ELSA-2023-12342

Опубликовано: 15 мая 2023

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2023-12342: virt:kvm_utils security update (IMPORTANT)

hivex libguestfs libguestfs-winsupport libiscsi libnbd libvirt [5.7.0-40]

build: change dependency to allow post install erasing of /usr/bin/nc (Wim ten Have) [Orabug: 35289777]
util: Make virFileClose() quiet on success (Andrea Bolognani) [Orabug: 35090886]

[5.7.0-39]

exadata: update maxvcpus for vNUMA only (Shaleen Bathla) [Orabug: 34863357]

libvirt-dbus libvirt-python [5.7.0-40]

Bump version number to 5.7.0-40 to match libvirt (Karl Heubaum)

[5.7.0-39]

Bump version number to 5.7.0-39 to match libvirt (Karl Heubaum)

nbdkit netcf perl-Sys-Virt qemu-kvm [4.2.1-26]

migration: check magic value for deciding the mapping of channels (Manish Mishra) [Orabug: 34735462]
io: Add support for MSG_PEEK for socket channel (Manish Mishra) [Orabug: 34735462]
migration: Move channel setup out of postcopy_try_recover() (Peter Xu) [Orabug: 34735462]
vdpa: commit all host notifier MRs in a single MR transaction (Mike Longpeng) [Orabug: 35252234]
vhost: configure all host notifiers in a single MR transaction (Mike Longpeng) [Orabug: 35252234]
vhost: simplify vhost_dev_enable_notifiers (Mike Longpeng) [Orabug: 35252234]
pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 35055290]
qga/win32: Use rundll for VSS installation (Konstantin Kostiuk) [Orabug: 35206108] {CVE-2023-0664}
qga/win32: Remove change action from MSI installer (Konstantin Kostiuk) [Orabug: 35206108] {CVE-2023-0664}
hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daude) [Orabug: 34846087]
hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daude) [Orabug: 34846087] {CVE-2022-4144}
hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 34846087]
hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 34846087]
hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daude) [Orabug: 34846087]
virtio-blk: On restart, process queued requests in the proper context (Sergio Lopez) [Orabug: 35060530]
virtio-blk: Refactor the code that processes queued requests (Sergio Lopez) [Orabug: 35060530]
hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219223]
modules: load modules from /var/run/qemu/ directory firstly (Siddhi Katage) [Orabug: 34867783]
qemu.spec: Add post-install script for block storage modules (Siddhi Katage) [Orabug: 34867783]
qemu.spec: Enable '-module-upgrades' for OL7 (Siddhi Katage) [Orabug: 34867783]
module: increase dirs array size by one (Bruce Rogers) [Orabug: 34867783]
modules: load modules from versioned /var/run dir (Christian Ehrhardt) [Orabug: 34867783]
blockjob: Fix crash with IOthread when block commit after snapshot (Michael Qiu) [Orabug: 35118668]

[4.2.1-25]

target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 34641255]
i386/kvm: fix a use-after-free when vcpu plug/unplug (Pan Nengyuan) [Orabug: 34859902]
memory: batch allocate ioeventfds[] in address_space_update_ioeventfds() (Stefan Hajnoczi) [Orabug: 34538900]
virtio-blk: Fix clean up of host notifiers for single MR transaction (Mark Mielke) [Orabug: 34538900]
virtio-scsi: Configure all host notifiers in a single MR transaction (Greg Kurz) [Orabug: 34538900]
virtio-scsi: Set host notifiers and callbacks separately (Greg Kurz) [Orabug: 34538900]
virtio-blk: Configure all host notifiers in a single MR transaction (Greg Kurz) [Orabug: 34538900]
virtio-blk: Fix rollback path in virtio_blk_data_plane_start() (Greg Kurz) [Orabug: 34538900]
event_notifier: Set ->initialized earlier in event_notifier_init() (Greg Kurz) [Orabug: 34538900]
virtio-scsi: don't process IO on fenced dataplane (Maxim Levitsky) [Orabug: 34538900]
virtio-scsi: don't uninitialize queues that we didn't initialize (Maxim Levitsky) [Orabug: 34538900]
hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)

