ELSA-2023-12834

ELSA-2023-12834 - qemu security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2023-09-22

Description

[15:4.2.1-28.el7]
- virtio-crypto: verify src&dst buffer length for sym request (Zhenwei Pi) [Orabug: 35724113] {CVE-2023-3180}
- hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35724112] {CVE-2023-0330}
- kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35719844]
- KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35719844]
- accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35719844]
- KVM: Use a big lock to replace per-kml slots_lock (Peter Xu) [Orabug: 35719844]
- pcie: don't set link state active if the slot is empty (Laurent Vivier) [Orabug: 35707933]
- vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35662850] {CVE-2023-3301}

Related CVEs

CVE-2023-3301

CVE-2023-0330

CVE-2023-3180

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	qemu-4.2.1-28.el7.src.rpm	26a7af0f6082f0df7874bcdf04707c0c	-	ol7_x86_64_kvm_utils
	qemu-4.2.1-28.el7.x86_64.rpm	6a0a52185cce206169797eb7cdc6f7e9	-	ol7_x86_64_kvm_utils
	qemu-block-gluster-4.2.1-28.el7.x86_64.rpm	3492cd559d710731d7abc65cd92478dc	-	ol7_x86_64_kvm_utils
	qemu-block-iscsi-4.2.1-28.el7.x86_64.rpm	cf1556fb6f5b9d9895bb0ca3cc668742	-	ol7_x86_64_kvm_utils
	qemu-block-rbd-4.2.1-28.el7.x86_64.rpm	4f45d9762c0290f20cfe4845e0e15a15	-	ol7_x86_64_kvm_utils
	qemu-common-4.2.1-28.el7.x86_64.rpm	93f9004d408bd8bacd3dde4a737d291a	-	ol7_x86_64_kvm_utils
	qemu-img-4.2.1-28.el7.x86_64.rpm	ef7878234789e1ab934544b78de8f84c	-	ol7_x86_64_kvm_utils
	qemu-kvm-4.2.1-28.el7.x86_64.rpm	b37dad8bcea752b97a16f952569d9a39	-	ol7_x86_64_kvm_utils
	qemu-kvm-core-4.2.1-28.el7.x86_64.rpm	4566676be0b40ba0f00b71e2c2b322f9	-	ol7_x86_64_kvm_utils
	qemu-system-x86-4.2.1-28.el7.x86_64.rpm	4a53de6ef0c7b57bbae17bfd72e309c4	-	ol7_x86_64_kvm_utils
	qemu-system-x86-core-4.2.1-28.el7.x86_64.rpm	b29206c70c872d78041e909a16b18c75	-	ol7_x86_64_kvm_utils

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team