Lucene search

K
oraclelinuxOracleLinuxELSA-2023-12855
HistoryOct 07, 2023 - 12:00 a.m.

kvm_utils3 security update

2023-10-0700:00:00
linux.oracle.com
97
kvm utilities 3
hivex
libguestfs
libvirt
storage
virpci
qemuprocess
update
verification
io
ui
scsi controller
vhost-vdpa

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

52.6%

hivex
libguestfs
libguestfs-winsupport
libiscsi
libnbd
libtpms
libvirt
[9.0.0-3.el8]

  • storage: Fix returning of locked objects from ‘virStoragePoolObjListSearch’ (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750}
  • virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700}
  • qemuProcessRefreshDisks: Don’t skip filling of disk information if tray state didn’t change (Peter Krempa) [Orabug: 35636469]
    libvirt-dbus
    libvirt-python
    [9.0.0-3.el8]
  • Update to libvirt 9.0.0-3 (Karl Heubaum)
    nbdkit
    netcf
    perl-Sys-Virt
    qemu-kvm
    [7.2.0-5.el8]
  • virtio-crypto: verify src&dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
  • io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrange) [Orabug: 35683826] {CVE-2023-3354}
  • ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
  • hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
  • vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
  • qmp-regdump: use QMP command ‘query-cpus-fast’ (Mark Kanda)
    seabios
    sgabios
    supermin
    swtpm
    virt-v2v