ELBA-2023-13023

ELBA-2023-13023 - qemu-kvm bug fix update

Type:	BUG
Impact:	NA
Release Date:	2023-12-06

Description

[7.2.0-6.1.el9]
- Rebuild QEMU 7.2.0-6 with OL9.3 (Karl Heubaum)

[7.2.0-6.el9]
- hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
- hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
- machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
- migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
- migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
- vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
- vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
- migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
- migration: Move more initializations to migrate_init() (Avihai Horon)
- vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
- migration: Add migration prefix to functions in target.c (Avihai Horon)
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
- sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
- vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
- hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
- exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
- migration: fix populate_vfio_info (Steve Sistare)
- vfio/migration: Revert out of tree P2P support (Joao Martins)
- async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
- async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
- physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
- qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
- qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
- dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
- hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]

[7.2.0-5.el9]
- virtio-crypto: verify src&dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
- io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrange) [Orabug: 35683826] {CVE-2023-3354}
- ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)

[7.2.0-4.el9]
- vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
- vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
- sysemu: Add pre VM state change callback (Avihai Horon)
- vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
- vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
- virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
- vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
- vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
- vfio/migration: Remove print of 'Migration disabled' (Zhenzhong Duan)
- vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
- vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
- vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
- vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
- vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
- vfio/migration: Reset bytes_transferred properly (Avihai Horon)
- vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
- vfio/migration: Add support for switchover ack capability (Avihai Horon)
- vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
- vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
- vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
- tests: Add migration switchover ack capability test (Avihai Horon)
- migration: Enable switchover ack capability (Avihai Horon)
- migration: Implement switchover ack logic (Avihai Horon)
- migration: Add switchover ack capability (Avihai Horon)
- target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
- target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
- target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
- target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
- target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
- target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
- target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
- target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
- Makefile: qemu-bundle is a directory (Juan Quintela)
- 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
- pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
- pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
- pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]

[7.2.0-3.el9]
- vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
- migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]

[7.2.0-2.el9]
- spec: allow have_tools 0 (Steve Sistare)
- spec: allow no block device modules (Steve Sistare)
- qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
- hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
- oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
- vfio/migration: Rename entry points (Alex Williamson)
- docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
- vfio/migration: Query device dirty page tracking support (Joao Martins)
- vfio/migration: Block migration with vIOMMU (Joao Martins)
- vfio/common: Add device dirty page bitmap sync (Joao Martins)
- vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
- vfio/common: Add device dirty page tracking start/stop (Joao Martins)
- vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
- vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
- vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
- vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
- vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
- vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
- vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
- vfio/common: Fix wrong %m usages (Avihai Horon)
- vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
- docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
- vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
- vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
- vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
- vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
- vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
- vfio/migration: Block multiple devices migration (Avihai Horon)
- vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
- vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
- vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
- linux-headers: Update to v6.2-rc8 (Avihai Horon)
- migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
- migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
- migration: Remove unused res_compatible (Juan Quintela)
- migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
- migration: I messed state_pending_exact/estimate (Juan Quintela)
- linux-headers: Update to v6.1 (Peter Xu)
- migration: simplify migration_iteration_run() (Juan Quintela)
- migration: Remove unused threshold_size parameter (Juan Quintela)
- migration: Split save_live_pending() into state_pending_* (Juan Quintela)
- migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
- Revert 'virtio-scsi: Send 'REPORTED LUNS CHANGED' sense data upon disk hotplug events' (Karl Heubaum) [Orabug: 35161059]
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- qemu-kvm.spec: vhost-user is conditional (Steve Sistare)
- qemu-kvm.spec: libseccomp is conditional (Steve Sistare)

