Skip to content
OpenAdvisories
High ELSA-2022-9978 1 CVE

Important: qemu security update (Oracle Linux 7)

Published Nov 4, 2022 · Updated Nov 4, 2022

Summary

[15:4.2.1-21.el7]
- qemu-kvm.spec: Fix the qemu-regdump sos report plugin path (Mark Kanda) [Orabug: 34680062]
- qmp-regdump: Require python3 on OL8 (Mark Kanda) [Orabug: 34672256]
- iotests: Adjust 186.out to account for 'null' node-name (Mark Kanda) [Orabug: 34447388]
- block: Set the name of BlockBackend if possible (Annie Li) [Orabug: 34447388]
- acpi: Update _DSM method in expected files (Mark Kanda) [Orabug: 34616322]
- acpi/gpex: Fix cca attribute check for pxb device (Xingang Wang) [Orabug: 34616322]
- acpi: Enable pxb unit-test for ARM virt machine (Jiahui Cen) [Orabug: 34616322]
- Kconfig: Compile PXB for ARM_VIRT (Jiahui Cen) [Orabug: 34616322]
- acpi/gpex: Exclude pxb's resources from PCI0 (Jiahui Cen) [Orabug: 34616322]
- acpi/gpex: Inform os to keep firmware resource map (Jiahui Cen) [Orabug: 34616322]
- acpi: Add addr offset in build_crs (Jiahui Cen) [Orabug: 34616322]
- unit-test: Add testcase for pxb (Yubo Miao) [Orabug: 34616322]
- acpi: Align the size to 128k (Yubo Miao) [Orabug: 34616322]
- acpi/gpex: Build tables for pxb (Yubo Miao) [Orabug: 34616322]
- acpi: Extract crs build form acpi_build.c (Yubo Miao) [Orabug: 34616322]
- hw/arm/virt: Write extra pci roots into fw_cfg (Jiahui Cen) [Orabug: 34616322]
- fw_cfg: Refactor extra pci roots addition (Jiahui Cen) [Orabug: 34616322]
- acpi/gpex: Extract two APIs from acpi_dsdt_add_pci (Yubo Miao) [Orabug: 34616322]
- arm: use acpi_dsdt_add_gpex (Gerd Hoffmann) [Orabug: 34616322]
- acpi: add acpi_dsdt_add_gpex (Gerd Hoffmann) [Orabug: 34616322]
- acpi: Allow DSDT acpi table changes (Jiahui Cen) [Orabug: 34616322]
- move MemMapEntry (Gerd Hoffmann) [Orabug: 34616322]
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34353672] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34353672] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34353672] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34353672] {CVE-2022-0216}
- vfio: defer to commit kvm irq routing when enable msi/msix (Longpeng (Mike)) [Orabug: 34419422]
- vfio: simplify the failure path in vfio_msi_enable (Longpeng (Mike)) [Orabug: 34419422]
- vfio: move re-enabling INTX out of the common helper (Longpeng (Mike)) [Orabug: 34419422]
- vfio: simplify the conditional statements in vfio_msi_enable (Longpeng (Mike)) [Orabug: 34419422]
- kvm/msi: do explicit commit when adding msi routes (Longpeng (Mike)) [Orabug: 34419422]
- kvm-irqchip: introduce new API to support route change (Longpeng (Mike)) [Orabug: 34419422]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34419422]
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda) [Orabug: 34510460]

Fixed packages 13

ReleasePackageFixed in
Oracle Linux · 7 ivshmem-tools 15:4.2.1-21.el7
Oracle Linux · 7 qemu 15:4.2.1-21.el7
Oracle Linux · 7 qemu-block-gluster 15:4.2.1-21.el7
Oracle Linux · 7 qemu-block-iscsi 15:4.2.1-21.el7
Oracle Linux · 7 qemu-block-rbd 15:4.2.1-21.el7
Oracle Linux · 7 qemu-common 15:4.2.1-21.el7
Oracle Linux · 7 qemu-img 15:4.2.1-21.el7
Oracle Linux · 7 qemu-kvm 15:4.2.1-21.el7
Oracle Linux · 7 qemu-kvm-core 15:4.2.1-21.el7
Oracle Linux · 7 qemu-system-aarch64 15:4.2.1-21.el7
Oracle Linux · 7 qemu-system-aarch64-core 15:4.2.1-21.el7
Oracle Linux · 7 qemu-system-x86 15:4.2.1-21.el7
Oracle Linux · 7 qemu-system-x86-core 15:4.2.1-21.el7

Vulnerabilities 1