Lucene search

K
oraclelinuxOracleLinuxELSA-2023-12342
HistoryMay 15, 2023 - 12:00 a.m.

virt:kvm_utils security update

2023-05-1500:00:00
linux.oracle.com
8

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.7%

hivex
libguestfs
libguestfs-winsupport
libiscsi
libnbd
libvirt
[5.7.0-40]

  • build: change dependency to allow post install erasing of /usr/bin/nc (Wim ten Have) [Orabug: 35289777]
  • util: Make virFileClose() quiet on success (Andrea Bolognani) [Orabug: 35090886]
    [5.7.0-39]
  • exadata: update maxvcpus for vNUMA only (Shaleen Bathla) [Orabug: 34863357]
    libvirt-dbus
    libvirt-python
    [5.7.0-40]
  • Bump version number to 5.7.0-40 to match libvirt (Karl Heubaum)
    [5.7.0-39]
  • Bump version number to 5.7.0-39 to match libvirt (Karl Heubaum)
    nbdkit
    netcf
    perl-Sys-Virt
    qemu-kvm
    [4.2.1-26]
  • migration: check magic value for deciding the mapping of channels (Manish Mishra) [Orabug: 34735462]
  • io: Add support for MSG_PEEK for socket channel (Manish Mishra) [Orabug: 34735462]
  • migration: Move channel setup out of postcopy_try_recover() (Peter Xu) [Orabug: 34735462]
  • vdpa: commit all host notifier MRs in a single MR transaction (Mike Longpeng) [Orabug: 35252234]
  • vhost: configure all host notifiers in a single MR transaction (Mike Longpeng) [Orabug: 35252234]
  • vhost: simplify vhost_dev_enable_notifiers (Mike Longpeng) [Orabug: 35252234]
  • pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 35055290]
  • qga/win32: Use rundll for VSS installation (Konstantin Kostiuk) [Orabug: 35206108] {CVE-2023-0664}
  • qga/win32: Remove change action from MSI installer (Konstantin Kostiuk) [Orabug: 35206108] {CVE-2023-0664}
  • hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daude) [Orabug: 34846087]
  • hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daude) [Orabug: 34846087] {CVE-2022-4144}
  • hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 34846087]
  • hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 34846087]
  • hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daude) [Orabug: 34846087]
  • virtio-blk: On restart, process queued requests in the proper context (Sergio Lopez) [Orabug: 35060530]
  • virtio-blk: Refactor the code that processes queued requests (Sergio Lopez) [Orabug: 35060530]
  • hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219223]
  • modules: load modules from /var/run/qemu/ directory firstly (Siddhi Katage) [Orabug: 34867783]
  • qemu.spec: Add post-install script for block storage modules (Siddhi Katage) [Orabug: 34867783]
  • qemu.spec: Enable ‘-module-upgrades’ for OL7 (Siddhi Katage) [Orabug: 34867783]
  • module: increase dirs array size by one (Bruce Rogers) [Orabug: 34867783]
  • modules: load modules from versioned /var/run dir (Christian Ehrhardt) [Orabug: 34867783]
  • blockjob: Fix crash with IOthread when block commit after snapshot (Michael Qiu) [Orabug: 35118668]
    [4.2.1-25]
  • target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 34641255]
  • i386/kvm: fix a use-after-free when vcpu plug/unplug (Pan Nengyuan) [Orabug: 34859902]
  • memory: batch allocate ioeventfds[] in address_space_update_ioeventfds() (Stefan Hajnoczi) [Orabug: 34538900]
  • virtio-blk: Fix clean up of host notifiers for single MR transaction (Mark Mielke) [Orabug: 34538900]
  • virtio-scsi: Configure all host notifiers in a single MR transaction (Greg Kurz) [Orabug: 34538900]
  • virtio-scsi: Set host notifiers and callbacks separately (Greg Kurz) [Orabug: 34538900]
  • virtio-blk: Configure all host notifiers in a single MR transaction (Greg Kurz) [Orabug: 34538900]
  • virtio-blk: Fix rollback path in virtio_blk_data_plane_start() (Greg Kurz) [Orabug: 34538900]
  • event_notifier: Set ->initialized earlier in event_notifier_init() (Greg Kurz) [Orabug: 34538900]
  • virtio-scsi: don’t process IO on fenced dataplane (Maxim Levitsky) [Orabug: 34538900]
  • virtio-scsi: don’t uninitialize queues that we didn’t initialize (Maxim Levitsky) [Orabug: 34538900]
  • hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
    seabios
    sgabios
    supermin

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.7%