Skip to content
OpenAdvisories
Low ELSA-2022-7472 4 CVEs

Low: virt:ol and virt-devel:ol security, bug fix, and enhancement update (Oracle Linux 8)

Published Nov 15, 2022 · Updated Nov 15, 2022

Summary

libguestfs
[1.44.0-9.0.1]
- Replace upstream references from description tag
- Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
- Set DISTRO_ORACLE_LINUX correspeonding to ol

[1:1.44.0-9]
- Fix CVE-2022-2211 Denial of Service in --key parameter
resolves: rhbz#2101280

[1:1.44.0-8]
- Obsolete old libguestfs-benchmarking subpackage
resolves: rhbz#2091597

[1:1.44.0-7]
- Disable 5-level page tables when using -cpu max
resolves: rhbz#2084566
related: rhbz#2075424

[1:1.44.0-6]
- Backport support for -cpu max to allow RHEL 9 guests to be modified
resolves: rhbz#2075424

libnbd
[1.6.0-5.el8]
- Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails
resolves: rhbz#2045718

[1.6.0-4.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

libtpms
[0.9.1-1.20211126git1ff6fe1f43]
- Backport s_ContextSlotMask initialization fix
Resolves: rhbz#2111433

libvirt
[8.0.0-10.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
- Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)

[8.0.0-10]
- security_selinux.c: Relabel existing mode=bind UNIX sockets (rhbz#2101575)
- RHEL: qemu_migration: Fix restoring memlock limit on destination (rhbz#2107954)

[8.0.0-9]
- conf: virtiofs: add thread_pool element (rhbz#2079582)
- qemu: virtiofs: format --thread-pool-size (rhbz#2079582)
- conf: Move virDomainObj::originalMemlock into qemuDomainObjPrivate (rhbz#2089433)
- qemu_domain: Format qemuDomainObjPrivate::originalMemlock (rhbz#2089433)
- qemu: Add qemuDomainSetMaxMemLock helper (rhbz#2089433)
- qemu_migration: Use qemuDomainSetMaxMemLock (rhbz#2089433)
- qemu_migration: Restore original memory locking limit (rhbz#2089433)
- Add VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433)
- virsh: Add support for VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433)
- qemu_migration: Implement VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433)

[8.0.0-8]
- nwfilter: fix crash when counting number of network filters (CVE-2022-0897, rhbz#2063902)
- virDomainDiskDefValidate: Improve error messages for startupPolicy checks (rhbz#2095758)
- domain_validate: Split out validation of disk startup policy (rhbz#2095758)
- virDomainDiskDefValidateStartupPolicy: Validate disk type better (rhbz#2095758)
- virDomainDiskTranslateSourcePool: Fix check of startupPolicy definition (rhbz#2095758)

[8.0.0-7]
- cpu_map: Disable cpu64-rhel* for host-model and baseline (rhbz#1851227)
- cputest: Drop some old artificial baseline tests (rhbz#1851227)
- cputest: Give better names to baseline tests (rhbz#1851227)
- cputest: Add some real world baseline tests (rhbz#1851227)
- cpu_x86: Consolidate signature match in x86DecodeUseCandidate (rhbz#1851227)
- cpu_x86: Refactor feature list comparison in x86DecodeUseCandidate (rhbz#1851227)
- cpu_x86: Penalize disabled features when computing CPU model (rhbz#1851227)
- cpu_x86: Ignore enabled features for input models in x86DecodeUseCandidate (rhbz#1851227)

[8.0.0-6]
- conf: Introduce memory allocation threads (rhbz#2067126)
- qemu_capabilities: Detect memory-backend-*.prealloc-threads property (rhbz#2067126)
- qemu_validate: Validate prealloc threads against qemuCpas (rhbz#2067126)
- qemu_command: Generate prealloc-threads property (rhbz#2067126)

libvirt-dbus
[1.3.0-2.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

[1.3.0]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

libvirt-python
[8.0.0-2]
- [RFE] RFE backport allow enabling ZEROCOPY live migration to libvirt-python on RHEL8 to be consumed by VDSM (rhbz#2092756)

qemu-kvm
[6.2.0-20.el8.1]
- kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2116743]
- kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2116743]
- Resolves: bz#2116743
([RHEL8.7] Guests in VMX root operation fail to reboot with QEMUs system_reset command)

[6.2.0-20]
- kvm-scsi-generic-Fix-emulated-block-limits-VPD-page.patch [bz#2120279]
- Resolves: bz#2120279
(Wrong max_sectors_kb and Maximum transfer length on the pass-through device [rhel-8.7])

[6.2.0-19]
- kvm-migration-Introduce-ram_transferred_add.patch [bz#2110203]
- kvm-migration-Tally-pre-copy-downtime-and-post-copy-byte.patch [bz#2110203]
- kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2110203]
- kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2110203]
- kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2110203]
- kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2110203]
- kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2110203]
- kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2110203]
- kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112296]
- Resolves: bz#2110203
(zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
- Resolves: bz#2112296
(virtio-blk: Cant boot fresh installation from used 512 cluster_size image under certain conditions)

