Skip to content
OpenAdvisories
High ELSA-2024-12604 5 CVEs

Important: virt:kvm_utils3 security update (Oracle Linux 8)

Published Sep 2, 2024 · Updated Sep 2, 2024

Summary

hivex
libguestfs
[1.44.0-9.0.2]
- libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755]

[1.44.0-9.0.1]
- Replace upstream references from description tag
- Config supermin to use host yum.conf in ol8 [Orabug: 29319324]
- Set DISTRO_ORACLE_LINUX correspeonding to ol

libguestfs-winsupport
libiscsi
libnbd
[1.6.0-5.el8]
- Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails
resolves: rhbz#2045718

[1.6.0-4.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)

[1.2.2]
- Resolves: bz#1844296
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.2.2-1]
- New stable release 1.2.2.

[1.2.1-1]
- New stable release 1.2.1.

[1.2.0-1]
- New stable release 1.2.0.

[1.0.3-1]
- New upstream version 1.0.3.
- Contains fix for remote code execution vulnerability.
- Add new libnbd-security(3) man page.

[1.0.2-1]
- New upstream version 1.0.2.
- Remove patches which are upstream.
- Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
- Fix previous commit message.

[1.0.1-2]
- Add upstream patch to fix nbdsh (for nbdkit tests).
- Fix interop tests on slow machines.

[1.0.1-1]
- New stable version 1.0.1.

[1.0.0-1]
- New upstream version 1.0.0.

[0.9.9-2]
- Rebuilt for Python 3.8

[0.9.9-1]
- New upstream version 0.9.9.

[0.9.8-4]
- Fix nbdkit dependencies so we're actually running the tests.
- Add glib2-devel BR so we build the glib main loop example.
- Add upstream patch to fix test error:
nbd_connect_unix: getlogin: No such device or address
- Fix test failure on 32 bit.

[0.9.8-3]
- Bump and rebuild to fix releng brokenness.
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2LIDI33G3IEIPYSCCIP6WWKNHY7XZJGQ/

[0.9.8-2]
- Rebuilt for Python 3.8

[0.9.8-1]
- New upstream version 0.9.8.
- Package the new nbd_*(3) man pages.

[0.9.7-1]
- New upstream version 0.9.7.
- Add libnbd-ocaml(3) man page.

[0.9.6-2]
- Add all upstream patches since 0.9.6 was released.
- Package the ocaml bindings into a subpackage.

[0.9.6-1]
- New upstream verison 0.9.6.

[0.1.9-1]
- New upstream version 0.1.9.

[0.1.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[0.1.8-1]
- New upstream version 0.1.8.

[0.1.7-1]
- New upstream version 0.1.7.

[0.1.6-1]
- New upstream version 0.1.6.

[0.1.5-1]
- New upstream version 0.1.5.

[0.1.4-1]
- New upstream version 0.1.4.

[0.1.2-2]
- Enable libxml2 for NBD URI support.

[0.1.2-1]
- New upstream version 0.1.2.

[0.1.1-1]
- Fix license in man pages and examples.
- Add nbdsh(1) man page.
- Include the signature and keyring even if validation is disabled.
- Update devel subpackage license.
- Fix old FSF address in Python tests.
- Filter Python provides.
- Remove executable permission on the tar.gz.sig file.
- Initial release.

libtpms
libvirt
[9.0.0-6.el8]
- rpc: ensure temporary GSource is removed from client event loop (Daniel P. Berrange) [Orabug: 36821472] {CVE-2024-4418}
- rpc: Don't warn about 'max_client_requests' in single-threaded daemons (Peter Krempa) [Orabug: 36422853]

[9.0.0-5.el8]
- Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364464] {CVE-2024-1441}

[9.0.0-4.el8]
- qemuProcessRefreshDisks: Extract update of a single disk (Peter Krempa) [Orabug: 35885348]
- qemuProcessRefreshDisks: Properly compare tray status (Peter Krempa) [Orabug: 35885348]

[9.0.0-3.el8]
- storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
- virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
- qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469]

[9.0.0-2.el8]
- qemu_migration: don't block migration for network hostdev (Joao Martins)
- util: basic support for VFIO variant drivers (Laine Stump)

[9.0.0-1.el8]
- Update to libvirt 9.0.0 (Karl Heubaum)

[7.10.0-2.el8]
- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 34069688]

[7.10.0-1.el8]
- Update to libvirt 7.10.0 (Wim ten Have)

[7.9.0-1.el8]
- Update to libvirt 7.9.0 (Wim ten Have)

[5.7.0-31.el8]
- qemu: Do not latch guestCPUs when guests hotplug with active domain groups (Wim ten Have) [Orabug: 33440015]

[5.7.0-30.el8]
- qemuDomainSnapshotDiskPrepareOne: Fix logic of relative backing store update (Peter Krempa) [Orabug: 33086913]
- qemu: Don't set NVRAM label when creating it (Michal Privoznik) [Orabug: 33319048]
- qemu: protect guestCPUs from drift under vcpu guest timeouts (Wim ten Have) [Orabug: 33368490]