seabios sgabios supermin

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

Module virt:kvm_utils is enabled

hivex

1.3.18-21.module+el8.7.0+21037+8ee66348

hivex-devel

1.3.18-21.module+el8.7.0+21037+8ee66348

libguestfs

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-bash-completion

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-benchmarking

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-devel

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-gfs2

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-gobject

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-gobject-devel

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-inspect-icons

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-java

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-java-devel

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-javadoc

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-man-pages-ja

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-man-pages-uk

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-rescue

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-rsync

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-tools

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-tools-c

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-winsupport

8.2-1.module+el8.7.0+21037+8ee66348

libguestfs-xfs

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libiscsi

1.18.0-8.module+el8.7.0+21037+8ee66348

libiscsi-devel

1.18.0-8.module+el8.7.0+21037+8ee66348

libiscsi-utils

1.18.0-8.module+el8.7.0+21037+8ee66348

libnbd

1.2.2-1.module+el8.7.0+21037+8ee66348

libnbd-devel

1.2.2-1.module+el8.7.0+21037+8ee66348

libvirt

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-admin

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-bash-completion

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-client

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-config-network

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-config-nwfilter

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-interface

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-network

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-nodedev

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-nwfilter

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-qemu

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-secret

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-core

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-disk

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-gluster

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-iscsi

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-iscsi-direct

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-logical

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-mpath

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-rbd

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-scsi

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-kvm

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-dbus

1.3.0-2.module+el8.7.0+21037+8ee66348

libvirt-devel

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-docs

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-libs

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-lock-sanlock

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-nss

5.7.0-40.module+el8.7.0+21037+8ee66348

lua-guestfs

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

nbdfuse

1.2.2-1.module+el8.7.0+21037+8ee66348

nbdkit

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-bash-completion

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-basic-filters

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-basic-plugins

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-curl-plugin

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-devel

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-example-plugins

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-gzip-plugin

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-linuxdisk-plugin

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-python-plugin

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-server

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-ssh-plugin

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-xz-filter

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

netcf

0.2.8-12.module+el8.7.0+21037+8ee66348

netcf-devel

0.2.8-12.module+el8.7.0+21037+8ee66348

netcf-libs

0.2.8-12.module+el8.7.0+21037+8ee66348

perl-Sys-Guestfs

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

perl-Sys-Virt

4.5.0-5.module+el8.7.0+21037+8ee66348

perl-hivex

1.3.18-21.module+el8.7.0+21037+8ee66348

python3-hivex

1.3.18-21.module+el8.7.0+21037+8ee66348

python3-libguestfs

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

python3-libnbd

1.2.2-1.module+el8.7.0+21037+8ee66348

python3-libvirt

5.7.0-40.module+el8.7.0+21037+8ee66348

qemu-guest-agent

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-img

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-block-curl

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-block-gluster

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-block-iscsi

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-block-rbd

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-block-ssh

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-common

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-core

4.2.1-26.module+el8.7.0+21037+8ee66348

ruby-hivex

1.3.18-21.module+el8.7.0+21037+8ee66348

ruby-libguestfs

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

supermin

5.1.19-10.module+el8.7.0+21037+8ee66348

supermin-devel

5.1.19-10.module+el8.7.0+21037+8ee66348

virt-dib

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

Oracle Linux x86_64

Module virt:kvm_utils is enabled

hivex

1.3.18-21.module+el8.7.0+21037+8ee66348

hivex-devel

1.3.18-21.module+el8.7.0+21037+8ee66348

libguestfs

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-bash-completion

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-benchmarking

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-devel

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-gfs2

