Skip to content
OpenAdvisories
Medium ELSA-2024-3253 1 CVE

Moderate: virt:ol and virt-devel:ol security update (Oracle Linux 8)

Published May 30, 2024 · Updated May 30, 2024

Summary

hivex
libguestfs
libguestfs-winsupport
libiscsi
libnbd
libtpms
libvirt
[8.0.0-23.1.0.1]
- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
- Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)

[8.0.0-23.1.el8]
- remote: check for negative array lengths before allocation (CVE-2024-2494)

libvirt-dbus
libvirt-python
nbdkit
netcf
perl-Sys-Virt
qemu-kvm
[6.2.0-49]
- kvm-glib-compat-Introduce-g_memdup2-wrapper.patch [RHEL-19628]
- kvm-ui-clipboard-mark-type-as-not-available-when-there-i.patch [RHEL-19628]
- kvm-virtio-net-correctly-copy-vnet-header-when-flushing-.patch [RHEL-19496]
- Resolves: RHEL-19628
(CVE-2023-6683 virt:rhel/qemu-kvm: QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() [rhel-8])
- Resolves: RHEL-19496
(CVE-2023-6693 virt:rhel/qemu-kvm: QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx() [rhel-8])

[6.2.0-48]
- kvm-iotests-add-filter_qmp_generated_node_ids.patch [RHEL-7353]
- kvm-iotests-port-141-to-Python-for-reliable-QMP-testing.patch [RHEL-7353]
- kvm-monitor-only-run-coroutine-commands-in-qemu_aio_cont.patch [RHEL-7353]
- kvm-iotests-Make-144-deterministic-again.patch [RHEL-7353]
- Resolves: RHEL-7353
([qemu-kvm] no response with QMP command device_add when repeatedly hotplug/unplug virtio disks [RHEL-8])

[6.2.0-47]
- kvm-s390x-pci-avoid-double-enable-disable-of-aif.patch [RHEL-22411]
- kvm-s390x-pci-refresh-fh-before-disabling-aif.patch [RHEL-22411]
- kvm-s390x-pci-drive-ISM-reset-from-subsystem-reset.patch [RHEL-22411]
- Resolves: RHEL-22411
([s390x] VM fails to start with ISM passed through)

[6.2.0-46]
- kvm-MAINTAINERS-split-out-s390x-sections.patch [RHEL-18214]
- kvm-s390x-pv-remove-semicolon-from-macro-definition.patch [RHEL-18214]
- kvm-hw-s390x-pv-Restrict-Protected-Virtualization-to-sys.patch [RHEL-18214]
- kvm-hw-s390x-Move-KVM-specific-PV-from-hw-to-target-s390.patch [RHEL-18214]
- kvm-target-s390x-kvm-pv-Provide-some-more-useful-informa.patch [RHEL-18214]
- Resolves: RHEL-18214
([RHEL8][Secure-execution][s390x] The error message is not clear when boot up a SE guest with wrong encryption)

[6.2.0-45]
- kvm-acpi-fix-acpi_index-migration.patch [RHEL-20189]
- kvm-RHEL-Enable-x-not-migrate-acpi-index-for-all-pre-RHE.patch [RHEL-20189]
- kvm-hw-arm-virt-Do-not-load-efi-virtio.rom-for-all-virti.patch [RHEL-14870]
- Resolves: RHEL-20189
([RHEL.8.10.0]Failed to migrate guest with pc (i440x) between RHELAV 8.4.0 and RHEL 8.10.0)
- Resolves: RHEL-14870
([rhel8]ipxe-roms-qemu does not provide efi-virtio.rom)

[6.2.0-44]
- kvm-hw-ide-reset-cancel-async-DMA-operation-before-reset.patch [RHEL-15437]
- kvm-tests-qtest-ahci-test-add-test-exposing-reset-issue-.patch [RHEL-15437]
- Resolves: RHEL-15437
(CVE-2023-5088 virt:rhel/qemu-kvm: QEMU: improper IDE controller reset can lead to MBR overwrite [rhel-8])

[6.2.0-43]
- kvm-net-Provide-MemReentrancyGuard-to-qemu_new_nic.patch [RHEL-7309]
- kvm-net-Update-MemReentrancyGuard-for-NIC.patch [RHEL-7309]
- kvm-vhost-release-memory_listener-object-in-error-path.patch [RHEL-7567]
- kvm-ui-fix-crash-when-there-are-no-active_console.patch [RHEL-2600]
- Resolves: RHEL-7309
(CVE-2023-3019 virt:rhel/qemu-kvm: QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() [rhel-8])
- Resolves: RHEL-7567
([RHEL8][clone]VM crash when guest running testpmd and delete created vhostuserclient port on host)
- Resolves: RHEL-2600
(qemu core dump occurs when client connects to VNC server because qemu cmd only adds vnc but without graphics device)

[6.2.0-42]
- kvm-target-s390x-dump-Remove-unneeded-dump-info-function.patch [RHEL-16696]
- kvm-dump-Add-arch-cleanup-function.patch [RHEL-16696]
- kvm-target-s390x-arch_dump-Add-arch-cleanup-function-for.patch [RHEL-16696]
- Resolves: RHEL-16696
(RHEL8 - KVM : Secure execution guest remains in 'paused' state, post 'virsh dump' failure (qemu-kvm))

