ELSA-2020-4059

Опубликовано: 01 окт. 2020

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2020-4059: virt:ol security update (IMPORTANT)

qemu-kvm [2.12.0-99.0.1.el8_2.4]

Added bug30251155-remove-upstream-reference [Orabug: 30251155]

[2.12.0-99.el8_2.4]

kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869708]
Resolves: bz#1869708 (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-8.2.0.z])

[2.12.0-99.el8_2.3]

kvm-Drop-bogus-IPv6-messages.patch [bz#1838092 bz#1867075 bz#1870421]
Resolves: bz#1838092 (CVE-2020-10756 virt:8.2/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])
Resolves: bz#1867075 (CVE-2020-10756 virt:8.3/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])
Resolves: bz#1870421 (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-8.2.0.z])

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

Module virt:ol is enabled

hivex

1.3.15-7.module+el8.2.0+5598+5fbb295f

hivex-devel

1.3.15-7.module+el8.2.0+5598+5fbb295f

libguestfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-bash-completion

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-benchmarking

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-devel

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-gfs2

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-gobject

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-gobject-devel

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-inspect-icons

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-java

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-java-devel

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-javadoc

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-man-pages-ja

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-man-pages-uk

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-rescue

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-rsync

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-tools

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-tools-c

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-winsupport

8.0-4.module+el8.2.0+5598+5fbb295f

libguestfs-xfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libiscsi

1.18.0-8.module+el8.2.0+5598+5fbb295f

libiscsi-devel

1.18.0-8.module+el8.2.0+5598+5fbb295f

libiscsi-utils

1.18.0-8.module+el8.2.0+5598+5fbb295f

libvirt

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-admin

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-bash-completion

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-client

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-config-network

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-config-nwfilter

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-interface

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-network

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-nodedev

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-nwfilter

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-qemu

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-secret

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-core

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-disk

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-gluster

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-iscsi

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-logical

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-mpath

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-rbd

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-scsi

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-kvm

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-dbus

1.2.0-3.module+el8.2.0+5598+5fbb295f

libvirt-devel

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-docs

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-libs

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-lock-sanlock

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-nss

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

lua-guestfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

nbdkit

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-bash-completion

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-basic-plugins

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-devel

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-example-plugins

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-plugin-gzip

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-plugin-python-common

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-plugin-python3

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-plugin-xz

1.4.2-5.module+el8.2.0+5598+5fbb295f

netcf

0.2.8-12.module+el8.2.0+5598+5fbb295f

netcf-devel

0.2.8-12.module+el8.2.0+5598+5fbb295f

netcf-libs

0.2.8-12.module+el8.2.0+5598+5fbb295f

ocaml-hivex

1.3.15-7.module+el8.2.0+5598+5fbb295f

ocaml-hivex-devel

1.3.15-7.module+el8.2.0+5598+5fbb295f

ocaml-libguestfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

ocaml-libguestfs-devel

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

perl-Sys-Guestfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

perl-Sys-Virt

4.5.0-5.module+el8.2.0+5598+5fbb295f

perl-hivex

1.3.15-7.module+el8.2.0+5598+5fbb295f

python3-hivex

1.3.15-7.module+el8.2.0+5598+5fbb295f

python3-libguestfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

python3-libvirt

4.5.0-2.module+el8.2.0+5598+5fbb295f

qemu-guest-agent

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-img

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-block-curl

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-block-iscsi

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-block-rbd

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-block-ssh

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-common

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-core

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

ruby-hivex

1.3.15-7.module+el8.2.0+5598+5fbb295f

ruby-libguestfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

supermin

5.1.19-9.module+el8.2.0+5598+5fbb295f

supermin-devel

5.1.19-9.module+el8.2.0+5598+5fbb295f

virt-dib

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

Module virt-devel:ol is enabled

qemu-kvm-tests

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

Oracle Linux x86_64

Module virt:ol is enabled

hivex

1.3.15-7.module+el8.2.0+5598+5fbb295f

