ELSA-2021-9285

ELSA-2021-9285 - qemu security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2021-06-06

Description


[15:4.2.1-9.el7]
- Revert 'oslib-posix: refactor memory prealloc threads' (Mark Kanda) [Orabug: 32903662]
- Revert 'oslib-posix: initialize backend memory objects in parallel' (Mark Kanda) [Orabug: 32903662]

[15:4.2.1-8.el7]
- i386/pc: let iterator handle regions below 4G (Joao Martins)

[15:4.2.1-7.el7]
- arm/virt: Add memory hot remove support (Mihai Carabas) [Orabug: 32643506]
- i386/pc: consolidate usable iova iteration (Joao Martins)
- i386/acpi: fix SRAT ranges in accordance to usable IOVA (Joao Martins)
- migration: increase listening socket backlog (Elena Ufimtseva) [Orabug: 32792545]
- multifd: Make multifd_save_setup() get an Error parameter (Juan Quintela)
- multifd: Make multifd_load_setup() get an Error parameter (Juan Quintela)
- migration: fix maybe-uninitialized warning (Marc-Andre Lureau)
- migration: Fix the re-run check of the migrate-incoming command (Yury Kotov)
- multifd: Initialize local variable (Juan Quintela)
- multifd: Be consistent about using uint64_t (Juan Quintela)
- Bug #1829242 correction. (Alexey Romko)
- migration/multifd: fix destroyed mutex access in terminating multifd threads (Jiahui Cen)
- migration/multifd: fix nullptr access in terminating multifd threads (Jiahui Cen)
- migration/multifd: not use multifd during postcopy (Wei Yang)
- migration/multifd: clean pages after filling packet (Wei Yang)
- migration: Make sure that we don't call write() in case of error (Juan Quintela)
- migration: fix multifd_send_pages() next channel (Laurent Vivier)
- migration/multifd: bypass uuid check for initial packet (Elena Ufimtseva) [Orabug: 32610480]
- migration/tls: add error handling in multifd_tls_handshake_thread (Hao Wang)
- migration/tls: fix inverted semantics in multifd_channel_connect (Hao Wang)
- migration/multifd: do not access uninitialized multifd_recv_state (Elena Ufimtseva) [Orabug: 32795384]
- io/channel-tls.c: make qio_channel_tls_shutdown thread-safe (Lukas Straub)
- qemu.spec: Enable qemu-guest-agent RPM for OL7 (Karl Heubaum) [Orabug: 32415543]
- virtio-net: Set mac address to hardware if the peer is vdpa (Cindy Lu)
- net: Add vhost-vdpa in show_netdevs() (Cindy Lu)
- vhost-vdpa: Add qemu_close in vhost_vdpa_cleanup (Cindy Lu)
- hw/virtio/vhost-vdpa: Fix Coverity CID 1432864 (Philippe Mathieu-Daude)
- vhost-vdpa: negotiate VIRTIO_NET_F_STATUS with driver (Si-Wei Liu)
- configure: Fix build dependencies with vhost-vdpa. (Laurent Vivier)
- configure: simplify vhost condition with Kconfig (Marc-Andre Lureau)
- vhost-vdpa: add trace-events (Laurent Vivier)
- dma/pl330: Fix qemu_hexdump() usage in pl330.c (Mark Kanda)
- util/hexdump: introduce qemu_hexdump_line() (Laurent Vivier)
- util/hexdump: Reorder qemu_hexdump() arguments (Philippe Mathieu-Daude)
- util/hexdump: Convert to take a void pointer argument (Philippe Mathieu-Daude)
- net/colo-compare.c: Only hexdump packets if tracing is enabled (Lukas Straub)
- vhost-vdpa: batch updating IOTLB mappings (Jason Wang)
- vhost: switch to use IOTLB v2 format (Jason Wang)
- vhost-vdpa: remove useless variable (Laurent Vivier)
- virtio: vdpa: omit check return of g_malloc (Li Qiang)
- vhost-vdpa: fix indentation in vdpa_ops (Stefano Garzarella)
- virtio-net: check the existence of peer before accessing vDPA config (Jason Wang)
- virtio-pci: fix wrong index in virtio_pci_queue_enabled (Yuri Benditovich)
- virtio-pci: fix virtio_pci_queue_enabled() (Laurent Vivier)
- vhost-vdpa :Fix Coverity CID 1430270 / CID 1420267 (Cindy Lu)
- vhost-vdpa: fix the compile issue without kvm (Cindy Lu)
- vhost-vdpa: introduce vhost-vdpa net client (Cindy Lu)
- vhost-vdpa: introduce vhost-vdpa backend (Cindy Lu)
- linux headers: sync to 5.9-rc4 (Jason Wang)
- Linux headers: update (Cornelia Huck)
- virtio-net: fix rsc_ext compat handling (Cornelia Huck)
- linux-headers: update against Linux 5.7-rc3 (Cornelia Huck)
