[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ELSA-2023-12328 -- Oracle qemu-kvm_qemu-guest-agent_qemu-img_qemu-virtiofsd

ID: oval:org.secpod.oval:def:1506667Date: (C)2023-07-21   (M)2024-04-25
Class: PATCHFamily: unix




[6.1.1-6.el9] - Update changelog [Orabug: 35343538] - ebpf: fix compatibility with libbpf 1.0+ [Orabug: 35268538] - ebpf: replace deprecated bpf_program__set_socket_filter [Orabug: 35268538] - CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 [Orabug: 35305727] {CVE-2023-1544} - virtio-gpu: do not byteswap padding [Orabug: 35304723] - KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors [Orabug: 35241527] - qemu-kvm.spec: fix Linux io_uring support [Orabug: 35265200] - hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update [Orabug: 35219290] [6.1.1-5.el9] - hw/pvrdma: Protect against buggy or malicious guest driver [Orabug: 35064352] {CVE-2022-1050} - hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion [Orabug: 35060182] - hw/display/qxl: Avoid buffer overrun in qxl_phys2virt [Orabug: 35060182] {CVE-2022-4144} - hw/display/qxl: Pass requested buffer size to qxl_phys2virt [Orabug: 35060182] - hw/display/qxl: Document qxl_phys2virt [Orabug: 35060182] - hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler [Orabug: 35060182] - ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext [Orabug: 35060115] {CVE-2022-3165} - hw/arm/virt: build SMBIOS 19 table - vl: Add an -action option to override MCE handling [Orabug: 34779160] - hw/acpi/erst.c: Fix memory handling issues [Orabug: 34779541] {CVE-2022-4172} - target/i386: kvm: do not access uninitialized variable on older kernels [Orabug: 34492975] - x86: Support XFD and AMX xsave data migration [Orabug: 34492975] - x86: add support for KVM_CAP_XSAVE2 and AMX state migration [Orabug: 34492975] - x86: Add AMX CPUIDs enumeration [Orabug: 34492975] - x86: Add XFD faulting bit for state components [Orabug: 34492975] - x86: Grant AMX permission for guest [Orabug: 34492975] - x86: Add AMX XTILECFG and XTILEDATA components [Orabug: 34492975] - x86: Fix the 64-byte boundary enumeration for extended state [Orabug: 34492975] - linux-headers: include missing changes from 5.17 [Orabug: 34492975] - linux-headers: Update headers to v5.17-rc1 [Orabug: 34492975] - linux-headers: update to 5.16-rc1 [Orabug: 34492975] - i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type - i386/pc: relocate 4g start to 1T where applicable - i386/pc: bounds check phys-bits against max used GPA - i386/pc: factor out device_memory base/size to helper - i386/pc: factor out above-4g end to an helper - i386/pc: pass pci_hole64_size to pc_memory_init - i386/pc: create pci-host qdev prior to pc_memory_init - hw/i386: add 4g boundary start to X86MachineState - vhost-vdpa: fix assert !virtio_net_get_subqueue-

Platform:
Oracle Linux 9
Product:
qemu-kvm
qemu-guest-agent
qemu-img
qemu-virtiofsd
Reference:
ELSA-2023-12328
CVE-2023-1544
CVE    1
CVE-2023-1544
CPE    4
cpe:/a:kvm_group:qemu-kvm
cpe:/a:kvm_group:qemu_guest_agent
cpe:/a:kvm_group:qemu-img
cpe:/o:oracle:linux:9
...

© SecPod Technologies