Skip to content
OpenAdvisories
High ELSA-2023-12195 4 CVEs

Important: virt:kvm_utils2 security update (Oracle Linux 8)

Published Mar 17, 2023 · Updated Mar 17, 2023

Summary

qemu-kvm
[6.1.1-5-el8]
- hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daude) [Orabug: 35060182]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daude) [Orabug: 35060182] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 35060182]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 35060182]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daude) [Orabug: 35060182]
- ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165}
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
- vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160]
- hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172}
- target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975]
- x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975]
- x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975]
- x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975]
- x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975]
- x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975]
- x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975]
- x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975]
- linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975]
- linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975]
- linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975]
- i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins)
- i386/pc: relocate 4g start to 1T where applicable (Joao Martins)
- i386/pc: bounds check phys-bits against max used GPA (Joao Martins)
- i386/pc: factor out device_memory base/size to helper (Joao Martins)
- i386/pc: factor out above-4g end to an helper (Joao Martins)
- i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins)
- i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins)
- hw/i386: add 4g boundary start to X86MachineState (Joao Martins)
- vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset (Si-Wei Liu)
- net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
- vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)

Fixed packages 119

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.18-23.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 hivex-devel 0:1.3.18-23.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-appliance 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-bash-completion 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-devel 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-gfs2 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-gobject 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-gobject-devel 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-inspect-icons 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-java 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-java-devel 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-javadoc 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-rescue 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-rsync 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-tools 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-tools-c 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-winsupport 0:8.6-1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libguestfs-xfs 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libnbd 0:1.6.0-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libnbd-bash-completion 0:1.6.0-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libnbd-devel 0:1.6.0-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libtpms 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libtpms-devel 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-client 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-config-network 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-interface 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-network 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-secret 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-storage 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi-direct 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-daemon-kvm 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-devel 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-docs 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-libs 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-lock-sanlock 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-nss 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 libvirt-wireshark 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 lua-guestfs 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdfuse 0:1.6.0-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-bash-completion 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-basic-filters 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-basic-plugins 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-curl-plugin 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-devel 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-example-plugins 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-gzip-filter 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-gzip-plugin 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-linuxdisk-plugin 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-nbd-plugin 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-python-plugin 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-server 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-ssh-plugin 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-tar-filter 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-tar-plugin 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-tmpdisk-plugin 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-vddk-plugin 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 nbdkit-xz-filter 0:1.24.0-4.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 perl-hivex 0:1.3.18-23.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 perl-Sys-Guestfs 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 perl-Sys-Virt 0:6.0.0-1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 python3-hivex 0:1.3.18-23.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 python3-libguestfs 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 python3-libnbd 0:1.6.0-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 python3-libvirt 0:7.10.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 qemu-guest-agent 15:6.1.1-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 qemu-img 15:6.1.1-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 qemu-kvm 15:6.1.1-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 qemu-kvm-block-curl 15:6.1.1-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 qemu-kvm-block-gluster 15:6.1.1-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 qemu-kvm-block-iscsi 15:6.1.1-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 qemu-kvm-block-rbd 15:6.1.1-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 qemu-kvm-block-ssh 15:6.1.1-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 qemu-kvm-common 15:6.1.1-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 qemu-kvm-core 15:6.1.1-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 qemu-virtiofsd 15:6.1.1-5.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 ruby-hivex 0:1.3.18-23.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 ruby-libguestfs 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 seabios 0:1.15.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 seabios-bin 0:1.15.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 seavgabios-bin 0:1.15.0-2.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 supermin 0:5.2.1-1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 supermin-devel 0:5.2.1-1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 swtpm 0:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 swtpm-devel 0:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 swtpm-libs 0:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 swtpm-tools 0:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 swtpm-tools-pkcs11 0:0.7.0-3.20211109gitb79fd91.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 virt-dib 1:1.44.0-5.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 virt-v2v 1:1.42.0-19.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 virt-v2v-bash-completion 1:1.42.0-19.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 virt-v2v-man-pages-ja 1:1.42.0-19.0.1.module+el8.7.0+20916+50473d5a
Oracle Linux · 8 virt-v2v-man-pages-uk 1:1.42.0-19.0.1.module+el8.7.0+20916+50473d5a

Vulnerabilities 4