- virtiofsd: Pull in kernel's fuse.h (Dr. David Alan Gilbert)
- linux-headers: Update (Bharata B Rao)
- vhost_net: introduce set_config & get_config (Cindy Lu)
- vhost: implement vhost_force_iommu method (Cindy Lu)
- vhost: introduce new VhostOps vhost_force_iommu (Cindy Lu)
- vhost: implement vhost_vq_get_addr method (Cindy Lu)
- vhost: introduce new VhostOps vhost_vq_get_addr (Cindy Lu)
- vhost: implement vhost_dev_start method (Cindy Lu)
- vhost: introduce new VhostOps vhost_dev_start (Cindy Lu)
- vhost: check the existence of vhost_set_iotlb_callback (Jason Wang)
- virtio-pci: implement queue_enabled method (Jason Wang)
- virtio-bus: introduce queue_enabled method (Jason Wang)
- vhost_net: use the function qemu_get_peer (Cindy Lu)
- net: introduce qemu_get_peer (Cindy Lu)
- vhost: correctly turn on VIRTIO_F_IOMMU_PLATFORM (Jason Wang)
- imx7-ccm: add digprog mmio write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
- tz-ppc: add dummy read/write methods (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
- spapr_pci: add spapr msi read method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
- nvram: add nrf51_soc flash read method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
- prep: add ppc-parity write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
- vfio: add quirk device write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
- pci-host: designware: add pcie-msi read method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
- hw/pci-host: add pci-intack write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
- oslib-posix: take lock before qemu_cond_broadcast (Bauerchen) [Orabug: 32555402]
- oslib-posix: initialize mutex and condition variable (Paolo Bonzini) [Orabug: 32555402]
- mem-prealloc: optimize large guest startup (bauerchen) [Orabug: 32555402]
- i386: Add the support for AMD EPYC 3rd generation processors (Babu Moger)
- acpi: cpuhp: document CPHP_GET_CPU_ID_CMD command (Igor Mammedov)
- acpi: cpuhp: add CPHP_GET_CPU_ID_CMD command (Igor Mammedov)
- acpi: cpuhp: spec: add typical usecases (Igor Mammedov)
- acpi: cpuhp: spec: clarify store into 'Command data' when 'Command field' == 0 (Igor Mammedov)
- acpi: cpuhp: spec: fix 'Command data' description (Igor Mammedov)
- acpi: cpuhp: spec: clarify 'CPU selector' register usage and endianness (Igor Mammedov)
- acpi: cpuhp: introduce 'Command data 2' field (Igor Mammedov)
- x86: ich9: let firmware negotiate 'CPU hot-unplug with SMI' feature (Igor Mammedov)
- x86: ich9: factor out 'guest_cpu_hotplug_features' (Igor Mammedov)
- x86: acpi: let the firmware handle pending 'CPU remove' events in SMM (Igor Mammedov)
- x86: acpi: introduce AcpiPmInfo::smi_on_cpu_unplug (Igor Mammedov)
- acpi: cpuhp: introduce 'firmware performs eject' status/control bits (Igor Mammedov)
- x68: acpi: trigger SMI before sending hotplug Notify event to OSPM (Igor Mammedov)
- x86: acpi: introduce the PCI0.SMI0 ACPI device (Igor Mammedov)
- x86: acpi: introduce AcpiPmInfo::smi_on_cpuhp (Igor Mammedov)
- x86: ich9: expose 'smi_negotiated_features' as a QOM property (Igor Mammedov)
- tests: acpi: mark to be changed tables in bios-tables-test-allowed-diff (Igor Mammedov)
- acpi: add aml_land() and aml_break() primitives (Igor Mammedov)
- x86: cpuhp: refuse cpu hot-unplug request earlier if not supported (Igor Mammedov)
- x86: cpuhp: prevent guest crash on CPU hotplug when broadcast SMI is in use (Igor Mammedov)
- x86: lpc9: let firmware negotiate 'CPU hotplug with SMI' features (Igor Mammedov)
- q35: implement 128K SMRAM at default SMBASE address (Igor Mammedov)
- hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register (Philippe Mathieu-Daude) [Orabug: 32470471] {CVE-2021-20221}
- memory: clamp cached translation in case it points to an MMIO region (Paolo Bonzini) [Orabug: 32252673] {CVE-2020-27821}
- hw/sd/sdhci: Fix DMA Transfer Block Size field (Philippe Mathieu-Daude) [Orabug: 32613470] {CVE-2021-3409}