[6.2.0-41]
- kvm-s390x-ap-fix-missing-subsystem-reset-registration.patch [bz#2111390]
- kvm-s390x-do-a-subsystem-reset-before-the-unprotect-on-r.patch [bz#2111390]
- kvm-redhat-Update-linux-headers-for-kvm_s390_vm_cpu_uv_f.patch [bz#2111390]
- kvm-target-s390x-kvm-Refactor-AP-functionalities.patch [bz#2111390]
- kvm-target-s390x-AP-passthrough-for-PV-guests.patch [bz#2111390]
- Resolves: bz#2111390
([IBM 8.10 FEAT] KVM: Enable Secure Execution Crypto Passthrough - qemu part)

seabios
sgabios
supermin
swtpm
virt-v2v

Fixed packages 129

ReleasePackageFixed in
Oracle Linux · 8 hivex 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 hivex-devel 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 libguestfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-appliance 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-bash-completion 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-devel 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-gfs2 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-gobject 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-gobject-devel 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-inspect-icons 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-java 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-java-devel 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-javadoc 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-man-pages-ja 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-man-pages-uk 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-rescue 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-rsync 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-tools 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-tools-c 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libguestfs-winsupport 0:8.10-1.module+el8.10.0+90308+7c659588
Oracle Linux · 8 libguestfs-xfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libiscsi 0:1.18.0-8.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libiscsi-devel 0:1.18.0-8.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libiscsi-utils 0:1.18.0-8.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libnbd 0:1.6.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libnbd-bash-completion 0:1.6.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libnbd-devel 0:1.6.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libtpms 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libtpms-devel 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libvirt 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-client 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-config-network 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-config-nwfilter 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-interface 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-network 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-nodedev 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-nwfilter 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-qemu 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-secret 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-storage 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-storage-core 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-storage-disk 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-storage-gluster 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-storage-iscsi-direct 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-storage-logical 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-storage-mpath 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-storage-rbd 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-driver-storage-scsi 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-daemon-kvm 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 libvirt-devel 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-docs 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-libs 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-lock-sanlock 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-nss 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 libvirt-wireshark 0:8.0.0-23.1.0.1.module+el8.10.0+90338+8c4cc6af
Oracle Linux · 8 lua-guestfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdfuse 0:1.6.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-bash-completion 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-basic-filters 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-basic-plugins 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-curl-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-devel 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-example-plugins 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-gzip-filter 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-gzip-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-linuxdisk-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-nbd-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-python-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-server 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-ssh-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-tar-filter 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-tar-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-tmpdisk-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-vddk-plugin 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 nbdkit-xz-filter 0:1.24.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 netcf 0:0.2.8-12.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 netcf-devel 0:0.2.8-12.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 netcf-libs 0:0.2.8-12.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 ocaml-hivex 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 ocaml-hivex-devel 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 ocaml-libguestfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 ocaml-libguestfs-devel 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 ocaml-libnbd 0:1.6.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 ocaml-libnbd-devel 0:1.6.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 perl-hivex 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 perl-Sys-Guestfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 perl-Sys-Virt 0:8.0.0-1.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 python3-hivex 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 python3-libguestfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 python3-libnbd 0:1.6.0-5.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 python3-libvirt 0:8.0.0-2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 qemu-guest-agent 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-img 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm-block-curl 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm-block-gluster 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm-block-iscsi 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm-block-rbd 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm-block-ssh 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm-common 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm-core 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm-docs 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm-hw-usbredir 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm-tests 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm-ui-opengl 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 qemu-kvm-ui-spice 15:6.2.0-49.module+el8.10.0+90330+d0258130
Oracle Linux · 8 ruby-hivex 0:1.3.18-23.module+el8.9.0+90075+85334608
Oracle Linux · 8 ruby-libguestfs 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 seabios 0:1.16.0-4.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 seabios-bin 0:1.16.0-4.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 seavgabios-bin 0:1.16.0-4.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 sgabios 1:0.20170427git-3.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 sgabios-bin 1:0.20170427git-3.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 supermin 0:5.2.1-2.0.1.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 supermin-devel 0:5.2.1-2.0.1.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 swtpm 0:0.7.0-4.20211109gitb79fd91.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 swtpm-devel 0:0.7.0-4.20211109gitb79fd91.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 swtpm-libs 0:0.7.0-4.20211109gitb79fd91.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 swtpm-tools 0:0.7.0-4.20211109gitb79fd91.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 swtpm-tools-pkcs11 0:0.7.0-4.20211109gitb79fd91.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 virt-dib 1:1.44.0-9.0.2.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 virt-v2v 1:1.42.0-22.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 virt-v2v-bash-completion 1:1.42.0-22.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 virt-v2v-man-pages-ja 1:1.42.0-22.module+el8.9.0+90052+d3bf71d8
Oracle Linux · 8 virt-v2v-man-pages-uk 1:1.42.0-22.module+el8.9.0+90052+d3bf71d8

Vulnerabilities 1