Skip to content
OpenAdvisories
High ELSA-2023-12108 5 CVEs

Important: virt:kvm_utils security update (Oracle Linux 8)

Published Feb 8, 2023 · Updated Feb 8, 2023

Summary

libvirt
[5.7.0-38.el8]
- qemu: Don't report spurious errors from vCPU tid validation on hotunplug timeout (Shaleen Bathla) [Orabug: 34826758]
- security: fix SELinux label generation logic (Daniel P. Berrange) [Orabug: 34773029] {CVE-2021-3631}
- qemu: Set default qdisc before setting bandwidth (Michal Privoznik) [Orabug: 34724925]
- qemu: Taint cpu host-passthrough only after migration (Cole Robinson) [Orabug: 34724925]

libvirt-python
[5.7.0-38.el8]
- Bump version number to 5.7.0-38 to match libvirt (Karl Heubaum)

qemu-kvm
[4.2.1-24.el8]
- hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638) (Philippe Mathieu-Daude) [Orabug: 33930374] {CVE-2021-3638}
- tests/acpi: virt: update ACPI MADT and FADT binaries (Miguel Luis)
- acpi: arm/virt: madt: bump to revision 4 accordingly to ACPI 6.0 Errata A (Miguel Luis)
- acpi: arm/virt: madt: use build_append_int_noprefix() API to compose MADT table (Igor Mammedov)
- acpi: madt: arm/x86: use acpi_table_begin()/acpi_table_end() instead of build_header() (Igor Mammedov)
- hw/arm/virt-acpi-build:Remove dead assignment in build_madt() (Chen Qun)
- acpi: build_fadt: adapt FADT table names (Miguel Luis)
- acpi: fadt: support revision 6.0 of the ACPI specification (Miguel Luis)
- tests/acpi: virt: allow acpi MADT and FADT changes (Miguel Luis)
- Document CVE-2022-3165 as not applicable (Mark Kanda) [Orabug: 34713999] {CVE-2022-3165}
- Document CVE-2022-1050 as not applicable (Mark Kanda) [Orabug: 34132133] {CVE-2022-1050}
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779472] {CVE-2022-4172}
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)
- hw/acpi/aml-build: Improve scalability of PPTT generation (Yanan Wang)
- tests/data/acpi/virt: update empty file for PPTT (Miguel Luis)
- hw/arm/virt-acpi-build: Generate PPTT table (Yanan Wang)
- tests/data/acpi/virt: Add an empty expected file for PPTT (Yanan Wang)
- hw/acpi/aml-build: Add PPTT table (Andrew Jones)
- hw/acpi/aml-build: Add Processor hierarchy node structure (Yanan Wang)
- machine: Add SMP Sockets in CpuTopology (Babu Moger)
- bios-tables-test: generate table for virt/DBG2 (Miguel Luis)
- hw/arm/virt_acpi_build: Generate DBG2 table (Eric Auger)
- tests/acpi: Add void table for virt/DBG2 bios-tables-test (Eric Auger)
- tests/acpi: virt: update ACPI GTDT binaries (Miguel Luis) [Orabug: 34711916]
- acpi: arm/virt: build_gtdt: fix invalid 64-bit physical addresses (Miguel Luis) [Orabug: 34711916]
- tests/acpi: virt: allow acpi GTDT changes (Miguel Luis) [Orabug: 34711916]
- acpi: fix OEM ID/OEM Table ID padding (Igor Mammedov) [Orabug: 34711916]
- acpi: arm/virt: build_gtdt: use acpi_table_begin()/acpi_table_end() instead of build_header() (Igor Mammedov) [Orabug: 34711916]
- acpi: add helper routines to initialize ACPI tables (Igor Mammedov) [Orabug: 34711916]
- acpi: declare the default assignable value for the ACPI table header (Miguel Luis) [Orabug: 34711916]

[4.2.1-22.el8]
- Revert 'block: Set the name of BlockBackend if possible' (Joe Jin) [Orabug: 34841102]
- Revert 'iotests: Adjust 186.out to account for 'null' node-name' (Joe Jin) [Orabug: 34841102]

Fixed packages 103

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.18-21.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 hivex-devel 0:1.3.18-21.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-bash-completion 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-benchmarking 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-devel 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-gfs2 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-gobject 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-gobject-devel 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-inspect-icons 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-java 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-java-devel 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-javadoc 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-rescue 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-rsync 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-tools 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-tools-c 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-winsupport 0:8.2-1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libguestfs-xfs 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libnbd 0:1.2.2-1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libnbd-devel 0:1.2.2-1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-admin 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-bash-completion 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-client 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-config-network 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-interface 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-network 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-secret 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-storage 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi-direct 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-daemon-kvm 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-devel 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-docs 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-libs 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-lock-sanlock 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 libvirt-nss 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 lua-guestfs 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdfuse 0:1.2.2-1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-bash-completion 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-basic-filters 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-basic-plugins 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-curl-plugin 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-devel 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-example-plugins 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-gzip-plugin 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-linuxdisk-plugin 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-python-plugin 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-server 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-ssh-plugin 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-vddk-plugin 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 nbdkit-xz-filter 0:1.16.2-4.0.1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 perl-hivex 0:1.3.18-21.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 perl-Sys-Guestfs 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 perl-Sys-Virt 0:4.5.0-5.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 python3-hivex 0:1.3.18-21.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 python3-libguestfs 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 python3-libnbd 0:1.2.2-1.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 python3-libvirt 0:5.7.0-38.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 qemu-guest-agent 15:4.2.1-24.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 qemu-img 15:4.2.1-24.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 qemu-kvm 15:4.2.1-24.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 qemu-kvm-block-curl 15:4.2.1-24.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 qemu-kvm-block-gluster 15:4.2.1-24.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 qemu-kvm-block-iscsi 15:4.2.1-24.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 qemu-kvm-block-rbd 15:4.2.1-24.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 qemu-kvm-block-ssh 15:4.2.1-24.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 qemu-kvm-common 15:4.2.1-24.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 qemu-kvm-core 15:4.2.1-24.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 ruby-hivex 0:1.3.18-21.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 ruby-libguestfs 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 seabios 0:1.13.0-2.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 seabios-bin 0:1.13.0-2.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 seavgabios-bin 0:1.13.0-2.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 supermin 0:5.1.19-10.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 supermin-devel 0:5.1.19-10.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 virt-dib 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab
Oracle Linux · 8 virt-v2v 1:1.40.2-28.0.4.module+el8.7.0+20894+2d7709ab

Vulnerabilities 5