Summary
qemu-kvm
[6.1.1-5-el8]
- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daude) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daude) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daude) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)
Fixed packages 119
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | hivex | 0:1.3.18-23.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | hivex-devel | 0:1.3.18-23.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-appliance | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-bash-completion | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-devel | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-gfs2 | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-gobject | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-gobject-devel | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-inspect-icons | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-java | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-java-devel | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-javadoc | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-man-pages-ja | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-man-pages-uk | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-rescue | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-rsync | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-tools | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-tools-c | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-winsupport | 0:8.6-1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libguestfs-xfs | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libiscsi | 0:1.18.0-8.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libiscsi-devel | 0:1.18.0-8.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libiscsi-utils | 0:1.18.0-8.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libnbd | 0:1.6.0-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libnbd-bash-completion | 0:1.6.0-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libnbd-devel | 0:1.6.0-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libtpms | 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libtpms-devel | 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-client | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-config-network | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-config-nwfilter | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-interface | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-network | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-nodedev | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-nwfilter | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-qemu | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-secret | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-storage | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-core | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-disk | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-gluster | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-iscsi | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-iscsi-direct | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-logical | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-mpath | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-rbd | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-scsi | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-daemon-kvm | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-dbus | 0:1.3.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-devel | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-docs | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-libs | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-lock-sanlock | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-nss | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | libvirt-wireshark | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | lua-guestfs | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdfuse | 0:1.6.0-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-bash-completion | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-basic-filters | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-basic-plugins | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-curl-plugin | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-devel | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-example-plugins | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-gzip-filter | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-gzip-plugin | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-linuxdisk-plugin | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-nbd-plugin | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-python-plugin | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-server | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-ssh-plugin | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-tar-filter | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-tar-plugin | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-tmpdisk-plugin | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-vddk-plugin | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | nbdkit-xz-filter | 0:1.24.0-4.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | netcf | 0:0.2.8-12.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | netcf-devel | 0:0.2.8-12.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | netcf-libs | 0:0.2.8-12.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | perl-hivex | 0:1.3.18-23.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | perl-Sys-Guestfs | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | perl-Sys-Virt | 0:6.0.0-1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | python3-hivex | 0:1.3.18-23.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | python3-libguestfs | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | python3-libnbd | 0:1.6.0-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | python3-libvirt | 0:7.10.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | qemu-guest-agent | 15:6.1.1-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | qemu-img | 15:6.1.1-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | qemu-kvm | 15:6.1.1-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | qemu-kvm-block-curl | 15:6.1.1-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | qemu-kvm-block-gluster | 15:6.1.1-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | qemu-kvm-block-iscsi | 15:6.1.1-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | qemu-kvm-block-rbd | 15:6.1.1-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | qemu-kvm-block-ssh | 15:6.1.1-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | qemu-kvm-common | 15:6.1.1-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | qemu-kvm-core | 15:6.1.1-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | qemu-virtiofsd | 15:6.1.1-5.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | ruby-hivex | 0:1.3.18-23.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | ruby-libguestfs | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | seabios | 0:1.15.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | seabios-bin | 0:1.15.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | seavgabios-bin | 0:1.15.0-2.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | sgabios | 1:0.20170427git-3.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | sgabios-bin | 1:0.20170427git-3.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | supermin | 0:5.2.1-1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | supermin-devel | 0:5.2.1-1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | swtpm | 0:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | swtpm-devel | 0:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | swtpm-libs | 0:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | swtpm-tools | 0:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | swtpm-tools-pkcs11 | 0:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | virt-dib | 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | virt-v2v | 1:1.42.0-19.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | virt-v2v-bash-completion | 1:1.42.0-19.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | virt-v2v-man-pages-ja | 1:1.42.0-19.0.1.module+el8.7.0+20916+50473d5a |
| Oracle Linux · 8 | virt-v2v-man-pages-uk | 1:1.42.0-19.0.1.module+el8.7.0+20916+50473d5a |
Vulnerabilities 4
-
Medium 6.5
An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended for…
-
Medium 6.5
An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not…
-
Medium 6.5
An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of…
-
Unscored —
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest drive…