ELSA-2019-4518

ELSA-2019-4518 - qemu security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-01-25

Description

[15:3.0.0-4.el7]
- usb-mtp: use O_NOFOLLOW and O_CLOEXEC. (Gerd Hoffmann) [Orabug: 29056673] {CVE-2018-16872}
- pvrdma: add uar_read routine (Prasad J Pandit) {CVE-2018-20191}
- pvrdma: release ring object in case of an error (Prasad J Pandit) [Orabug: 29171822] {CVE-2018-20126}
- pvrdma: check number of pages when creating rings (Prasad J Pandit) [Orabug: 29171821] {CVE-2018-20125}
- pvrdma: check return value from pvrdma_idx_ring_has_ routines (Prasad J Pandit) [Orabug: 29171820] {CVE-2018-20216}
- rdma: remove unused VENDOR_ERR_NO_SGE macro (Prasad J Pandit) [Orabug: 29121181] {CVE-2018-20124}
- rdma: check num_sge does not exceed MAX_SGE (Prasad J Pandit) [Orabug: 29121181] {CVE-2018-20124}
- i386: Add 'stibp' flag name (Eduardo Habkost) [Orabug: 29114828]
- i386: Add some MSR based features on Cascadelake-Server CPU model (Tao Xu) [Orabug: 29029615]
- i386: Update stepping of Cascadelake-Server (Tao Xu) [Orabug: 29029615]
- kvm: Use KVM_GET_MSR_INDEX_LIST for MSR_IA32_ARCH_CAPABILITIES support (Bandan Das) [Orabug: 29029615]
- x86: define a new MSR based feature word -- FEATURE_WORDS_ARCH_CAPABILITIES (Robert Hoo) [Orabug: 29029615]
- x86: Data structure changes to support MSR based features (Robert Hoo) [Orabug: 29029615]
- kvm: Add support to KVM_GET_MSR_FEATURE_INDEX_LIST and KVM_GET_MSRS system ioctl (Robert Hoo) [Orabug: 29029615]
- i386: Add CPUID bit and feature words for IA32_ARCH_CAPABILITIES MSR (Robert Hoo) [Orabug: 29029615]
- i386: Add new MSR indices for IA32_PRED_CMD and IA32_ARCH_CAPABILITIES (Robert Hoo) [Orabug: 29029615]
- Fix compilation issue: 'qapi_event_send_failover_primary_changed' not declared (Mark Kanda) [Orabug: 29121163]
- lsi_scsi: add support for PPR Extended Message (George Kennedy) [Orabug: 28879117]

