ELSA-2020-5576

ELSA-2020-5576 - qemu security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2020-03-17

Description

[15:3.1.0-7.el7]
- qemu-img: Add --target-is-zero to convert (David Edmondson)

[15:3.1.0-6.el7]
- qemu.spec: Remove 'BuildRequires: kernel' (Karl Heubaum) [Orabug: 30858754]
- target/i386: add support for MSR_IA32_TSX_CTRL (Paolo Bonzini) [Orabug: 30652327]
- iscsi: Cap block count from GET LBA STATUS (CVE-2020-1711) (Felipe Franciosi) [Orabug: 30807256] {CVE-2020-1711}
- scsi: lsi: exit infinite loop while executing script (CVE-2019-12068) (Paolo Bonzini) [Orabug: 30351703] {CVE-2019-12068}
- lsi: use enum type for s->waiting (Sven Schnelle) {CVE-2019-12068}
- json: Fix % handling when not interpolating (Christophe Fergeau) [Orabug: 30640103]
- qemu.spec: enable have_curl in spec (Dongli Zhang) [Orabug: 30640103]
- Fix heap overflow in ip_reass on big packet input (Samuel Thibault) [Orabug: 30229916] {CVE-2019-14378}
- Make poll_control_msr default 1 (Mark Kanda)
- Remove redundant check for host support of halt polling (Mark Kanda) [Orabug: 30240121]
- Enable '-Werror' compiler flag (Mark Kanda) [Orabug: 30213025]
- qemu-submodule-init: Add Git submodule init script (Karl Heubaum) [Orabug: 30729551]

Related CVEs

CVE-2019-14378

CVE-2019-12068

CVE-2020-1711

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	qemu-3.1.0-7.el7.src.rpm	06b7434eccbdcca21be084a10752b380	ELBA-2021-9161
	qemu-3.1.0-7.el7.aarch64.rpm	797b4f6e363c3ca46bf84f6387ea462b	ELBA-2021-9161
	qemu-block-gluster-3.1.0-7.el7.aarch64.rpm	c977155e941bf73e6d584a7bfe861553	ELBA-2021-9161
	qemu-block-iscsi-3.1.0-7.el7.aarch64.rpm	1e3467e683025f065852d9b99a079925	ELBA-2021-9161
	qemu-block-rbd-3.1.0-7.el7.aarch64.rpm	b3ec958c653da35548b2c342b444c614	ELBA-2021-9161
	qemu-common-3.1.0-7.el7.aarch64.rpm	6183e3cb012553d50c9587812062c3a7	ELBA-2021-9161
	qemu-img-3.1.0-7.el7.aarch64.rpm	f248012420ec08a3d75313aef1c7347e	ELBA-2021-9161
	qemu-kvm-3.1.0-7.el7.aarch64.rpm	b5cd4977679dfc5be557fcb7c1ca76f4	ELBA-2021-9161
	qemu-kvm-core-3.1.0-7.el7.aarch64.rpm	7b0af804811d1944be8b42be07894aab	ELBA-2021-9161
Oracle Linux 7 (x86_64)	qemu-3.1.0-7.el7.src.rpm	06b7434eccbdcca21be084a10752b380	ELBA-2021-9161
	qemu-3.1.0-7.el7.x86_64.rpm	913c268cfccae1184c8b7454e8145ab9	ELBA-2021-9161
	qemu-block-gluster-3.1.0-7.el7.x86_64.rpm	23d73ef1ab341179ce6249b070cc1a40	ELBA-2021-9161
	qemu-block-iscsi-3.1.0-7.el7.x86_64.rpm	fc8ac42b474aa29800c710516e55ac1f	ELBA-2021-9161
	qemu-block-rbd-3.1.0-7.el7.x86_64.rpm	d125f0045cf6f123a904222ece86825b	ELBA-2021-9161
	qemu-common-3.1.0-7.el7.x86_64.rpm	1b8b23c367ddbe6e06e6b28b5051df9e	ELBA-2021-9161
	qemu-img-3.1.0-7.el7.x86_64.rpm	dea8db09457cc5c61c8e30fabd366ee4	ELBA-2021-9161
	qemu-kvm-3.1.0-7.el7.x86_64.rpm	4fdf9f185997ff57fbba61cfb16e93e4	ELBA-2021-9161
	qemu-kvm-core-3.1.0-7.el7.x86_64.rpm	f02c9c9a842d2f7b5d1df360bd70f7e9	ELBA-2021-9161
	qemu-system-x86-3.1.0-7.el7.x86_64.rpm	9912e46c6088c88793b55df2b2aed800	ELBA-2021-9161
	qemu-system-x86-core-3.1.0-7.el7.x86_64.rpm	12910d78e51917849e2e0c72e21c2e47	ELBA-2021-9161

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team