Skip to content
OpenAdvisories
High ELSA-2022-9700 4 CVEs

Important: virt:kvm_utils security update (Oracle Linux 8)

Published Aug 8, 2022 · Updated Aug 8, 2022

Summary

libvirt
[5.7.0-34.el8]
- qemu: blockcopy: Allow late opening of the backing chain of a shallow copy (Peter Krempa) [Orabug: 33091019]
- qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_SNAPSHOT_ALLOW_WRITE_ONLY (Peter Krempa) [Orabug: 33091019]
- qemuDomainBlockCopyCommon: Record updated flags to block job (Peter Krempa) [Orabug: 33091019]
- qemuDomainBlockPivot: Move check prior to executing the pivot steps (Peter Krempa) [Orabug: 33091019]
- qemu: Tell secdrivers which images are top parent (Michal Privoznik) [Orabug: 33091019]
- qemuDomainBlockPivot: Copy bitmaps backing checkpoints for virDomainBlockCopy (Peter Krempa) [Orabug: 33091019]
- qemu: block: Introduce function to calculate bitmap handling for block-copy (Peter Krempa) [Orabug: 33091019]
- qemu: block: Add validator for bitmap chains accross backing chains (Peter Krempa) [Orabug: 33091019]
- qemu: blockjob: Store flags for all the block job types (Peter Krempa) [Orabug: 33091019]
- qemu: blockjob: Store jobflags with block job data (Peter Krempa) [Orabug: 33091019]
- util: json: Introduce virJSONValueArrayConcat (Peter Krempa) [Orabug: 33091019]
- qemu: block: Extract calls of qemuBlockGetNamedNodeData into a helper function (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Track and relabel images for bitmap merging (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Introduce support for deleting checkpoints accross snapshots (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Extract calculation of bitmap merging for checkpoint deletion (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Introduce helper to find checkpoint disk definition in parents (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: tolerate missing disks on checkpoint deletion (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Use disk definition directly when creating checkpoint (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: rename disk->chkdisk in qemuCheckpointAddActions (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: rename disk->chkdisk in qemuCheckpointDiscardBitmaps (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: split out checkpoint deletion bitmaps (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Store whether deleted checkpoint is current in a variable (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Extract and export rollback of checkpoint metadata storing (Peter Krempa) [Orabug: 33091019]
- qemu: block: Introduce qemuBlockNamedNodeDataGetBitmapByName (Peter Krempa) [Orabug: 33091019]
- qemu: snapshot: Propagate active bitmaps through external snapshots (Peter Krempa) [Orabug: 33091019]
- qemu: monitor: Add granularity parameter for block-dirty-bitmap-add (Peter Krempa) [Orabug: 33091019]
- qemu: snapshot: Fold formatting of snapshot transaction into prepare func (Peter Krempa) [Orabug: 33091019]
- qemu: Check for explicit failure of qemuBlockSnapshotAddBlockdev (Peter Krempa) [Orabug: 33091019]
- qemu: monitor: Extract internals of qemuMonitorJSONBlockGetNamedNodeData (Peter Krempa) [Orabug: 33091019]
- qemu: monitor: Extract data about dirty-bimaps in qemuMonitorBlockGetNamedNodeData (Peter Krempa) [Orabug: 33091019]
- qemu: block: enable the snapshot image deletion feature (Pavel Mores) [Orabug: 33091019]
- qemu: block: propagate the delete flag to where it can actually be used (Pavel Mores) [Orabug: 33091019]
- qemu: checkpoint: fix NULL dereference at create time (Cole Robinson) [Orabug: 33091019]
- qemu: snapshot: Mark file becoming backingStore as read-only (Peter Krempa) [Orabug: 33091019]
- util: consolidate on one free callback for hash data (Daniel P. Berrange) [Orabug: 33091019]
- conf: stop using hash key when freeing hash entries (Daniel P. Berrange) [Orabug: 33091019]
- qemu: checkpoint: Use qemuMonitorTransactionBitmapMergeSourceAddBitmap (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Fix rollback and access to unlocked vm when deleting checkpoints (Peter Krempa) [Orabug: 33091019]
- qemu: snapshot: split out preparation of a snapshot with blockdev (Peter Krempa) [Orabug: 33091019]
- qemu: monitor: Add helper for generating data for block bitmap merging (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Extract finalizing steps of checkpoint creation (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Split out checkpoint creation code (Peter Krempa) [Orabug: 33091019]
- qemu: block: Dont query monitor in qemuBlockStorageSourceCreateDetectSize (Peter Krempa) [Orabug: 33091019]
- qemu: monitor: Introduce new interface to query-named-block-nodes (Peter Krempa) [Orabug: 33091019]
- util: hash: Introduce virHashHasEntry (Peter Krempa) [Orabug: 33091019]
- util: hash: Add new constructor virHashNew (Peter Krempa) [Orabug: 33091019]
- util: hash: Add possibility to use simpler data free function in virHash (Peter Krempa) [Orabug: 33091019]
- conf: Introduce virDomainDiskByTarget (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Dont update current checkpoint until we are done (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Replace open-coded transaction action generators (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Refactor cleanup in qemuCheckpointCreateXML (Peter Krempa) [Orabug: 33091019]
- qemu: domain: Move checkpoint related code to qemu_checkpoint.c (Peter Krempa) [Orabug: 33091019]
- qemu: driver: Move checkpoint-related code to qemu_checkpoint.c (Peter Krempa) [Orabug: 33091019]
- qemu: Move, rename and export qemuDomObjFromDomain (Peter Krempa) [Orabug: 33091019]
- qemu: checkpoint: Dont forbid checkpoint when VM is marked for autodestroy (Peter Krempa) [Orabug: 33091019]
- Prepare to hotplug vNUMA targets for non-X86_64 guests (Wim ten Have) [Orabug: 34256070]
- qemu: Add missing lock in qemuProcessHandleMonitorEOF (Peng Liang) [Orabug: 34210159] {CVE-2021-3975}

