Summary
[15:4.2.1-17.el7]
- arm/acpi: fix an out of spec _UID for PCI root (Michael S. Tsirkin)
- arm/acpi: fix duplicated _UID of PCI interrupt link devices (Heyi Guo)
- arm/acpi: fix PCI _PRT definition (Heyi Guo)
- docs: fix references to docs/devel/atomics.rst (Stefano Garzarella) [Orabug: 33659123]
- rcu: do not mention atomic_mb_read/set in documentation (Paolo Bonzini) [Orabug: 33659123]
- atomics: update documentation (Paolo Bonzini) [Orabug: 33659123]
- atomics: convert to reStructuredText (Paolo Bonzini) [Orabug: 33659123]
- async: use explicit memory barriers (Paolo Bonzini) [Orabug: 33659123]
- aio-wait: delegate polling of main AioContext if BQL not held (Paolo Bonzini) [Orabug: 33659123]
- qapi: Add '@allow-write-only-overlay' feature for 'blockdev-snapshot' (Peter Krempa) [Orabug: 33888021]
- iotests: Add iothread cases to 155 (Kevin Wolf) [Orabug: 33888021]
- block: Fix cross-AioContext blockdev-snapshot (Kevin Wolf) [Orabug: 33888021]
- iotests: Test mirror with temporarily disabled target backing file (Kevin Wolf) [Orabug: 33888021]
- iotests: Fix run_job() with use_log=False (Kevin Wolf) [Orabug: 33888021]
- block: Relax restrictions for blockdev-snapshot (Kevin Wolf) [Orabug: 33888021]
- block: Make bdrv_get_cumulative_perm() public (Kevin Wolf) [Orabug: 33888021]
- iotests: Use complete_and_wait() in 155 (Max Reitz) [Orabug: 33888021]
- iotests: Support job-complete in run_job() (Kevin Wolf) [Orabug: 33888021]
- linux-headers: update again to 5.8 (Paolo Bonzini) [Orabug: 34022218]
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 33941879] {CVE-2022-26353}
- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941844] {CVE-2022-26354}
- virtio-net: fix use after unmap/free for sg (Jason Wang) [Orabug: 33972912] {CVE-2021-3748}
- migration: Report the error returned when save_live_iterate fails (David Edmondson)
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | ivshmem-tools | 15:4.2.1-17.el7 |
| Oracle Linux · 7 | qemu | 15:4.2.1-17.el7 |
| Oracle Linux · 7 | qemu-block-gluster | 15:4.2.1-17.el7 |
| Oracle Linux · 7 | qemu-block-iscsi | 15:4.2.1-17.el7 |
| Oracle Linux · 7 | qemu-block-rbd | 15:4.2.1-17.el7 |
| Oracle Linux · 7 | qemu-common | 15:4.2.1-17.el7 |
| Oracle Linux · 7 | qemu-img | 15:4.2.1-17.el7 |
| Oracle Linux · 7 | qemu-kvm | 15:4.2.1-17.el7 |
| Oracle Linux · 7 | qemu-kvm-core | 15:4.2.1-17.el7 |
| Oracle Linux · 7 | qemu-system-aarch64 | 15:4.2.1-17.el7 |
| Oracle Linux · 7 | qemu-system-aarch64-core | 15:4.2.1-17.el7 |
| Oracle Linux · 7 | qemu-system-x86 | 15:4.2.1-17.el7 |
| Oracle Linux · 7 | qemu-system-x86-core | 15:4.2.1-17.el7 |
Vulnerabilities 3
-
Unscored —
A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address…
-
Unscored —
A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-374…
-
Unscored —
A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virt…