Related CVEs


CVE-2020-27821
CVE-2021-20221
CVE-2020-15469
CVE-2021-3409

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 7 (aarch64) qemu-4.2.1-9.el7.src.rpm23d7ed1ab0d3e0d5abacd36a3843485604c1901272d2f154d28968a871e2ead1ELBA-2023-24511ol7_aarch64_developer_kvm_utils
qemu-4.2.1-9.el7.src.rpm23d7ed1ab0d3e0d5abacd36a3843485604c1901272d2f154d28968a871e2ead1ELBA-2023-24511ol7_aarch64_latest
qemu-4.2.1-9.el7.src.rpm23d7ed1ab0d3e0d5abacd36a3843485604c1901272d2f154d28968a871e2ead1ELBA-2023-24511ol7_aarch64_u9_patch
ivshmem-tools-4.2.1-9.el7.aarch64.rpm7b482ddcc490affae898a980b3afe3520b53bb9dc879806411faf3599ad6a9caELBA-2024-12732ol7_aarch64_latest
ivshmem-tools-4.2.1-9.el7.aarch64.rpm7b482ddcc490affae898a980b3afe3520b53bb9dc879806411faf3599ad6a9caELBA-2024-12732ol7_aarch64_u9_patch
qemu-4.2.1-9.el7.aarch64.rpm2eec60a264d95f80d0d92b34f56018562de8db98b88b586462abcfe9518fa79cELBA-2023-24511ol7_aarch64_developer_kvm_utils
qemu-4.2.1-9.el7.aarch64.rpm2eec60a264d95f80d0d92b34f56018562de8db98b88b586462abcfe9518fa79cELBA-2023-24511ol7_aarch64_latest
qemu-4.2.1-9.el7.aarch64.rpm2eec60a264d95f80d0d92b34f56018562de8db98b88b586462abcfe9518fa79cELBA-2023-24511ol7_aarch64_u9_patch
qemu-block-gluster-4.2.1-9.el7.aarch64.rpm79daaf656a969819cbeead49009fd9fb35f5d6ba5683a43afd03fbc829193d24ELBA-2024-12732ol7_aarch64_developer_kvm_utils
qemu-block-gluster-4.2.1-9.el7.aarch64.rpm79daaf656a969819cbeead49009fd9fb35f5d6ba5683a43afd03fbc829193d24ELBA-2024-12732ol7_aarch64_latest
qemu-block-gluster-4.2.1-9.el7.aarch64.rpm79daaf656a969819cbeead49009fd9fb35f5d6ba5683a43afd03fbc829193d24ELBA-2024-12732ol7_aarch64_u9_patch
qemu-block-iscsi-4.2.1-9.el7.aarch64.rpmae0209a3ca68d98fbf8846d1080665d97a476360bccead9931cfc9654bb769d6ELBA-2024-12732ol7_aarch64_developer_kvm_utils
qemu-block-iscsi-4.2.1-9.el7.aarch64.rpmae0209a3ca68d98fbf8846d1080665d97a476360bccead9931cfc9654bb769d6ELBA-2024-12732ol7_aarch64_latest
qemu-block-iscsi-4.2.1-9.el7.aarch64.rpmae0209a3ca68d98fbf8846d1080665d97a476360bccead9931cfc9654bb769d6ELBA-2024-12732ol7_aarch64_u9_patch
qemu-block-rbd-4.2.1-9.el7.aarch64.rpm0170575f575151245e1168342dd858ab1182ac488e6e42e82503dde6f0975e81ELBA-2024-12732ol7_aarch64_developer_kvm_utils
qemu-block-rbd-4.2.1-9.el7.aarch64.rpm0170575f575151245e1168342dd858ab1182ac488e6e42e82503dde6f0975e81ELBA-2024-12732ol7_aarch64_latest
qemu-block-rbd-4.2.1-9.el7.aarch64.rpm0170575f575151245e1168342dd858ab1182ac488e6e42e82503dde6f0975e81ELBA-2024-12732ol7_aarch64_u9_patch
qemu-common-4.2.1-9.el7.aarch64.rpm5f38776ecd5c6ff742f1927f5326f06a37b07e9676f8618d843b53cc57b405aeELBA-2023-24511ol7_aarch64_developer_kvm_utils
qemu-common-4.2.1-9.el7.aarch64.rpm5f38776ecd5c6ff742f1927f5326f06a37b07e9676f8618d843b53cc57b405aeELBA-2023-24511ol7_aarch64_latest
