ELSA-2021-9109

ELSA-2021-9109 - qemu security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2021-03-15

Description

[15:4.2.1-5.el7]
- qemu.spec: use --tls-priority=NORMAL for OL7 (Elena Ufimtseva)
- hostmem: fix default 'prealloc-threads' count (Mark Kanda) [Orabug: 32472127]
- hostmem: introduce 'prealloc-threads' property (Igor Mammedov)
- qom: introduce object_register_sugar_prop (Paolo Bonzini)
- migration/multifd: Do error_free after migrate_set_error to avoid memleaks (Pan Nengyuan)
- multifd/tls: fix memoryleak of the QIOChannelSocket object when cancelling migration (Chuan Zheng)
- migration/multifd: fix hangup with TLS-Multifd due to blocking handshake (Chuan Zheng)
- migration/tls: add trace points for multifd-tls (Chuan Zheng)
- migration/tls: add support for multifd tls-handshake (Chuan Zheng)
- migration/tls: extract cleanup function for common-use (Chuan Zheng)
- migration/multifd: fix memleaks in multifd_new_send_channel_async (Pan Nengyuan)
- migration/multifd: fix nullptr access in multifd_send_terminate_threads (Zhimin Feng)
- migration/tls: add tls_hostname into MultiFDSendParams (Chuan Zheng)
- migration/tls: extract migration_tls_client_create for common-use (Chuan Zheng)
- migration/tls: save hostname into MigrationState (Chuan Zheng)
- tests/qtest: add a test case for pvpanic-pci (Mihai Carabas)
- pvpanic : update pvpanic spec document (Mihai Carabas)
- hw/misc/pvpanic: add PCI interface support (Mihai Carabas)
- hw/misc/pvpanic: split-out generic and bus dependent code (Mihai Carabas)
- 9pfs: Fully restart unreclaim loop (CVE-2021-20181) (Greg Kurz) [Orabug: 32441198] {CVE-2021-20181}
- ide: atapi: check logical block address and read size (CVE-2020-29443) (Prasad J Pandit) [Orabug: 32393835] {CVE-2020-29443}
- Document CVE-2019-20808 as fixed (Mark Kanda) [Orabug: 32339196] {CVE-2019-20808}
- block/iscsi:fix heap-buffer-overflow in iscsi_aio_ioctl_cb (Chen Qun) [Orabug: 32339207] {CVE-2020-11947}
- net: remove an assert call in eth_get_gso_type (Prasad J Pandit) [Orabug: 32102583] {CVE-2020-27617}
- nvdimm: honor -object memory-backend-file, readonly=on option (Stefan Hajnoczi) [Orabug: 32265408]
- hostmem-file: add readonly=on|off option (Stefan Hajnoczi) [Orabug: 32265408]
- memory: add readonly support to memory_region_init_ram_from_file() (Stefan Hajnoczi) [Orabug: 32265408]

Related CVEs

CVE-2020-11947

CVE-2020-29443

CVE-2020-27617

CVE-2019-20808

CVE-2021-20181

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	qemu-4.2.1-5.el7.src.rpm	9e067fcc7cbd376c9352ae8f2637f1d5	ELBA-2021-9161
	ivshmem-tools-4.2.1-5.el7.aarch64.rpm	af02d34be0e6f6c11ddc6ae263df2cb2	ELBA-2021-9161
	qemu-4.2.1-5.el7.aarch64.rpm	e7eb334983cc6420c2f6c64b6af707b3	ELBA-2021-9161
	qemu-block-gluster-4.2.1-5.el7.aarch64.rpm	48a8dc36d1bd62af351921ae40574059	ELBA-2021-9161
	qemu-block-iscsi-4.2.1-5.el7.aarch64.rpm	350ddb61b78dc51771d1052e66acb6d0	ELBA-2021-9161
	qemu-block-rbd-4.2.1-5.el7.aarch64.rpm	1fd401858e11e8e3ce9a3d86ae7da5c8	ELBA-2021-9161
	qemu-common-4.2.1-5.el7.aarch64.rpm	3217bb1a1d5cf4f0a3634c02e0c07953	ELBA-2021-9161
	qemu-img-4.2.1-5.el7.aarch64.rpm	6e8a4eece04f47d4db8fe83eb05d20b0	ELBA-2021-9161
	qemu-kvm-4.2.1-5.el7.aarch64.rpm	de228baa723ea6e7fd15c36fbb532459	ELBA-2021-9161
	qemu-kvm-core-4.2.1-5.el7.aarch64.rpm	91f6a19e4e4f308d06d839580d9add17	ELBA-2021-9161
	qemu-system-aarch64-4.2.1-5.el7.aarch64.rpm	12e2df83405b94caa3c0503e21eeb5ae	ELBA-2021-9161
	qemu-system-aarch64-core-4.2.1-5.el7.aarch64.rpm	1b9b7be5863c11f6b11fd5342d9d1e0b	ELBA-2021-9161
Oracle Linux 7 (x86_64)	qemu-4.2.1-5.el7.src.rpm	9e067fcc7cbd376c9352ae8f2637f1d5	ELBA-2021-9161
	qemu-4.2.1-5.el7.x86_64.rpm	31c9ae5a23d555f9bf31d948130f0d6a	ELBA-2021-9161
	qemu-block-gluster-4.2.1-5.el7.x86_64.rpm	c2e6101ab21f31b8b9c23620b844ace5	ELBA-2021-9161
	qemu-block-iscsi-4.2.1-5.el7.x86_64.rpm	6a8dd7e3bc1a49e07427908d426a3504	ELBA-2021-9161
	qemu-block-rbd-4.2.1-5.el7.x86_64.rpm	7a635193010d1d0195889f4e093caf10	ELBA-2021-9161
	qemu-common-4.2.1-5.el7.x86_64.rpm	b1aa34496fe0abf0e9e677197b40e528	ELBA-2021-9161
	qemu-img-4.2.1-5.el7.x86_64.rpm	d5706a963f96753b2a5a8c778250c451	ELBA-2021-9161
	qemu-kvm-4.2.1-5.el7.x86_64.rpm	2fdafe657430b6f73e4ed1904b03a9ea	ELBA-2021-9161
	qemu-kvm-core-4.2.1-5.el7.x86_64.rpm	e6e8f14eb05b99018f9bdad3a1a34dbf	ELBA-2021-9161

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team