Related CVEs

CVE-2018-20191

CVE-2018-20124

CVE-2018-16872

CVE-2018-20126

CVE-2018-20216

CVE-2018-20125

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	qemu-3.0.0-4.el7.src.rpm	4e80be1a370d99c6e57dcbd8a899d88bcd95c6b1e7efd6938d58553cd03c3e74	ELBA-2023-24511	ol7_aarch64_latest
	ivshmem-tools-3.0.0-4.el7.aarch64.rpm	9c72380b7bcc67873a0cb4950d9a96908fd9b7b341b92b1785cb64fd44abeb26	ELBA-2024-12732	ol7_aarch64_latest
	qemu-3.0.0-4.el7.aarch64.rpm	672a1bdfc468ab59a4ef72d4c479f0d447222c8680f6ada80921809abf9d1925	ELBA-2023-24511	ol7_aarch64_latest
	qemu-block-gluster-3.0.0-4.el7.aarch64.rpm	dc25dc61ced3452b023c92ac8dfe6de67eddff537da0554f2a32ab958506e0a5	ELBA-2024-12732	ol7_aarch64_latest
	qemu-block-iscsi-3.0.0-4.el7.aarch64.rpm	a6e87b7deb35f1d40311b81e2d56b6b34b047beb853c90ab86ec241a0193e631	ELBA-2024-12732	ol7_aarch64_latest
	qemu-block-rbd-3.0.0-4.el7.aarch64.rpm	c309d2ed7b936746dfee832e3ec0eefbcf7d2689f76f38b685591e8b46cd399b	ELBA-2024-12732	ol7_aarch64_latest
	qemu-common-3.0.0-4.el7.aarch64.rpm	912e9a6c003db01844ca4baa3a9c5e843767cbe3e6684db66a4f55f90f123733	ELBA-2023-24511	ol7_aarch64_latest
	qemu-img-3.0.0-4.el7.aarch64.rpm	87b833855b017c2df428c021c42ba80e52cd5f5089758a12e416eae2bbfdcc4e	ELBA-2024-12732	ol7_aarch64_latest
	qemu-kvm-3.0.0-4.el7.aarch64.rpm	3854372259992dcf6d98180fbf34f6e1daa56cf970fa22e61bfcd987b4ad3592	ELBA-2024-12732	ol7_aarch64_latest
	qemu-kvm-core-3.0.0-4.el7.aarch64.rpm	c38ace6e52fa0e100d83fb7e3637b3771bcb754348bf9b892aeaaf4c84538100	ELBA-2024-12732	ol7_aarch64_latest
	qemu-system-aarch64-3.0.0-4.el7.aarch64.rpm	c6d349e7b612395284296680e46bac396b10f84d26e9d0d19359ec3847cfd4b1	ELBA-2024-12732	ol7_aarch64_latest
	qemu-system-aarch64-core-3.0.0-4.el7.aarch64.rpm	9880d57a5e63a86d82b99605c1396e23205b065f08c715a5ab9fa6b05a6b0489	ELBA-2024-12732	ol7_aarch64_latest
Oracle Linux 7 (x86_64)	qemu-3.0.0-4.el7.src.rpm	4e80be1a370d99c6e57dcbd8a899d88bcd95c6b1e7efd6938d58553cd03c3e74	ELBA-2023-24511	ol7_x86_64_kvm_utils
	qemu-3.0.0-4.el7.x86_64.rpm	037462d52ca58bf4e68e42d1de3524a056104c1d40cc901b7fc73a51130cc75f	ELBA-2023-24511	ol7_x86_64_kvm_utils
	qemu-block-gluster-3.0.0-4.el7.x86_64.rpm	990e6429643c1e3a8d041adbd59c65a58f1ffa20674751b6540943c389c88a9e	ELBA-2024-12732	ol7_x86_64_kvm_utils
	qemu-block-iscsi-3.0.0-4.el7.x86_64.rpm	d2f2c2fef84dfba3a86283df79e6120ced805935ee3377874b27097a89e52e46	ELBA-2024-12732	ol7_x86_64_kvm_utils
	qemu-block-rbd-3.0.0-4.el7.x86_64.rpm	975a8e8c2caeaed3111fe21039ddd42c9b31c1f38f2407b56c049f0e54024d31	ELBA-2024-12732	ol7_x86_64_kvm_utils
	qemu-common-3.0.0-4.el7.x86_64.rpm	73f0ba188ccd19691ef05122a58a47daf3886c62385ef5d98be66caeb6c8c245	ELBA-2023-24511	ol7_x86_64_kvm_utils
	qemu-img-3.0.0-4.el7.x86_64.rpm	2cccc03fc96add937ddb1c1e22e47d92a91985ac900f37937d3e600ce48f32d9	ELBA-2024-12732	ol7_x86_64_kvm_utils
	qemu-kvm-3.0.0-4.el7.x86_64.rpm	61285c8b8b2db87008da0efaf7cd3d29d3f29628d46163511f3b82a3eaafcfc4	ELBA-2024-12732	ol7_x86_64_kvm_utils
	qemu-kvm-core-3.0.0-4.el7.x86_64.rpm	1f95f54486dce878a079ff31aa8379b0265aa5962a33ec6a37e38b247d5501c2	ELBA-2024-12732	ol7_x86_64_kvm_utils
	qemu-system-x86-3.0.0-4.el7.x86_64.rpm	8be3baa105ca5d31afb4a7a57329bc1679f9f993aed6a999146a032d2779113d	ELBA-2023-24511	ol7_x86_64_kvm_utils
	qemu-system-x86-core-3.0.0-4.el7.x86_64.rpm	4ae45a82d7ab030d0572a075d7aa777a49003efcb9987380f901f4cd256dfea2	ELBA-2024-12732	ol7_x86_64_kvm_utils

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team