[5.7.0-29.el8]
- qemu: vCORE distribution under vNUMA host partitioning should balance guests vCPU:pCPU pinning (Wim ten Have) [Orabug: 32355455]
- qemuDomainSnapshotDiskPrepareOne: Don't load the relative path with blockdev (Peter Krempa) [Orabug: 33151464]
- qemu: block: Support VIR_DOMAIN_BLOCK_COMMIT/PULL/REBASE_RELATIVE with blockdev (Peter Krempa) [Orabug: 33151464]
- qemu: Tell secdrivers which images are top parent (Michal Privoznik) [Orabug: 33086913]
- security: Introduce VIR_SECURITY_DOMAIN_IMAGE_PARENT_CHAIN_TOP flag (Michal Privoznik) [Orabug: 33086913]

[5.7.0-28.el8]
- qemu_capabilities: Rework domain caps cache (Michal Privoznik) [Orabug: 32664432]
- tests: fix virArchFromHost() redefine error (Joe Jin) [Orabug: 32664432]
- qemu: cache host arch separately from virCapsPtr (Daniel P. Berrange) [Orabug: 32664432]
- cpu.c: Check properly for virCapabilitiesGetNodeInfo() retval (Michal Privoznik) [Orabug: 32664432]
- virStorageSourceParseBackingJSONRaw: Parse 'offset' and 'size' attributes (Peter Krempa) [Orabug: 32164351]
- tests: qemu: Add test data for the new <slice> element (Peter Krempa) [Orabug: 32164351]
- qemu: Add support for slices of type 'storage' (Peter Krempa) [Orabug: 32164351]
- tests: qemublock: Add cases for creating image overlays on top of disks with <slice> (Peter Krempa) [Orabug: 32164351]
- qemu: block: P

Fixed packages 120

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.18-23.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 hivex-devel 0:1.3.18-23.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-appliance 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-bash-completion 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-devel 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-gfs2 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-gobject 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-gobject-devel 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-inspect-icons 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-java 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-java-devel 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-javadoc 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-rescue 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-rsync 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-tools 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-tools-c 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-winsupport 0:8.10-1.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libguestfs-xfs 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libnbd 0:1.6.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libnbd-bash-completion 0:1.6.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libnbd-devel 0:1.6.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libtpms 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libtpms-devel 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-client 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-client-qemu 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-config-network 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-interface 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-network 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-secret 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-storage 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi-direct 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-daemon-kvm 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-devel 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-docs 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-libs 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-lock-sanlock 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-nss 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 libvirt-wireshark 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 lua-guestfs 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdfuse 0:1.6.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-bash-completion 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-basic-filters 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-basic-plugins 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-curl-plugin 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-devel 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-example-plugins 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-gzip-filter 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-gzip-plugin 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-linuxdisk-plugin 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-nbd-plugin 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-python-plugin 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-server 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-ssh-plugin 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-tar-filter 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-tar-plugin 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-tmpdisk-plugin 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-vddk-plugin 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 nbdkit-xz-filter 0:1.24.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 perl-hivex 0:1.3.18-23.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 perl-Sys-Guestfs 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 perl-Sys-Virt 0:8.0.0-1.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 python3-hivex 0:1.3.18-23.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 python3-libguestfs 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 python3-libnbd 0:1.6.0-5.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 python3-libvirt 0:9.0.0-6.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 qemu-guest-agent 15:7.2.0-15.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 qemu-img 15:7.2.0-15.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 qemu-kvm 15:7.2.0-15.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 qemu-kvm-block-curl 15:7.2.0-15.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 qemu-kvm-block-gluster 15:7.2.0-15.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 qemu-kvm-block-iscsi 15:7.2.0-15.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 qemu-kvm-block-rbd 15:7.2.0-15.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 qemu-kvm-block-ssh 15:7.2.0-15.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 qemu-kvm-common 15:7.2.0-15.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 qemu-kvm-core 15:7.2.0-15.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 qemu-virtiofsd 15:7.2.0-15.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 ruby-hivex 0:1.3.18-23.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 ruby-libguestfs 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 seabios 0:1.16.0-4.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 seabios-bin 0:1.16.0-4.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 seavgabios-bin 0:1.16.0-4.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 supermin 0:5.2.1-2.0.1.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 supermin-devel 0:5.2.1-2.0.1.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 swtpm 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 swtpm-devel 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 swtpm-libs 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 swtpm-tools 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 swtpm-tools-pkcs11 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 virt-dib 1:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 virt-v2v 1:1.42.0-22.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 virt-v2v-bash-completion 1:1.42.0-22.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 virt-v2v-man-pages-ja 1:1.42.0-22.module+el8.10.0+90377+6a12a345
Oracle Linux · 8 virt-v2v-man-pages-uk 1:1.42.0-22.module+el8.10.0+90377+6a12a345

Vulnerabilities 5