ELSA-2019-4520

ELSA-2019-4520 - qemu security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-01-28

Description

[12:2.9.0-19.el7]
- lsi53c895a: convert to trace-events (Mark Cave-Ayland) [Orabug: 28205376]
- lsi: Reselection needed to remove pending commands from queue (George Kennedy) [Orabug: 28626490]
- lsi53c895a: check message length value is valid (Prasad J Pandit) [Orabug: 28873208] {CVE-2018-18849}
- 9p: fix QEMU crash when renaming files (Greg Kurz) [Orabug: 28971701] {CVE-2018-19489}
- 9p: take write lock on fid path updates (CVE-2018-19364) (Greg Kurz) [Orabug: 28949917] {CVE-2018-19364}
- nvme: fix out-of-bounds access to the CMB (Paolo Bonzini) [Orabug: 28885514] {CVE-2018-16847}
- x86/cpu: Enable CLDEMOTE(Demote Cache Line) cpu feature (Jingqi Liu) [Orabug: 28985301]
- i386: Define AMD's no SSB mitigation needed. (Konrad Rzeszutek Wilk) [Orabug: 28951578]
- i386: define the AMD 'amd-ssbd' CPUID feature bit (Konrad Rzeszutek Wilk) [Orabug: 28951578]
- vfio-pci: emit FAILOVER_PRIMARY_CHANGED event on guest behalf when unrealized (Si-Wei Liu) [Orabug: 28897545]
- hw/i386: Fix IVHD entry length for AMD IOMMU (Jan Kiszka) [Orabug: 28891184]
- kvm: x86: Fix kvm_arch_fixup_msi_route for remap-less case (Jan Kiszka) [Orabug: 28891188]
- i386: Add new model of Cascadelake-Server (Tao Xu) [Orabug: 28886306]
- i386: Add Intel Processor Trace feature support (Chao Peng) [Orabug: 28886306]
- i386: Add PKU on Skylake-Server CPU model (Tao Xu)

Related CVEs

CVE-2018-16847

CVE-2018-19489

CVE-2018-18849

CVE-2018-19364

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	qemu-2.9.0-19.el7.src.rpm	b6d8cc0eb73937b135a0210be4504beef5d30f758d0a006706c9f9a9561a7048	ELBA-2023-24511	ol7_x86_64_kvm_utils
	qemu-2.9.0-19.el7.x86_64.rpm	c93ef9f9b833a3a1b9dac1940817c5ee926659d054838e1da662efafc9354650	ELBA-2023-24511	ol7_x86_64_kvm_utils
	qemu-block-gluster-2.9.0-19.el7.x86_64.rpm	58618a0da9f197f8f53a50c4c536f6f3882a6bc21df8bc1e95dca4a97b5bea92	ELBA-2024-12732	ol7_x86_64_kvm_utils
	qemu-block-iscsi-2.9.0-19.el7.x86_64.rpm	07cb2eccaeb61de2ed4b6465195c49439dca089bdc5439da9c22008cd11380cb	ELBA-2024-12732	ol7_x86_64_kvm_utils
	qemu-block-rbd-2.9.0-19.el7.x86_64.rpm	81b370cf3ef9065b772c39e103bd62b9741bdc355b3a911b99322234ae6a7c3c	ELBA-2024-12732	ol7_x86_64_kvm_utils
	qemu-common-2.9.0-19.el7.x86_64.rpm	b721c08122c736c26e44c8dfb5760ac17466f1c910285831fd5fdb10a124afa4	ELBA-2023-24511	ol7_x86_64_kvm_utils
	qemu-img-2.9.0-19.el7.x86_64.rpm	1983df22598fff814180286c4ee58e67ef2d13bacfe4f9df4d7bc3c7bcbb1224	ELBA-2024-12732	ol7_x86_64_kvm_utils
	qemu-kvm-2.9.0-19.el7.x86_64.rpm	dc01c238df43947519662de2ba03a94901dd5069ebe195ac985982078578796f	ELBA-2024-12732	ol7_x86_64_kvm_utils
	qemu-kvm-core-2.9.0-19.el7.x86_64.rpm	0243a82f1fd513a56b451943492399d5a235294c0a18dfb38e6beca574b77e1a	ELBA-2024-12732	ol7_x86_64_kvm_utils
	qemu-system-x86-2.9.0-19.el7.x86_64.rpm	b26e2926def003f1a14acff6efe1fae08ee44e70c728b06e85a19f0db831c38a	ELBA-2023-24511	ol7_x86_64_kvm_utils
	qemu-system-x86-core-2.9.0-19.el7.x86_64.rpm	4d0a345339f4371850c51724ec51af96f469e631069e30124c2a63c4a81f389f	ELBA-2024-12732	ol7_x86_64_kvm_utils

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team