Skip to content
OpenAdvisories
High ELSA-2023-12342 2 CVEs

Important: virt:kvm_utils security update (Oracle Linux 8)

Published May 15, 2023 · Updated May 15, 2023

Summary

hivex
libguestfs
libguestfs-winsupport
libiscsi
libnbd
libvirt
[5.7.0-40]
- build: change dependency to allow post install erasing of /usr/bin/nc (Wim ten Have) [Orabug: 35289777]
- util: Make virFileClose() quiet on success (Andrea Bolognani) [Orabug: 35090886]

[5.7.0-39]
- exadata: update maxvcpus for vNUMA only (Shaleen Bathla) [Orabug: 34863357]

libvirt-dbus
libvirt-python
[5.7.0-40]
- Bump version number to 5.7.0-40 to match libvirt (Karl Heubaum)

[5.7.0-39]
- Bump version number to 5.7.0-39 to match libvirt (Karl Heubaum)

nbdkit
netcf
perl-Sys-Virt
qemu-kvm
[4.2.1-26]
- migration: check magic value for deciding the mapping of channels (Manish Mishra) [Orabug: 34735462]
- io: Add support for MSG_PEEK for socket channel (Manish Mishra) [Orabug: 34735462]
- migration: Move channel setup out of postcopy_try_recover() (Peter Xu) [Orabug: 34735462]
- vdpa: commit all host notifier MRs in a single MR transaction (Mike Longpeng) [Orabug: 35252234]
- vhost: configure all host notifiers in a single MR transaction (Mike Longpeng) [Orabug: 35252234]
- vhost: simplify vhost_dev_enable_notifiers (Mike Longpeng) [Orabug: 35252234]
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 35055290]
- qga/win32: Use rundll for VSS installation (Konstantin Kostiuk) [Orabug: 35206108] {CVE-2023-0664}
- qga/win32: Remove change action from MSI installer (Konstantin Kostiuk) [Orabug: 35206108] {CVE-2023-0664}
- hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daude) [Orabug: 34846087]
- hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daude) [Orabug: 34846087] {CVE-2022-4144}
- hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 34846087]
- hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 34846087]
- hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daude) [Orabug: 34846087]
- virtio-blk: On restart, process queued requests in the proper context (Sergio Lopez) [Orabug: 35060530]
- virtio-blk: Refactor the code that processes queued requests (Sergio Lopez) [Orabug: 35060530]
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219223]
- modules: load modules from /var/run/qemu/ directory firstly (Siddhi Katage) [Orabug: 34867783]
- qemu.spec: Add post-install script for block storage modules (Siddhi Katage) [Orabug: 34867783]
- qemu.spec: Enable '-module-upgrades' for OL7 (Siddhi Katage) [Orabug: 34867783]
- module: increase dirs array size by one (Bruce Rogers) [Orabug: 34867783]
- modules: load modules from versioned /var/run dir (Christian Ehrhardt) [Orabug: 34867783]
- blockjob: Fix crash with IOthread when block commit after snapshot (Michael Qiu) [Orabug: 35118668]

[4.2.1-25]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 34641255]
- i386/kvm: fix a use-after-free when vcpu plug/unplug (Pan Nengyuan) [Orabug: 34859902]
- memory: batch allocate ioeventfds[] in address_space_update_ioeventfds() (Stefan Hajnoczi) [Orabug: 34538900]
- virtio-blk: Fix clean up of host notifiers for single MR transaction (Mark Mielke) [Orabug: 34538900]
- virtio-scsi: Configure all host notifiers in a single MR transaction (Greg Kurz) [Orabug: 34538900]
- virtio-scsi: Set host notifiers and callbacks separately (Greg Kurz) [Orabug: 34538900]
- virtio-blk: Configure all host notifiers in a single MR transaction (Greg Kurz) [Orabug: 34538900]
- virtio-blk: Fix rollback path in virtio_blk_data_plane_start() (Greg Kurz) [Orabug: 34538900]
- event_notifier: Set ->initialized earlier in event_notifier_init() (Greg Kurz) [Orabug: 34538900]
- virtio-scsi: don't process IO on fenced dataplane (Maxim Levitsky) [Orabug: 34538900]
- virtio-scsi: don't uninitialize queues that we didn't initialize (Maxim Levitsky) [Orabug: 34538900]
- hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)

seabios
sgabios
supermin

Fixed packages 103

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.18-21.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 hivex-devel 0:1.3.18-21.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-bash-completion 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-benchmarking 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-devel 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-gfs2 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-gobject 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-gobject-devel 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-inspect-icons 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-java 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-java-devel 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-javadoc 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-rescue 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-rsync 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-tools 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-tools-c 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-winsupport 0:8.2-1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libguestfs-xfs 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libnbd 0:1.2.2-1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libnbd-devel 0:1.2.2-1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-admin 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-bash-completion 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-client 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-config-network 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-interface 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-network 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-secret 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-storage 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi-direct 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-daemon-kvm 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-devel 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-docs 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-libs 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-lock-sanlock 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 libvirt-nss 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 lua-guestfs 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdfuse 0:1.2.2-1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-bash-completion 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-basic-filters 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-basic-plugins 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-curl-plugin 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-devel 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-example-plugins 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-gzip-plugin 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-linuxdisk-plugin 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-python-plugin 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-server 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-ssh-plugin 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-vddk-plugin 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 nbdkit-xz-filter 0:1.16.2-4.0.1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 perl-hivex 0:1.3.18-21.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 perl-Sys-Guestfs 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 perl-Sys-Virt 0:4.5.0-5.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 python3-hivex 0:1.3.18-21.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 python3-libguestfs 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 python3-libnbd 0:1.2.2-1.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 python3-libvirt 0:5.7.0-40.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 qemu-guest-agent 15:4.2.1-26.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 qemu-img 15:4.2.1-26.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 qemu-kvm 15:4.2.1-26.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 qemu-kvm-block-curl 15:4.2.1-26.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 qemu-kvm-block-gluster 15:4.2.1-26.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 qemu-kvm-block-iscsi 15:4.2.1-26.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 qemu-kvm-block-rbd 15:4.2.1-26.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 qemu-kvm-block-ssh 15:4.2.1-26.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 qemu-kvm-common 15:4.2.1-26.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 qemu-kvm-core 15:4.2.1-26.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 ruby-hivex 0:1.3.18-21.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 ruby-libguestfs 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 seabios 0:1.16.0-3.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 seabios-bin 0:1.16.0-3.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 seavgabios-bin 0:1.16.0-3.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 supermin 0:5.1.19-10.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 supermin-devel 0:5.1.19-10.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 virt-dib 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348
Oracle Linux · 8 virt-v2v 1:1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

Vulnerabilities 2