ELSA-2022-9978

ELSA-2022-9978 - qemu security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2022-11-04

Description

[15:4.2.1-21.el7]
- qemu-kvm.spec: Fix the qemu-regdump sos report plugin path (Mark Kanda) [Orabug: 34680062]
- qmp-regdump: Require python3 on OL8 (Mark Kanda) [Orabug: 34672256]
- iotests: Adjust 186.out to account for 'null' node-name (Mark Kanda) [Orabug: 34447388]
- block: Set the name of BlockBackend if possible (Annie Li) [Orabug: 34447388]
- acpi: Update _DSM method in expected files (Mark Kanda) [Orabug: 34616322]
- acpi/gpex: Fix cca attribute check for pxb device (Xingang Wang) [Orabug: 34616322]
- acpi: Enable pxb unit-test for ARM virt machine (Jiahui Cen) [Orabug: 34616322]
- Kconfig: Compile PXB for ARM_VIRT (Jiahui Cen) [Orabug: 34616322]
- acpi/gpex: Exclude pxb's resources from PCI0 (Jiahui Cen) [Orabug: 34616322]
- acpi/gpex: Inform os to keep firmware resource map (Jiahui Cen) [Orabug: 34616322]
- acpi: Add addr offset in build_crs (Jiahui Cen) [Orabug: 34616322]
- unit-test: Add testcase for pxb (Yubo Miao) [Orabug: 34616322]
- acpi: Align the size to 128k (Yubo Miao) [Orabug: 34616322]
- acpi/gpex: Build tables for pxb (Yubo Miao) [Orabug: 34616322]
- acpi: Extract crs build form acpi_build.c (Yubo Miao) [Orabug: 34616322]
- hw/arm/virt: Write extra pci roots into fw_cfg (Jiahui Cen) [Orabug: 34616322]
- fw_cfg: Refactor extra pci roots addition (Jiahui Cen) [Orabug: 34616322]
- acpi/gpex: Extract two APIs from acpi_dsdt_add_pci (Yubo Miao) [Orabug: 34616322]
- arm: use acpi_dsdt_add_gpex (Gerd Hoffmann) [Orabug: 34616322]
- acpi: add acpi_dsdt_add_gpex (Gerd Hoffmann) [Orabug: 34616322]
- acpi: Allow DSDT acpi table changes (Jiahui Cen) [Orabug: 34616322]
- move MemMapEntry (Gerd Hoffmann) [Orabug: 34616322]
- scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34353672] {CVE-2022-0216}
- scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34353672] {CVE-2022-0216}
- tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34353672] {CVE-2022-0216}
- hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34353672] {CVE-2022-0216}
- vfio: defer to commit kvm irq routing when enable msi/msix (Longpeng (Mike)) [Orabug: 34419422]
- vfio: simplify the failure path in vfio_msi_enable (Longpeng (Mike)) [Orabug: 34419422]
- vfio: move re-enabling INTX out of the common helper (Longpeng (Mike)) [Orabug: 34419422]
- vfio: simplify the conditional statements in vfio_msi_enable (Longpeng (Mike)) [Orabug: 34419422]
- kvm/msi: do explicit commit when adding msi routes (Longpeng (Mike)) [Orabug: 34419422]
- kvm-irqchip: introduce new API to support route change (Longpeng (Mike)) [Orabug: 34419422]
- event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34419422]
- qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda) [Orabug: 34510460]

Related CVEs

CVE-2022-0216

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	qemu-4.2.1-21.el7.src.rpm	641e8480d5e3490a1456ea6326a8fc0d	-
	ivshmem-tools-4.2.1-21.el7.aarch64.rpm	c1700dc231800eb79b1e48ebd536284b	-
	qemu-4.2.1-21.el7.aarch64.rpm	ca90fed6b3c5916449828acea312bcb7	-
	qemu-block-gluster-4.2.1-21.el7.aarch64.rpm	eae389c453026c7851016da5a9ae7d49	-
	qemu-block-iscsi-4.2.1-21.el7.aarch64.rpm	cd10fb8a534df3826f8b811f313db959	-
	qemu-block-rbd-4.2.1-21.el7.aarch64.rpm	ea6ea0059fe432e3a32e224bbdeb0684	-
	qemu-common-4.2.1-21.el7.aarch64.rpm	e516af869b1d44270f0af305bd2944c2	-
	qemu-img-4.2.1-21.el7.aarch64.rpm	ca01cf9acc90024cc228c7c93c7241ac	-
	qemu-kvm-4.2.1-21.el7.aarch64.rpm	fb78cf7b5a35ccb078491a5f54a2ed15	-
	qemu-kvm-core-4.2.1-21.el7.aarch64.rpm	87d6ccc4635bfe798dcbd4898eb5d179	-
	qemu-system-aarch64-4.2.1-21.el7.aarch64.rpm	f0b5215fdf709bb1796dec07b00cdbb2	-
	qemu-system-aarch64-core-4.2.1-21.el7.aarch64.rpm	9ebb4588ea35f2294a3f74d1ec77644c	-
Oracle Linux 7 (x86_64)	qemu-4.2.1-21.el7.src.rpm	641e8480d5e3490a1456ea6326a8fc0d	-
	qemu-4.2.1-21.el7.x86_64.rpm	1d0c6478c47ad21ca644458e4e1247b3	-
	qemu-block-gluster-4.2.1-21.el7.x86_64.rpm	a63ace36d9e7f85d77eb0ffbe03abe65	-
	qemu-block-iscsi-4.2.1-21.el7.x86_64.rpm	f9955dc7347ea459c98e9ae3b75b9bf5	-
	qemu-block-rbd-4.2.1-21.el7.x86_64.rpm	c84acfe16ab7a2036182c4d31f40f4c6	-
	qemu-common-4.2.1-21.el7.x86_64.rpm	c34b9b40f3eb1469a455d2e4b7b5f36f	-
	qemu-img-4.2.1-21.el7.x86_64.rpm	9a571c79ecd0a38d770bfceb79775d93	-
	qemu-kvm-4.2.1-21.el7.x86_64.rpm	4bd9b5277a863e3f1d32155b8c5b12c9	-
	qemu-kvm-core-4.2.1-21.el7.x86_64.rpm	232303f4e3b2acaf230b1045d17a5d33	-
	qemu-system-x86-4.2.1-21.el7.x86_64.rpm	ce7aee7341552d5bfe142731b6d69d00	-
	qemu-system-x86-core-4.2.1-21.el7.x86_64.rpm	325c589c3da4e44ffbe40d03df86c729	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team