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-gobject

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-gobject-devel

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-inspect-icons

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-java

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-java-devel

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-javadoc

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-man-pages-ja

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-man-pages-uk

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-rescue

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-rsync

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-tools

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-tools-c

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libguestfs-winsupport

8.2-1.module+el8.7.0+21037+8ee66348

libguestfs-xfs

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

libiscsi

1.18.0-8.module+el8.7.0+21037+8ee66348

libiscsi-devel

1.18.0-8.module+el8.7.0+21037+8ee66348

libiscsi-utils

1.18.0-8.module+el8.7.0+21037+8ee66348

libnbd

1.2.2-1.module+el8.7.0+21037+8ee66348

libnbd-devel

1.2.2-1.module+el8.7.0+21037+8ee66348

libvirt

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-admin

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-bash-completion

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-client

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-config-network

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-config-nwfilter

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-interface

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-network

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-nodedev

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-nwfilter

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-qemu

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-secret

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-core

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-disk

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-gluster

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-iscsi

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-iscsi-direct

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-logical

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-mpath

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-rbd

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-driver-storage-scsi

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-daemon-kvm

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-dbus

1.3.0-2.module+el8.7.0+21037+8ee66348

libvirt-devel

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-docs

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-libs

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-lock-sanlock

5.7.0-40.module+el8.7.0+21037+8ee66348

libvirt-nss

5.7.0-40.module+el8.7.0+21037+8ee66348

lua-guestfs

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

nbdfuse

1.2.2-1.module+el8.7.0+21037+8ee66348

nbdkit

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-bash-completion

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-basic-filters

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-basic-plugins

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-curl-plugin

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-devel

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-example-plugins

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-gzip-plugin

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-linuxdisk-plugin

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-python-plugin

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-server

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-ssh-plugin

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-vddk-plugin

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

nbdkit-xz-filter

1.16.2-4.0.1.module+el8.7.0+21037+8ee66348

netcf

0.2.8-12.module+el8.7.0+21037+8ee66348

netcf-devel

0.2.8-12.module+el8.7.0+21037+8ee66348

netcf-libs

0.2.8-12.module+el8.7.0+21037+8ee66348

perl-Sys-Guestfs

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

perl-Sys-Virt

4.5.0-5.module+el8.7.0+21037+8ee66348

perl-hivex

1.3.18-21.module+el8.7.0+21037+8ee66348

python3-hivex

1.3.18-21.module+el8.7.0+21037+8ee66348

python3-libguestfs

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

python3-libnbd

1.2.2-1.module+el8.7.0+21037+8ee66348

python3-libvirt

5.7.0-40.module+el8.7.0+21037+8ee66348

qemu-guest-agent

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-img

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-block-curl

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-block-gluster

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-block-iscsi

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-block-rbd

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-block-ssh

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-common

4.2.1-26.module+el8.7.0+21037+8ee66348

qemu-kvm-core

4.2.1-26.module+el8.7.0+21037+8ee66348

ruby-hivex

1.3.18-21.module+el8.7.0+21037+8ee66348

ruby-libguestfs

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

seabios

1.16.0-3.module+el8.7.0+21037+8ee66348

seabios-bin

1.16.0-3.module+el8.7.0+21037+8ee66348

seavgabios-bin

1.16.0-3.module+el8.7.0+21037+8ee66348

sgabios

0.20170427git-3.module+el8.7.0+21037+8ee66348

sgabios-bin

0.20170427git-3.module+el8.7.0+21037+8ee66348

supermin

5.1.19-10.module+el8.7.0+21037+8ee66348

supermin-devel

5.1.19-10.module+el8.7.0+21037+8ee66348

virt-dib

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

virt-v2v

1.40.2-28.0.4.module+el8.7.0+21037+8ee66348

Связанные CVE

CVE-2023-0664

CVE-2022-4144

Ссылки на источники

Связанные уязвимости

ELSA-2023-12368

oracle-oval

около 2 лет назад

ELSA-2023-12368: qemu security update (IMPORTANT)

CVE-2023-0664

CVSS3: 7.8

ubuntu

около 2 лет назад

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.

CVE-2023-0664

CVSS3: 7.8

redhat

больше 2 лет назад

CVE-2023-0664

CVSS3: 7.8

nvd

около 2 лет назад

CVE-2023-0664

CVSS3: 7.8

debian

около 2 лет назад

A flaw was found in the QEMU Guest Agent service for Windows. A local ...