qemu-common-4.2.1-9.el7.aarch64.rpm5f38776ecd5c6ff742f1927f5326f06a37b07e9676f8618d843b53cc57b405aeELBA-2023-24511ol7_aarch64_u9_patch
qemu-img-4.2.1-9.el7.aarch64.rpm83bff7cbf8c6c9dcf46b5122293c2b4cfba4a9d002a54c1f188f1547513841ecELBA-2024-12732ol7_aarch64_developer_kvm_utils
qemu-img-4.2.1-9.el7.aarch64.rpm83bff7cbf8c6c9dcf46b5122293c2b4cfba4a9d002a54c1f188f1547513841ecELBA-2024-12732ol7_aarch64_latest
qemu-img-4.2.1-9.el7.aarch64.rpm83bff7cbf8c6c9dcf46b5122293c2b4cfba4a9d002a54c1f188f1547513841ecELBA-2024-12732ol7_aarch64_u9_patch
qemu-kvm-4.2.1-9.el7.aarch64.rpm2244b63915cdbe9679dbc3b6c223bc074285e36a43530c070eea56f59375f09bELBA-2024-12732ol7_aarch64_developer_kvm_utils
qemu-kvm-4.2.1-9.el7.aarch64.rpm2244b63915cdbe9679dbc3b6c223bc074285e36a43530c070eea56f59375f09bELBA-2024-12732ol7_aarch64_latest
qemu-kvm-4.2.1-9.el7.aarch64.rpm2244b63915cdbe9679dbc3b6c223bc074285e36a43530c070eea56f59375f09bELBA-2024-12732ol7_aarch64_u9_patch
qemu-kvm-core-4.2.1-9.el7.aarch64.rpm64f7cae69cf86374804821092883d42267cbc18c3d510e754cbac191db3af769ELBA-2024-12732ol7_aarch64_developer_kvm_utils
qemu-kvm-core-4.2.1-9.el7.aarch64.rpm64f7cae69cf86374804821092883d42267cbc18c3d510e754cbac191db3af769ELBA-2024-12732ol7_aarch64_latest
qemu-kvm-core-4.2.1-9.el7.aarch64.rpm64f7cae69cf86374804821092883d42267cbc18c3d510e754cbac191db3af769ELBA-2024-12732ol7_aarch64_u9_patch
qemu-system-aarch64-4.2.1-9.el7.aarch64.rpm7a4e0a54c24bf55942daeb11411e56232d3f5ac1f1035bb7e62a10a98e474cf8ELBA-2024-12732ol7_aarch64_developer_kvm_utils
qemu-system-aarch64-4.2.1-9.el7.aarch64.rpm7a4e0a54c24bf55942daeb11411e56232d3f5ac1f1035bb7e62a10a98e474cf8ELBA-2024-12732ol7_aarch64_latest
qemu-system-aarch64-4.2.1-9.el7.aarch64.rpm7a4e0a54c24bf55942daeb11411e56232d3f5ac1f1035bb7e62a10a98e474cf8ELBA-2024-12732ol7_aarch64_u9_patch
qemu-system-aarch64-core-4.2.1-9.el7.aarch64.rpm126b4338f04d16b1b84ed31e5a0694630f6d56372e2ffda09d2ab8ff4a7162aaELBA-2024-12732ol7_aarch64_developer_kvm_utils
qemu-system-aarch64-core-4.2.1-9.el7.aarch64.rpm126b4338f04d16b1b84ed31e5a0694630f6d56372e2ffda09d2ab8ff4a7162aaELBA-2024-12732ol7_aarch64_latest
qemu-system-aarch64-core-4.2.1-9.el7.aarch64.rpm126b4338f04d16b1b84ed31e5a0694630f6d56372e2ffda09d2ab8ff4a7162aaELBA-2024-12732ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64) qemu-4.2.1-9.el7.src.rpm23d7ed1ab0d3e0d5abacd36a3843485604c1901272d2f154d28968a871e2ead1ELBA-2023-24511ol7_x86_64_developer_kvm_utils
qemu-4.2.1-9.el7.src.rpm23d7ed1ab0d3e0d5abacd36a3843485604c1901272d2f154d28968a871e2ead1ELBA-2023-24511ol7_x86_64_kvm_utils
qemu-4.2.1-9.el7.x86_64.rpm01f18569ed02384f513a8b579f9c0383d3aca5de98edfdc2b99fa061f147d586ELBA-2023-24511ol7_x86_64_developer_kvm_utils
