Skip to content
OpenAdvisories
High ELSA-2022-9432 3 CVEs

Important: qemu security update (Oracle Linux 7)

Published May 26, 2022 · Updated May 26, 2022

Summary

[15:4.2.1-17.el7]
- arm/acpi: fix an out of spec _UID for PCI root (Michael S. Tsirkin)
- arm/acpi: fix duplicated _UID of PCI interrupt link devices (Heyi Guo)
- arm/acpi: fix PCI _PRT definition (Heyi Guo)
- docs: fix references to docs/devel/atomics.rst (Stefano Garzarella) [Orabug: 33659123]
- rcu: do not mention atomic_mb_read/set in documentation (Paolo Bonzini) [Orabug: 33659123]
- atomics: update documentation (Paolo Bonzini) [Orabug: 33659123]
- atomics: convert to reStructuredText (Paolo Bonzini) [Orabug: 33659123]
- async: use explicit memory barriers (Paolo Bonzini) [Orabug: 33659123]
- aio-wait: delegate polling of main AioContext if BQL not held (Paolo Bonzini) [Orabug: 33659123]
- qapi: Add '@allow-write-only-overlay' feature for 'blockdev-snapshot' (Peter Krempa) [Orabug: 33888021]
- iotests: Add iothread cases to 155 (Kevin Wolf) [Orabug: 33888021]
- block: Fix cross-AioContext blockdev-snapshot (Kevin Wolf) [Orabug: 33888021]
- iotests: Test mirror with temporarily disabled target backing file (Kevin Wolf) [Orabug: 33888021]
- iotests: Fix run_job() with use_log=False (Kevin Wolf) [Orabug: 33888021]
- block: Relax restrictions for blockdev-snapshot (Kevin Wolf) [Orabug: 33888021]
- block: Make bdrv_get_cumulative_perm() public (Kevin Wolf) [Orabug: 33888021]
- iotests: Use complete_and_wait() in 155 (Max Reitz) [Orabug: 33888021]
- iotests: Support job-complete in run_job() (Kevin Wolf) [Orabug: 33888021]
- linux-headers: update again to 5.8 (Paolo Bonzini) [Orabug: 34022218]
- virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 33941879] {CVE-2022-26353}
- vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941844] {CVE-2022-26354}
- virtio-net: fix use after unmap/free for sg (Jason Wang) [Orabug: 33972912] {CVE-2021-3748}
- migration: Report the error returned when save_live_iterate fails (David Edmondson)

Fixed packages 13

ReleasePackageFixed in
Oracle Linux · 7 ivshmem-tools 15:4.2.1-17.el7
Oracle Linux · 7 qemu 15:4.2.1-17.el7
Oracle Linux · 7 qemu-block-gluster 15:4.2.1-17.el7
Oracle Linux · 7 qemu-block-iscsi 15:4.2.1-17.el7
Oracle Linux · 7 qemu-block-rbd 15:4.2.1-17.el7
Oracle Linux · 7 qemu-common 15:4.2.1-17.el7
Oracle Linux · 7 qemu-img 15:4.2.1-17.el7
Oracle Linux · 7 qemu-kvm 15:4.2.1-17.el7
Oracle Linux · 7 qemu-kvm-core 15:4.2.1-17.el7
Oracle Linux · 7 qemu-system-aarch64 15:4.2.1-17.el7
Oracle Linux · 7 qemu-system-aarch64-core 15:4.2.1-17.el7
Oracle Linux · 7 qemu-system-x86 15:4.2.1-17.el7
Oracle Linux · 7 qemu-system-x86-core 15:4.2.1-17.el7

Vulnerabilities 3