Oracle Errata SystemOracle Linux5.32021-09-09T12:48:57
ELSA-2020-4000: libvirt security and bug fix update (MODERATE)
Oracle Linux 7
[4.5.0-36]
- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)
[4.5.0-35]
- qemu: dont take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: dont hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: dont hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)
[4.5.0-34]
- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)
MODERATECopyright 2020 Oracle, Inc.CVE-2019-20485CVE-2020-10703libvirt-daemon-driver-storage-logicallibvirt-daemon-driver-qemulibvirt-nsslibvirt-daemon-driver-storage-corelibvirt-daemon-driver-nwfilterlibvirt-login-shelllibvirt-daemon-driver-lxclibvirt-devellibvirt-daemon-lxclibvirt-daemonlibvirt-daemon-config-nwfilterlibvirt-daemon-driver-storagelibvirt-daemon-driver-interfacelibvirt-daemon-config-networklibvirt-daemon-driver-storage-disklibvirt-adminlibvirt-bash-completionlibvirt-daemon-driver-storage-scsilibvirt-clientlibvirtlibvirt-daemon-driver-networklibvirt-daemon-driver-storage-mpathlibvirt-docslibvirt-lock-sanlocklibvirt-daemon-driver-storage-glusteroraclelinux-releaselibvirt-libslibvirt-daemon-kvmlibvirt-daemon-driver-storage-rbdlibvirt-daemon-driver-storage-iscsilibvirt-daemon-driver-secretlibvirt-daemon-driver-nodedev72f97b74ec551f03^7x86_640:4.5.0-36.el7