[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ELSA-2021-9034 -- Oracle qemu_qemu-kvm_qemu-system

ID: oval:org.secpod.oval:def:1504760Date: (C)2021-03-18   (M)2024-04-17
Class: PATCHFamily: unix




[15:4.2.1-4.el7] - Document CVE-2020-25723 as fixed [Orabug: 32222397] {CVE-2020-25084} {CVE-2020-25723} - hw/net/e1000e: advance desc_offset in case of null descriptor [Orabug: 32217517] {CVE-2020-28916} - i386: Add 2nd Generation AMD EPYC processors [Orabug: 32217570] - libslirp: Update version to include CVE fixes [Orabug: 32208456] [Orabug: 32208462] {CVE-2020-29129} {CVE-2020-29130} - Document CVE-2020-25624 as fixed [Orabug: 32212527] {CVE-2020-25624} {CVE-2020-25625} - pvpanic: Advertise the PVPANIC_CRASHLOADED event support [Orabug: 32102853] - ati: check x y display parameter values [Orabug: 32108251] {CVE-2020-27616} - Add AArch64 support for QMP regdump tool and sosreport plugin [Orabug: 32080658] - Add qemu_regdump sosreport plugin support for "-mon" QMP sockets - migration/dirtyrate: present dirty rate only when querying the rate has completed - migration/dirtyrate: record start_time and calc_time while at the measuring state - migration/dirtyrate: Add trace_calls to make it easier to debug - migration/dirtyrate: Implement qmp_cal_dirty_rate/qmp_get_dirty_rate function - migration/dirtyrate: Implement calculate_dirtyrate function - migration/dirtyrate: Implement set_sample_page_period and is_sample_period_valid - migration/dirtyrate: skip sampling ramblock with size below MIN_RAMBLOCK_SIZE - migration/dirtyrate: Compare page hash results for recorded sampled page - migration/dirtyrate: Record hash results for each sampled page - migration/dirtyrate: move RAMBLOCK_FOREACH_MIGRATABLE into ram.h - migration/dirtyrate: Add dirtyrate statistics series functions - migration/dirtyrate: Add RamblockDirtyInfo to store sampled page info - migration/dirtyrate: add DirtyRateStatus to denote calculation status - migration/dirtyrate: setup up query-dirtyrate framwork - ram_addr: Split RAMBlock definition [15:4.2.1-3.el7] - qemu-kvm.spec: Install block storage module RPMs by default [Orabug: 31943789] - qemu-kvm.spec: Enable block-ssh module RPM [Orabug: 31943763] - hw: usb: hcd-ohci: check for processed TD before retire [Orabug: 31901690] {CVE-2020-25625} - hw: usb: hcd-ohci: check len and frame_number variables [Orabug: 31901690] {CVE-2020-25625} - hw: ehci: check return value of "usb_packet_map" [Orabug: 31901649] {CVE-2020-25084} - hw: xhci: check return value of "usb_packet_map" [Orabug: 31901649] {CVE-2020-25084} - qemu.spec: Enable "-Werror" for OL7 builds [Orabug: 31922718] - usb: fix setup_len init [Orabug: 31848849] {CVE-2020-14364} - Document CVE-2020-12829 and CVE-2020-14415 as fixed [Orabug: 31855502] [Orabug: 31855427] {CVE-2020-12829} {CVE-2020-14415} [15:4.2.1-2.el7] - hw/net/xgmac: Fix buffer overflow in xgmac_enet_send [Orabug: 31667649] {CVE-2020-15863} - hw/net/net_tx_pkt: fix assertion failure in net_tx_pkt_add_raw_fragment [Orabug: 31737809] {CVE-2020-16092} - migration: fix memory leak in qmp_migrate_set_parameters [Orabug: 31806256] - virtio-net: fix removal of failover device [Orabug: 31806255] - pvpanic: implement crashloaded event handling [Orabug: 31677154] - pvpanic: introduce crashloaded for pvpanic [Orabug: 31677154] [15:4.2.1-1.el7] - hw/sd/sdcard: Do not switch to ReceivingData if address is invalid [Orabug: 31414336] {CVE-2020-13253} - hw/sd/sdcard: Update coding style to make checkpatch.pl happy [Orabug: 31414336] - hw/sd/sdcard: Do not allow invalid SD card sizes [Orabug: 31414336] {CVE-2020-13253} - hw/sd/sdcard: Simplify realize a bit [Orabug: 31414336] - hw/sd/sdcard: Restrict Class 6 commands to SCSD cards [Orabug: 31414336] - libslirp: Update to v4.3.1 to fix CVE-2020-10756 [Orabug: 31604999] {CVE-2020-10756} - Document CVEs as fixed 2/2 [Orabug: 30618035] {CVE-2017-18043} {CVE-2018-10839} {CVE-2018-11806} {CVE-2018-12617} {CVE-2018-15746} {CVE-2018-16847} {CVE-2018-16867} {CVE-2018-17958} {CVE-2018-17962} {CVE-2018-17963} {CVE-2018-18849} {CVE-2018-19364} {CVE-2018-19489} {CVE-2018-3639} {CVE-2018-5683} {CVE-2018-7550} {CVE-2018-7858} {CVE-2019-12068} {CVE-2019-15034} {CVE-2019-15890} {CVE-2019-20382} {CVE-2020-10702} {CVE-2020-10761} {CVE-2020-11102} {CVE-2020-11869} {CVE-2020-13361} {CVE-2020-13765} {CVE-2020-13800} {CVE-2020-1711} {CVE-2020-1983} {CVE-2020-8608} - Document