 nbdkit-xz-filter 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 perl-hivex 0:1.3.18-20.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 perl-Sys-Guestfs 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 perl-Sys-Virt 0:4.5.0-5.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 python3-hivex 0:1.3.18-20.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 python3-libguestfs 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 python3-libnbd 0:1.2.2-1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 python3-libvirt 0:5.7.0-31.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 qemu-guest-agent 15:4.2.1-11.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 qemu-img 15:4.2.1-11.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 qemu-kvm 15:4.2.1-11.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 qemu-kvm-block-curl 15:4.2.1-11.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 qemu-kvm-block-gluster 15:4.2.1-11.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 qemu-kvm-block-iscsi 15:4.2.1-11.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 qemu-kvm-block-rbd 15:4.2.1-11.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 qemu-kvm-block-ssh 15:4.2.1-11.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 qemu-kvm-common 15:4.2.1-11.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 qemu-kvm-core 15:4.2.1-11.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 ruby-hivex 0:1.3.18-20.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 ruby-libguestfs 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 seabios 0:1.13.0-2.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 seabios-bin 0:1.13.0-2.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 seavgabios-bin 0:1.13.0-2.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 supermin 0:5.1.19-10.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 supermin-devel 0:5.1.19-10.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 virt-dib 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
Oracle Linux · 8 virt-v2v 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c

Vulnerabilities 14