libvirt-python
[5.7.0-34.el8]
- libvirt-python.spec: Bump Obsoletes version number for libvirt-python (Karl Heubaum) [Orabug: 34185868]

qemu-kvm
[4.2.1-18.el8]
- block: introduce max_hw

Fixed packages 103

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.18-21.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 hivex-devel 0:1.3.18-21.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-bash-completion 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-benchmarking 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-devel 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-gfs2 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-gobject 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-gobject-devel 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-inspect-icons 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-java 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-java-devel 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-javadoc 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-rescue 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-rsync 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-tools 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-tools-c 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-winsupport 0:8.2-1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libguestfs-xfs 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libnbd 0:1.2.2-1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libnbd-devel 0:1.2.2-1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-admin 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-bash-completion 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-client 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-config-network 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-interface 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-network 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-secret 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-storage 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi-direct 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-daemon-kvm 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-devel 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-docs 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-libs 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-lock-sanlock 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 libvirt-nss 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 lua-guestfs 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdfuse 0:1.2.2-1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-bash-completion 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-basic-filters 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-basic-plugins 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-curl-plugin 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-devel 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-example-plugins 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-gzip-plugin 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-linuxdisk-plugin 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-python-plugin 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-server 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-ssh-plugin 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-vddk-plugin 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 nbdkit-xz-filter 0:1.16.2-4.0.1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 perl-hivex 0:1.3.18-21.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 perl-Sys-Guestfs 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 perl-Sys-Virt 0:4.5.0-5.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 python3-hivex 0:1.3.18-21.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 python3-libguestfs 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 python3-libnbd 0:1.2.2-1.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 python3-libvirt 0:5.7.0-34.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 qemu-guest-agent 15:4.2.1-18.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 qemu-img 15:4.2.1-18.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 qemu-kvm 15:4.2.1-18.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 qemu-kvm-block-curl 15:4.2.1-18.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 qemu-kvm-block-gluster 15:4.2.1-18.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 qemu-kvm-block-iscsi 15:4.2.1-18.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 qemu-kvm-block-rbd 15:4.2.1-18.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 qemu-kvm-block-ssh 15:4.2.1-18.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 qemu-kvm-common 15:4.2.1-18.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 qemu-kvm-core 15:4.2.1-18.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 ruby-hivex 0:1.3.18-21.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 ruby-libguestfs 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 seabios 0:1.13.0-2.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 seabios-bin 0:1.13.0-2.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 seavgabios-bin 0:1.13.0-2.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 supermin 0:5.1.19-10.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 supermin-devel 0:5.1.19-10.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 virt-dib 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb
Oracle Linux · 8 virt-v2v 1:1.40.2-28.0.4.module+el8.6.0+20690+93de6acb

Vulnerabilities 4