[6.2.0-18]
- kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2105410]
- kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2105410]
- Resolves: bz#2105410
(Stalled IO Operations in VM)

[6.2.0-17]
- kvm-migration-Never-call-twice-qemu_target_page_size.patch [bz#2072049]
- kvm-multifd-Rename-used-field-to-num.patch [bz#2072049]
- kvm-multifd-Add-missing-documentation.patch [bz#2072049]
- kvm-multifd-The-variable-is-only-used-inside-the-loop.patch [bz#2072049]
- kvm-multifd-remove-used-parameter-from-send_prepare-meth.patch [bz#2072049]
- kvm-multifd-remove-used-parameter-from-send_recv_pages-m.patch [bz#2072049]
- kvm-multifd-Fill-offset-and-block-for-reception.patch [bz#2072049]
- kvm-multifd-Make-zstd-compression-method-not-use-iovs.patch [bz#2072049]
- kvm-multifd-Make-zlib-compression-method-not-use-iovs.patch [bz#2072049]
- kvm-migration-All-this-fields-are-unsigned.patch [bz#2072049]
- kvm-multifd-Move-iov-from-pages-to-params.patch [bz

Fixed packages 129

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.18-23.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 hivex-devel 0:1.3.18-23.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-appliance 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-bash-completion 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-devel 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-gfs2 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-gobject 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-gobject-devel 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-inspect-icons 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-java 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-java-devel 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-javadoc 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-rescue 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-rsync 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-tools 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-tools-c 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-winsupport 0:8.6-1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libguestfs-xfs 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libnbd 0:1.6.0-5.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libnbd-bash-completion 0:1.6.0-5.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libnbd-devel 0:1.6.0-5.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libtpms 0:0.9.1-1.20211126git1ff6fe1f43.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libtpms-devel 0:0.9.1-1.20211126git1ff6fe1f43.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-client 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-config-network 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-interface 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-network 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-secret 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-storage 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi-direct 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-daemon-kvm 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-devel 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-docs 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-libs 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-lock-sanlock 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-nss 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 libvirt-wireshark 0:8.0.0-10.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 lua-guestfs 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdfuse 0:1.6.0-5.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-bash-completion 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-basic-filters 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-basic-plugins 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-curl-plugin 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-devel 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-example-plugins 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-gzip-filter 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-gzip-plugin 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-linuxdisk-plugin 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-nbd-plugin 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-python-plugin 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-server 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-ssh-plugin 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-tar-filter 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-tar-plugin 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-tmpdisk-plugin 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-vddk-plugin 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 nbdkit-xz-filter 0:1.24.0-4.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 ocaml-hivex 0:1.3.18-23.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 ocaml-hivex-devel 0:1.3.18-23.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 ocaml-libguestfs 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 ocaml-libguestfs-devel 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 ocaml-libnbd 0:1.6.0-5.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 ocaml-libnbd-devel 0:1.6.0-5.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 perl-hivex 0:1.3.18-23.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 perl-Sys-Guestfs 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 perl-Sys-Virt 0:8.0.0-1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 python3-hivex 0:1.3.18-23.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 python3-libguestfs 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 python3-libnbd 0:1.6.0-5.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 python3-libvirt 0:8.0.0-2.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 qemu-guest-agent 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-img 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm-block-curl 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm-block-gluster 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm-block-iscsi 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm-block-rbd 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm-block-ssh 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm-common 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm-core 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm-docs 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm-hw-usbredir 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm-tests 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm-ui-opengl 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 qemu-kvm-ui-spice 15:6.2.0-20.module+el8.7.0+20875+5dd40464.1
Oracle Linux · 8 ruby-hivex 0:1.3.18-23.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 ruby-libguestfs 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 seabios 0:1.16.0-3.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 seabios-bin 0:1.16.0-3.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 seavgabios-bin 0:1.16.0-3.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 supermin 0:5.2.1-2.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 supermin-devel 0:5.2.1-2.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 swtpm 0:0.7.0-4.20211109gitb79fd91.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 swtpm-devel 0:0.7.0-4.20211109gitb79fd91.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 swtpm-libs 0:0.7.0-4.20211109gitb79fd91.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 swtpm-tools 0:0.7.0-4.20211109gitb79fd91.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 swtpm-tools-pkcs11 0:0.7.0-4.20211109gitb79fd91.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 virt-dib 1:1.44.0-9.0.1.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 virt-v2v 1:1.42.0-21.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 virt-v2v-bash-completion 1:1.42.0-21.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 virt-v2v-man-pages-ja 1:1.42.0-21.module+el8.7.0+20875+5dd40464
Oracle Linux · 8 virt-v2v-man-pages-uk 1:1.42.0-21.module+el8.7.0+20875+5dd40464

Vulnerabilities 4