CVEs as fixed 1/2 [Orabug: 30618035] {CVE-2017-10806} {CVE-2017-11334} {CVE-2017-12809} {CVE-2017-13672} {CVE-2017-13673} {CVE-2017-13711} {CVE-2017-14167} {CVE-2017-15038} {CVE-2017-15119} {CVE-2017-15124} {CVE-2017-15268} {CVE-2017-15289} {CVE-2017-16845} {CVE-2017-17381} {CVE-2017-18030} {CVE-2017-2630} {CVE-2017-2633} {CVE-2017-5715} {CVE-2017-5753} {CVE-2017-5754} {CVE-2017-5931} {CVE-2017-6058} {CVE-2017-7471} {CVE-2017-7493} {CVE-2017-8112} {CVE-2017-8309} {CVE-2017-8379} {CVE-2017-8380} {CVE-2017-9503} {CVE-2017-9524} {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2018-16872} {CVE-2018-20123} {CVE-2018-20124} {CVE-2018-20125} {CVE-2018-20126} {CVE-2018-20191} {CVE-2018-20216} {CVE-2018-20815} {CVE-2019-11091} {CVE-2019-12155} {CVE-2019-14378} {CVE-2019-3812} {CVE-2019-5008} {CVE-2019-6501} {CVE-2019-6778} {CVE-2019-8934} {CVE-2019-9824} - qemu-kvm.spec: Add .spec file for OL8 [Orabug: 30618035] - qemu.spec: Add .spec file for OL7 [Orabug: 30618035] - qemu-submodule-init: Add Git submodule init script [Orabug: 30618035] - vhost.conf: Initial vhost.conf [Orabug: 30618035] - parfait: Add buildrpm/parfait-qemu.conf [Orabug: 30618035] - virtio: Set PCI subsystem vendor ID to Oracle [Orabug: 30618035] - qemu_regdump.py: Initial qemu_regdump.py [Orabug: 30618035] - qmp-regdump: Initial qmp-regdump [Orabug: 30618035] - bridge.conf: Initial bridge.conf [Orabug: 30618035] - kvm.conf: Initial kvm.conf [Orabug: 30618035] - 80-kvm.rules: Initial 80-kvm.rules [Orabug: 30618035] - exec: set map length to zero when returning NULL [Orabug: 31439733] {CVE-2020-13659} - megasas: use unsigned type for reply_queue_head and check index [Orabug: 31414338] {CVE-2020-13362} - memory: Revert "memory: accept mismatching sizes in memory_region_access_valid" [Orabug: 31439736] [Orabug: 31452202] {CVE-2020-13754} {CVE-2020-13791} [15:4.1.1-3.el7] - buildrpm/spec files: Dont package elf2dmp [Orabug: 31657424] - qemu-kvm.spec: Enable the block-curl package [Orabug: 31657424] - qemu.spec: enable have_curl in spec [Orabug: 31657424] [15:4.1.1-2.el7] - Document CVE-2020-13765 as fixed [Orabug: 31463250] {CVE-2020-13765} - kvm: Reallocate dirty_bmap when we change a slot [Orabug: 31076399] - kvm: split too big memory section on several memslots [Orabug: 31076399] - target/i386: do not set unsupported VMX secondary execution controls [Orabug: 31463710] - target/i386: add VMX definitions [Orabug: 31463710] - ati-vga: check mm_index before recursive call [Orabug: 31452206] {CVE-2020-13800} - es1370: check total frame count against current frame [Orabug: 31463235] {CVE-2020-13361} - ati-vga: Fix checks in ati_2d_blt to avoid crash [Orabug: 31238432] {CVE-2020-11869} - libslirp: Update to stable-4.2 to fix CVE-2020-1983 [Orabug: 31241227] {CVE-2020-1983} - Document CVEs as fixed {CVE-2019-12068} {CVE-2019-15034} - libslirp: Update to version 4.2.0 to fix CVEs [Orabug: 30274592] [Orabug: 30869830] {CVE-2019-15890} {CVE-2020-8608} - target/i386: add support for MSR_IA32_TSX_CTRL [Orabug: 31124041] - qemu-img: Add --target-is-zero to convert - vnc: fix memory leak when vnc disconnect [Orabug: 30996427] {CVE-2019-20382} - iscsi: Cap block count from GET LBA STATUS [Orabug: 31124035] {CVE-2020-1711} - qemu.spec: Remove "BuildRequires: kernel" [Orabug: 31124047] [15:4.1.1-1.el7] - qemu-submodule-init: Add Git submodule init script

Platform:
Oracle Linux 7
Product:
qemu
qemu-kvm
qemu-system
Reference:
ELSA-2021-9034
CVE-2020-14364
CVE-2020-16092
CVE-2020-13754
CVE-2020-13362
CVE-2020-11102
CVE-2020-15863
CVE-2020-13791
CVE-2020-13659
CVE-2020-13253
CVE-2020-10702
CVE-2019-15034
CVE-2020-12829
CVE-2020-14415
CVE-2020-25625
CVE-2020-25084
CVE-2020-27616
CVE-2020-29129
CVE-2020-29130
CVE-2020-25624
CVE-2020-28916
CVE-2020-25723
CVE-2020-10756
CVE    22
CVE-2020-10756
CVE-2020-10702
CVE-2020-11102
CVE-2020-13253
...
CPE    3
cpe:/a:qemu:qemu
cpe:/o:oracle:linux:7
cpe:/a:kvm_group:qemu-kvm

© SecPod Technologies