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	qemu-kvm-7.2.0-6.1.el9.src.rpm	1b909da54016580692a50d1293181f6dd2e2fb20b9b7178c03554cb6ae65d7c0	-	ol9_aarch64_kvm_utils
	qemu-guest-agent-7.2.0-6.1.el9.aarch64.rpm	11b342fca829920aed6a3259d25590d7dc6b454e8e27cf94e62b8538c71b12d8	-	ol9_aarch64_kvm_utils
	qemu-img-7.2.0-6.1.el9.aarch64.rpm	a47f823a40ec9fa46309cd855c76a4da62eb628ca660270b4530f86638daeb28	-	ol9_aarch64_kvm_utils
	qemu-kvm-7.2.0-6.1.el9.aarch64.rpm	00c0d8031ff4a5fc2cd15cd340908262c0f3db560b5c6dde550a28396859aac3	-	ol9_aarch64_kvm_utils
	qemu-kvm-block-curl-7.2.0-6.1.el9.aarch64.rpm	b260eecb3efdd27a843e7f10cc05f82f20f16c218c6d1d1e83e79c2043dc5a0b	-	ol9_aarch64_kvm_utils
	qemu-kvm-block-iscsi-7.2.0-6.1.el9.aarch64.rpm	5ded064b6294f465e45591183b8943c3a742c226c2708d9df3dd3a588a92c467	-	ol9_aarch64_kvm_utils
	qemu-kvm-block-rbd-7.2.0-6.1.el9.aarch64.rpm	425cc001efcc6b831ee0d77349181d77a3d3b028c1ec164ce706f34401263034	-	ol9_aarch64_kvm_utils
	qemu-kvm-block-ssh-7.2.0-6.1.el9.aarch64.rpm	bb3c3f7e637e98868206d1aa2690bbe863ee529dfe08e4236e959441522e11a0	-	ol9_aarch64_kvm_utils
	qemu-kvm-common-7.2.0-6.1.el9.aarch64.rpm	08a14a0e12cb9c19be059cb8b665adcf0c4d49b3f680d35fc63cd01a20f4f893	-	ol9_aarch64_kvm_utils
	qemu-kvm-core-7.2.0-6.1.el9.aarch64.rpm	49f5730d3ec277ccab0fb2b1b3e4fbb53a66789bfabc62591a2c58695d89cfa7	-	ol9_aarch64_kvm_utils
	qemu-virtiofsd-7.2.0-6.1.el9.aarch64.rpm	d7ec7b0a98f96c487fe64d8ebd0f3498a488303e57031aac8ddeddca39452ebf	-	ol9_aarch64_kvm_utils
Oracle Linux 9 (x86_64)	qemu-kvm-7.2.0-6.1.el9.src.rpm	1b909da54016580692a50d1293181f6dd2e2fb20b9b7178c03554cb6ae65d7c0	-	ol9_x86_64_kvm_utils
	qemu-guest-agent-7.2.0-6.1.el9.x86_64.rpm	9015afd6fab6b5ee6ced0700f960e64513b23f3f9498c3af855841ba16c2c6a6	-	ol9_x86_64_kvm_utils
	qemu-img-7.2.0-6.1.el9.x86_64.rpm	cb7bc3a08b14c32f81fc08784d7b56db6243e23b904594446140fba4e831d4d5	-	ol9_x86_64_kvm_utils
	qemu-kvm-7.2.0-6.1.el9.x86_64.rpm	2b74d4bd18a4ddcd4d3fe01be25c67c9cd41ac512f2f6a167f7a17ff0bbc7395	-	ol9_x86_64_kvm_utils
	qemu-kvm-block-curl-7.2.0-6.1.el9.x86_64.rpm	2d2ba069ef3b78fe4b1bb20617f04c4e2ac8e1f1b2baeb101a63edfaffab9492	-	ol9_x86_64_kvm_utils
	qemu-kvm-block-iscsi-7.2.0-6.1.el9.x86_64.rpm	6653522887643006007dad28d6fbe546b19527cb8a2dd25aea52e55d1d7a6f40	-	ol9_x86_64_kvm_utils
	qemu-kvm-block-rbd-7.2.0-6.1.el9.x86_64.rpm	fa063431d277c2db96e8698557c689a1cecc8c8773959c33b2d3da5e7e6ad4db	-	ol9_x86_64_kvm_utils
	qemu-kvm-block-ssh-7.2.0-6.1.el9.x86_64.rpm	714ac4d1da8f4f8f0dcc0bd9032ad84384d5a84ac7cacca9c29efc25dd858634	-	ol9_x86_64_kvm_utils
	qemu-kvm-common-7.2.0-6.1.el9.x86_64.rpm	3483ba613f72adf11add769fef842b592c2182623afc63572de132e71485e3cc	-	ol9_x86_64_kvm_utils
	qemu-kvm-core-7.2.0-6.1.el9.x86_64.rpm	4a983fa419eddc7cfd83a81d631a0ce388514f78a5d648efc7d018d0bd80d12a	-	ol9_x86_64_kvm_utils
	qemu-virtiofsd-7.2.0-6.1.el9.x86_64.rpm	a9625537bdefdc2edcbd8c435dd20bd0f7161e3c202e2c98410868efe3540f6b	-	ol9_x86_64_kvm_utils

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team