Lucene search

K
oraclelinuxOracleLinuxELSA-2023-0099
HistoryJan 14, 2023 - 12:00 a.m.

virt:ol and virt-devel:rhel security and bug fix update

2023-01-1400:00:00
linux.oracle.com
22

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.7%

libvirt
[8.0.0-10.1.0.1]

  • Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554]
  • Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma)
    [8.0.0-10.1.el8]
  • qemu_process: Don’t require a hugetlbfs mount for memfd (rhbz#2132176)
  • qemu_namespace: Tolerate missing ACLs when creating a path in namespace (rhbz#2132176)
  • qemu_namespace: Fix a corner case in qemuDomainGetPreservedMounts() (rhbz#2132176)
  • qemu_namespace: Introduce qemuDomainNamespaceSetupPath() (rhbz#2132176)
  • qemu_process.c: Propagate hugetlbfs mounts on reconnect (rhbz#2132176)
  • qemuProcessReconnect: Don’t build memory paths (rhbz#2132176)
    qemu-kvm
    [6.2.0-21.el8_7.2]
  • kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2148504]
  • kvm-hw-display-qxl-Have-qxl_log_command-Return-early-if-.patch [bz#2152085]
  • kvm-hw-display-qxl-Document-qxl_phys2virt.patch [bz#2152085]
  • kvm-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch [bz#2152085]
  • kvm-hw-display-qxl-Avoid-buffer-overrun-in-qxl_phys2virt.patch [bz#2152085]
  • kvm-hw-display-qxl-Assert-memory-slot-fits-in-preallocat.patch [bz#2152085]
  • Resolves: bz#2148504
    (VMs hung on vnc_clipboard_send [rhel-8.7.0.z])
  • Resolves: bz#2152085
    (CVE-2022-4144 virt:rhel/qemu-kvm: QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read [rhel-8] [rhel-8.7.0.z])
    [6.2.0-20.el8_7.2]
  • kvm-virtiofsd-use-g_date_time_get_microsecond-to-get-sub.patch [bz#2132391]
  • Resolves: bz#2132391
    ([virtiofs] virtiofsd debug log’s timestamp is NULL [rhel-8.7.0.z])
    [6.2.0-20.el8.1]
  • kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2116743]
  • kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2116743]
  • Resolves: bz#2116743
    ([RHEL8.7] Guests in VMX root operation fail to reboot with QEMU’s ‘system_reset’ command)

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.7%