hivex-devel

1.3.15-7.module+el8.2.0+5598+5fbb295f

libguestfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-bash-completion

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-benchmarking

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-devel

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-gfs2

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-gobject

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-gobject-devel

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-inspect-icons

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-java

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-java-devel

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-javadoc

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-man-pages-ja

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-man-pages-uk

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-rescue

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-rsync

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-tools

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-tools-c

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libguestfs-winsupport

8.0-4.module+el8.2.0+5598+5fbb295f

libguestfs-xfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

libiscsi

1.18.0-8.module+el8.2.0+5598+5fbb295f

libiscsi-devel

1.18.0-8.module+el8.2.0+5598+5fbb295f

libiscsi-utils

1.18.0-8.module+el8.2.0+5598+5fbb295f

libvirt

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-admin

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-bash-completion

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-client

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-config-network

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-config-nwfilter

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-interface

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-network

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-nodedev

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-nwfilter

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-qemu

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-secret

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-core

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-disk

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-gluster

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-iscsi

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-logical

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-mpath

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-rbd

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-driver-storage-scsi

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-daemon-kvm

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-dbus

1.2.0-3.module+el8.2.0+5598+5fbb295f

libvirt-devel

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-docs

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-libs

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-lock-sanlock

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

libvirt-nss

4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f

lua-guestfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

nbdkit

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-bash-completion

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-basic-plugins

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-devel

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-example-plugins

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-plugin-gzip

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-plugin-python-common

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-plugin-python3

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-plugin-vddk

1.4.2-5.module+el8.2.0+5598+5fbb295f

nbdkit-plugin-xz

1.4.2-5.module+el8.2.0+5598+5fbb295f

netcf

0.2.8-12.module+el8.2.0+5598+5fbb295f

netcf-devel

0.2.8-12.module+el8.2.0+5598+5fbb295f

netcf-libs

0.2.8-12.module+el8.2.0+5598+5fbb295f

ocaml-hivex

1.3.15-7.module+el8.2.0+5598+5fbb295f

ocaml-hivex-devel

1.3.15-7.module+el8.2.0+5598+5fbb295f

ocaml-libguestfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

ocaml-libguestfs-devel

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

perl-Sys-Guestfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

perl-Sys-Virt

4.5.0-5.module+el8.2.0+5598+5fbb295f

perl-hivex

1.3.15-7.module+el8.2.0+5598+5fbb295f

python3-hivex

1.3.15-7.module+el8.2.0+5598+5fbb295f

python3-libguestfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

python3-libvirt

4.5.0-2.module+el8.2.0+5598+5fbb295f

qemu-guest-agent

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-img

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-block-curl

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-block-gluster

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-block-iscsi

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-block-rbd

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-block-ssh

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-common

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

qemu-kvm-core

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

ruby-hivex

1.3.15-7.module+el8.2.0+5598+5fbb295f

ruby-libguestfs

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

seabios

1.11.1-4.module+el8.2.0+5598+5fbb295f

seabios-bin

1.11.1-4.module+el8.2.0+5598+5fbb295f

seavgabios-bin

1.11.1-4.module+el8.2.0+5598+5fbb295f

sgabios

0.20170427git-3.module+el8.2.0+5598+5fbb295f

sgabios-bin

0.20170427git-3.module+el8.2.0+5598+5fbb295f

supermin

5.1.19-9.module+el8.2.0+5598+5fbb295f

supermin-devel

5.1.19-9.module+el8.2.0+5598+5fbb295f

virt-dib

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

virt-v2v

1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

Module virt-devel:ol is enabled

qemu-kvm-tests

2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4

Связанные CVE

CVE-2020-14364

CVE-2020-10756

Ссылки на источники

Связанные уязвимости

RLSA-2020:4059

rocky

больше 4 лет назад

Important: virt:rhel security update

SUSE-SU-2021:1918-1

suse-cvrf

около 4 лет назад

Security update for qemu

SUSE-SU-2021:1947-1

suse-cvrf

около 4 лет назад

Security update for qemu

SUSE-SU-2021:1895-1

suse-cvrf

около 4 лет назад

Security update for qemu

SUSE-SU-2021:1894-1

suse-cvrf

около 4 лет назад

Security update for qemu