qemu-4.2.1-9.el7.x86_64.rpm01f18569ed02384f513a8b579f9c0383d3aca5de98edfdc2b99fa061f147d586ELBA-2023-24511ol7_x86_64_kvm_utils
qemu-block-gluster-4.2.1-9.el7.x86_64.rpm25aa719f7f508c27ef82facd8b1b050ce9f2038514230dd5314f5ba2ac8342f2ELBA-2024-12732ol7_x86_64_developer_kvm_utils
qemu-block-gluster-4.2.1-9.el7.x86_64.rpm25aa719f7f508c27ef82facd8b1b050ce9f2038514230dd5314f5ba2ac8342f2ELBA-2024-12732ol7_x86_64_kvm_utils
qemu-block-iscsi-4.2.1-9.el7.x86_64.rpm1c4458eea022f9fa474e2a8c073c3b4802545aea6f295ba98037a4c954ced6d1ELBA-2024-12732ol7_x86_64_developer_kvm_utils
qemu-block-iscsi-4.2.1-9.el7.x86_64.rpm1c4458eea022f9fa474e2a8c073c3b4802545aea6f295ba98037a4c954ced6d1ELBA-2024-12732ol7_x86_64_kvm_utils
qemu-block-rbd-4.2.1-9.el7.x86_64.rpm81e2722952483f90ac5a9960aad5c135c9a371fff79ab913159810ed9d43b28dELBA-2024-12732ol7_x86_64_developer_kvm_utils
qemu-block-rbd-4.2.1-9.el7.x86_64.rpm81e2722952483f90ac5a9960aad5c135c9a371fff79ab913159810ed9d43b28dELBA-2024-12732ol7_x86_64_kvm_utils
qemu-common-4.2.1-9.el7.x86_64.rpmae485aaee9ef602f7ea9ef4ce26f9a42c96cbb1045bbf48788b74ed719d23e19ELBA-2023-24511ol7_x86_64_developer_kvm_utils
qemu-common-4.2.1-9.el7.x86_64.rpmae485aaee9ef602f7ea9ef4ce26f9a42c96cbb1045bbf48788b74ed719d23e19ELBA-2023-24511ol7_x86_64_kvm_utils
qemu-img-4.2.1-9.el7.x86_64.rpm071054b07a7f557a50fd8373a98ec3aa4a925b915a8f4d52a747de3308bb0155ELBA-2024-12732ol7_x86_64_developer_kvm_utils
qemu-img-4.2.1-9.el7.x86_64.rpm071054b07a7f557a50fd8373a98ec3aa4a925b915a8f4d52a747de3308bb0155ELBA-2024-12732ol7_x86_64_kvm_utils
qemu-kvm-4.2.1-9.el7.x86_64.rpm4c995c0fbdd431ffa11c3dc0a2d0e0252a6d80669fd7349e82938809181ab065ELBA-2024-12732ol7_x86_64_developer_kvm_utils
qemu-kvm-4.2.1-9.el7.x86_64.rpm4c995c0fbdd431ffa11c3dc0a2d0e0252a6d80669fd7349e82938809181ab065ELBA-2024-12732ol7_x86_64_kvm_utils
qemu-kvm-core-4.2.1-9.el7.x86_64.rpmd3dfaacd7a72d9ef3926cd2212190a1153f8ef77b6de0dc887376578030da0dbELBA-2024-12732ol7_x86_64_developer_kvm_utils
qemu-kvm-core-4.2.1-9.el7.x86_64.rpmd3dfaacd7a72d9ef3926cd2212190a1153f8ef77b6de0dc887376578030da0dbELBA-2024-12732ol7_x86_64_kvm_utils
qemu-system-x86-4.2.1-9.el7.x86_64.rpm70e380644803d7a8b45e0e2456b0a3ca098643994bb858dd7b88cad5a45ddf22ELBA-2023-24511ol7_x86_64_developer_kvm_utils
qemu-system-x86-4.2.1-9.el7.x86_64.rpm70e380644803d7a8b45e0e2456b0a3ca098643994bb858dd7b88cad5a45ddf22ELBA-2023-24511ol7_x86_64_kvm_utils
qemu-system-x86-core-4.2.1-9.el7.x86_64.rpm589838a96f2543e787977c3f0ad5cd04836d38daa0b355468613af669b676930ELBA-2024-12732ol7_x86_64_developer_kvm_utils
qemu-system-x86-core-4.2.1-9.el7.x86_64.rpm589838a96f2543e787977c3f0ad5cd04836d38daa0b355468613af669b676930ELBA-2024-12732ol7_x86_64_kvm_utils



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete