Oracle alert ELSA-2015-0349 (qemu-kvm)
| From: | Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2015-0349 Important: Oracle Linux 7 qemu-kvm security, bug fix, and enhancement update | |
| Date: | Thu, 12 Mar 2015 11:38:34 -0700 | |
| Message-ID: | <5501DD2A.8090004@oracle.com> |
Oracle Linux Security Advisory ELSA-2015-0349 http://linux.oracle.com/errata/ELSA-2015-0349.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: libcacard-1.5.3-86.el7.i686.rpm libcacard-1.5.3-86.el7.x86_64.rpm libcacard-devel-1.5.3-86.el7.i686.rpm libcacard-devel-1.5.3-86.el7.x86_64.rpm libcacard-tools-1.5.3-86.el7.x86_64.rpm qemu-img-1.5.3-86.el7.x86_64.rpm qemu-kvm-1.5.3-86.el7.x86_64.rpm qemu-kvm-common-1.5.3-86.el7.x86_64.rpm qemu-kvm-tools-1.5.3-86.el7.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/qemu-kvm-1.5.3-86... Description of changes: [1.5.3-86.el7] - kvm-vfio-pci-Fix-interrupt-disabling.patch [bz#1180942] - kvm-cirrus-fix-blit-region-check.patch [bz#1169456] - kvm-cirrus-don-t-overflow-CirrusVGAState-cirrus_bltbuf.patch [bz#1169456] - Resolves: bz#1169456 (CVE-2014-8106 qemu-kvm: qemu: cirrus: insufficient blit region checks [rhel-7.1]) - Resolves: bz#1180942 (qemu core dumped when unhotplug gpu card assigned to guest) [1.5.3-85.el7] - kvm-block-delete-cow-block-driver.patch [bz#1175325] - Resolves: bz#1175325 (Delete cow block driver) [1.5.3-84.el7] - kvm-qemu-iotests-Test-case-for-backing-file-deletion.patch [bz#1002493] - kvm-qemu-iotests-Add-sample-image-and-test-for-VMDK-vers.patch [bz#1134237] - kvm-vmdk-Check-VMFS-extent-line-field-number.patch [bz#1134237] - kvm-qemu-iotests-Introduce-_unsupported_imgopts.patch [bz#1002493] - kvm-qemu-iotests-Add-_unsupported_imgopts-for-vmdk-subfo.patch [bz#1002493] - kvm-vmdk-Fix-big-flat-extent-IO.patch [bz#1134241] - kvm-vmdk-Check-for-overhead-when-opening.patch [bz#1134251] - kvm-block-vmdk-add-basic-.bdrv_check-support.patch [bz#1134251] - kvm-qemu-iotest-Make-077-raw-only.patch [bz#1134237] - kvm-qemu-iotests-Don-t-run-005-on-vmdk-split-formats.patch [bz#1002493] - kvm-vmdk-extract-vmdk_read_desc.patch [bz#1134251] - kvm-vmdk-push-vmdk_read_desc-up-to-caller.patch [bz#1134251] - kvm-vmdk-do-not-try-opening-a-file-as-both-image-and-des.patch [bz#1134251] - kvm-vmdk-correctly-propagate-errors.patch [bz#1134251] - kvm-block-vmdk-do-not-report-file-offset-for-compressed-.patch [bz#1134251] - kvm-vmdk-Fix-d-and-lld-to-PRI-in-format-strings.patch [bz#1134251] - kvm-vmdk-Fix-x-to-PRIx32-in-format-strings-for-cid.patch [bz#1134251] - kvm-qemu-img-Convert-by-cluster-size-if-target-is-compre.patch [bz#1134283] - kvm-vmdk-Implement-.bdrv_write_compressed.patch [bz#1134283] - kvm-vmdk-Implement-.bdrv_get_info.patch [bz#1134283] - kvm-qemu-iotests-Test-converting-to-streamOptimized-from.patch [bz#1134283] - kvm-vmdk-Fix-local_err-in-vmdk_create.patch [bz#1134283] - kvm-fpu-softfloat-drop-INLINE-macro.patch [bz#1002493] - kvm-block-New-bdrv_nb_sectors.patch [bz#1002493] - kvm-vmdk-Optimize-cluster-allocation.patch [bz#1002493] - kvm-vmdk-Handle-failure-for-potentially-large-allocation.patch [bz#1002493] - kvm-vmdk-Use-bdrv_nb_sectors-where-sectors-not-bytes-are.patch [bz#1002493] - kvm-vmdk-fix-vmdk_parse_extents-extent_file-leaks.patch [bz#1002493] - kvm-vmdk-fix-buf-leak-in-vmdk_parse_extents.patch [bz#1002493] - kvm-vmdk-Fix-integer-overflow-in-offset-calculation.patch [bz#1002493] - kvm-migration-fix-parameter-validation-on-ram-load-CVE-2.patch [bz#1163078] - Resolves: bz#1002493 (qemu-img convert rate about 100k/second from qcow2/raw to vmdk format on nfs system file) - Resolves: bz#1134237 (Opening malformed VMDK description file should fail) - Resolves: bz#1134241 (QEMU fails to correctly read/write on VMDK with big flat extent) - Resolves: bz#1134251 (Opening an obviously truncated VMDK image should fail) - Resolves: bz#1134283 (qemu-img convert from ISO to streamOptimized fails) - Resolves: bz#1163078 (CVE-2014-7840 qemu-kvm: qemu: insufficient parameter validation during ram load [rhel-7.1]) [1.5.3-83.el7] - kvm-xhci-add-sanity-checks-to-xhci_lookup_uport.patch [bz#1074219] - kvm-Revert-Build-ceph-rbd-only-for-rhev.patch [bz#1140742] - kvm-Revert-rbd-Only-look-for-qemu-specific-copy-of-librb.patch [bz#1140742] - kvm-Revert-rbd-link-and-load-librbd-dynamically.patch [bz#1140742] - kvm-spec-Enable-rbd-driver-add-dependency.patch [bz#1140742] - Resolves: bz#1074219 (qemu core dump when install a RHEL.7 guest(xhci) with migration) - Resolves: bz#1140742 (Enable native support for Ceph) [1.5.3-82.el7] - kvm-hw-pci-fixed-error-flow-in-pci_qdev_init.patch [bz#1046007] - kvm-hw-pci-fixed-hotplug-crash-when-using-rombar-0-with-.patch [bz#1046007] - Resolves: bz#1046007 (qemu-kvm aborted when hot plug PCI device to guest with romfile and rombar=0) [1.5.3-81.el7] - kvm-migration-static-variables-will-not-be-reset-at-seco.patch [bz#1071776] - kvm-vfio-pci-Add-debug-config-options-to-disable-MSI-X-K.patch [bz#1098976] - kvm-vfio-correct-debug-macro-typo.patch [bz#1098976] - kvm-vfio-pci-Fix-MSI-X-debug-code.patch [bz#1098976] - kvm-vfio-pci-Fix-MSI-X-masking-performance.patch [bz#1098976] - kvm-vfio-Fix-MSI-X-vector-expansion.patch [bz#1098976] - kvm-vfio-Don-t-cache-MSIMessage.patch [bz#1098976] - Resolves: bz#1071776 (Migration "expected downtime" does not refresh after reset to a new value) - Resolves: bz#1098976 (2x RHEL 5.10 VM running on RHEL 7 KVM have low TCP_STREAM throughput) [1.5.3-80.el7] - kvm-dump-RHEL-specific-fix-for-CPUState-bug-introduced-b.patch [bz#1161563] - kvm-dump-guest-memory-Check-for-the-correct-return-value.patch [bz#1157798] - kvm-dump-const-qualify-the-buf-of-WriteCoreDumpFunction.patch [bz#1157798] - kvm-dump-add-argument-to-write_elfxx_notes.patch [bz#1157798] - kvm-dump-add-API-to-write-header-of-flatten-format.patch [bz#1157798] - kvm-dump-add-API-to-write-vmcore.patch [bz#1157798] - kvm-dump-add-API-to-write-elf-notes-to-buffer.patch [bz#1157798] - kvm-dump-add-support-for-lzo-snappy.patch [bz#1157798] - kvm-RPM-spec-build-qemu-kvm-with-lzo-and-snappy-enabled-.patch [bz#1157798] - kvm-dump-add-members-to-DumpState-and-init-some-of-them.patch [bz#1157798] - kvm-dump-add-API-to-write-dump-header.patch [bz#1157798] - kvm-dump-add-API-to-write-dump_bitmap.patch [bz#1157798] - kvm-dump-add-APIs-to-operate-DataCache.patch [bz#1157798] - kvm-dump-add-API-to-write-dump-pages.patch [bz#1157798] - kvm-dump-Drop-qmp_dump_guest_memory-stub-and-build-for-a.patch [bz#1157798] - kvm-dump-make-kdump-compressed-format-available-for-dump.patch [bz#1157798] - kvm-Define-the-architecture-for-compressed-dump-format.patch [bz#1157798] - kvm-dump-add-query-dump-guest-memory-capability-command.patch [bz#1157798] - kvm-dump-Drop-pointless-error_is_set-DumpState-member-er.patch [bz#1157798] - kvm-dump-fill-in-the-flat-header-signature-more-pleasing.patch [bz#1157798] - kvm-dump-simplify-write_start_flat_header.patch [bz#1157798] - kvm-dump-eliminate-DumpState.page_shift-guest-s-page-shi.patch [bz#1157798] - kvm-dump-eliminate-DumpState.page_size-guest-s-page-size.patch [bz#1157798] - kvm-dump-select-header-bitness-based-on-ELF-class-not-EL.patch [bz#1157798] - kvm-dump-hoist-lzo_init-from-get_len_buf_out-to-dump_ini.patch [bz#1157798] - kvm-dump-simplify-get_len_buf_out.patch [bz#1157798] - kvm-rename-parse_enum_option-to-qapi_enum_parse-and-make.patch [bz#1087724] - kvm-qapi-introduce-PreallocMode-and-new-PreallocModes-fu.patch [bz#1087724] - kvm-raw-posix-Add-falloc-and-full-preallocation-option.patch [bz#1087724] - kvm-qcow2-Add-falloc-and-full-preallocation-option.patch [bz#1087724] - kvm-vga-fix-invalid-read-after-free.patch [bz#1161890] - kvm-Use-qemu-kvm-in-documentation-instead-of-qemu-system.patch [bz#1140618] - kvm-vnc-sanitize-bits_per_pixel-from-the-client.patch [bz#1157645] - kvm-spice-call-qemu_spice_set_passwd-during-init.patch [bz#1138639] - kvm-block-raw-posix-Try-both-FIEMAP-and-SEEK_HOLE.patch [bz#1160237] - kvm-block-raw-posix-Fix-disk-corruption-in-try_fiemap.patch [bz#1160237] - kvm-block-raw-posix-use-seek_hole-ahead-of-fiemap.patch [bz#1160237] - kvm-raw-posix-Fix-raw_co_get_block_status-after-EOF.patch [bz#1160237] - kvm-raw-posix-raw_co_get_block_status-return-value.patch [bz#1160237] - kvm-raw-posix-SEEK_HOLE-suffices-get-rid-of-FIEMAP.patch [bz#1160237] - kvm-raw-posix-The-SEEK_HOLE-code-is-flawed-rewrite-it.patch [bz#1160237] - Resolves: bz#1087724 ([Fujitsu 7.1 FEAT]: qemu-img should use fallocate() system call for "preallocation=full" option) - Resolves: bz#1138639 (fail to login spice session with password + expire time) - Resolves: bz#1140618 (Should replace "qemu-system-i386" by "/usr/libexec/qemu-kvm" in manpage of qemu-kvm for our official qemu-kvm build) - Resolves: bz#1157645 (CVE-2014-7815 qemu-kvm: qemu: vnc: insufficient bits_per_pixel from the client sanitization [rhel-7.1]) - Resolves: bz#1157798 ([FEAT RHEL7.1]: qemu: Support compression for dump-guest-memory command) - Resolves: bz#1160237 (qemu-img convert intermittently corrupts output images) - Resolves: bz#1161563 (invalid QEMU NOTEs in vmcore that is dumped for multi-VCPU guests) - Resolves: bz#1161890 ([abrt] qemu-kvm: pixman_image_get_data(): qemu-kvm killed by SIGSEGV) [1.5.3-79.el7] - kvm-libcacard-link-against-qemu-error.o-for-error_report.patch [bz#1088176] - kvm-error-Add-error_abort.patch [bz#1088176] - kvm-blockdev-Fail-blockdev-add-with-encrypted-images.patch [bz#1088176] - kvm-blockdev-Fix-NULL-pointer-dereference-in-blockdev-ad.patch [bz#1088176] - kvm-qemu-iotests-Test-a-few-blockdev-add-error-cases.patch [bz#1088176] - kvm-block-Add-errp-to-bdrv_new.patch [bz#1088176] - kvm-qemu-img-Avoid-duplicate-block-device-IDs.patch [bz#1088176] - kvm-block-Catch-duplicate-IDs-in-bdrv_new.patch [bz#1088176] - kvm-qemu-img-Allow-source-cache-mode-specification.patch [bz#1138691] - kvm-qemu-img-Allow-cache-mode-specification-for-amend.patch [bz#1138691] - kvm-qemu-img-clarify-src_cache-option-documentation.patch [bz#1138691] - kvm-qemu-img-fix-rebase-src_cache-option-documentation.patch [bz#1138691] - kvm-qemu-img-fix-img_compare-flags-error-path.patch [bz#1138691] - kvm-ac97-register-reset-via-qom.patch [bz#1141667] - kvm-virtio-blk-Factor-common-checks-out-of-virtio_blk_ha.patch [bz#1085232] - kvm-virtio-blk-Bypass-error-action-and-I-O-accounting-on.patch [bz#1085232] - kvm-virtio-blk-Treat-read-write-beyond-end-as-invalid.patch [bz#1085232] - kvm-ide-Treat-read-write-beyond-end-as-invalid.patch [bz#1085232] - kvm-ide-only-constrain-read-write-requests-to-drive-size.patch [bz#1085232] - Resolves: bz#1085232 (Ilegal guest requests on block devices pause the VM) - Resolves: bz#1088176 (QEMU fail to check whether duplicate ID for block device drive using 'blockdev-add' to hotplug) - Resolves: bz#1138691 (Allow qemu-img to bypass the host cache (check, compare, convert, rebase, amend)) - Resolves: bz#1141667 (Qemu crashed if reboot guest after hot remove AC97 sound device) [1.5.3-78.el7] - kvm-slirp-udp-fix-NULL-pointer-dereference-because-of-un.patch [bz#1144820] - kvm-hw-pci-fix-error-flow-in-pci-multifunction-init.patch [bz#1049734] - kvm-rhel-Drop-machine-type-pc-q35-rhel7.0.0.patch [bz#1111107] - kvm-virtio-scsi-Plug-memory-leak-on-virtio_scsi_push_eve.patch [bz#1088822] - kvm-virtio-scsi-Report-error-if-num_queues-is-0-or-too-l.patch [bz#1089606] - kvm-virtio-scsi-Fix-memory-leak-when-realize-failed.patch [bz#1089606] - kvm-virtio-scsi-Fix-num_queue-input-validation.patch [bz#1089606] - kvm-Revert-linux-aio-use-event-notifiers.patch [bz#1104748] - kvm-specfile-Require-glusterfs-api-3.6.patch [bz#1155518] - Resolves: bz#1049734 (PCI: QEMU crash on illegal operation: attaching a function to a non multi-function device) - Resolves: bz#1088822 (hot-plug a virtio-scsi disk via 'blockdev-add' always cause QEMU quit) - Resolves: bz#1089606 (QEMU will not reject invalid number of queues (num_queues = 0) specified for virtio-scsi) - Resolves: bz#1104748 (48% reduction in IO performance for KVM guest, io=native) - Resolves: bz#1111107 (Remove Q35 machine type from qemu-kvm) - Resolves: bz#1144820 (CVE-2014-3640 qemu-kvm: qemu: slirp: NULL pointer deref in sosendto() [rhel-7.1]) - Resolves: bz#1155518 (qemu-kvm: undefined symbol: glfs_discard_async) [1.5.3-77.el7] - kvm-seccomp-add-semctl-to-the-syscall-whitelist.patch [bz#1026314] - kvm-Revert-kvmclock-Ensure-proper-env-tsc-value-for-kvmc.patch [bz#1098602 bz#1130428] - kvm-Revert-kvmclock-Ensure-time-in-migration-never-goes-.patch [bz#1098602 bz#1130428] - kvm-Introduce-cpu_clean_all_dirty.patch [bz#1098602 bz#1130428] - kvm-kvmclock-Ensure-proper-env-tsc-value-for-kvmclock.v2.patch [bz#1098602 bz#1130428] - kvm-kvmclock-Ensure-time-in-migration-never-goes-back.v2.patch [bz#1098602 bz#1130428] - Resolves: bz#1026314 (BUG: qemu-kvm hang when use '-sandbox on'+'vnc'+'hda') - Resolves: bz#1098602 (kvmclock: Ensure time in migration never goes backward (backport)) - Resolves: bz#1130428 (After migration of RHEL7.1 guest with "-vga qxl", GUI console is hang) [1.5.3-76.el7] - kvm-usb-hcd-xhci-QOM-Upcast-Sweep.patch [bz#980747] - kvm-usb-hcd-xhci-QOM-parent-field-cleanup.patch [bz#980747] - kvm-uhci-egsm-fix.patch [bz#1046873] - kvm-usb-redir-fix-use-after-free.patch [bz#1046574 bz#1088116] - kvm-xhci-remove-leftover-debug-printf.patch [bz#980833] - kvm-xhci-add-tracepoint-for-endpoint-state-changes.patch [bz#980833] - kvm-xhci-add-port-to-slot_address-tracepoint.patch [bz#980833] - kvm-usb-parallelize-usb3-streams.patch [bz#1075846] - kvm-xhci-Init-a-transfers-xhci-slotid-and-epid-member-on.patch [bz#1075846] - kvm-xhci-Add-xhci_epid_to_usbep-helper-function.patch [bz#980833] - kvm-xhci-Fix-memory-leak-on-xhci_disable_ep.patch [bz#980833] - kvm-usb-Also-reset-max_packet_size-on-ep_reset.patch [bz#1075846] - kvm-usb-Fix-iovec-memleak-on-combined-packet-free.patch [bz#1075846] - kvm-usb-hcd-xhci-Remove-unused-sstreamsm-member-from-XHC.patch [bz#980747] - kvm-usb-hcd-xhci-Remove-unused-cancelled-member-from-XHC.patch [bz#980747] - kvm-usb-hcd-xhci-Report-completion-of-active-transfer-wi.patch [bz#980747] - kvm-usb-hcd-xhci-Update-endpoint-context-dequeue-pointer.patch [bz#980747] - kvm-xhci-Add-a-few-missing-checks-for-disconnected-devic.patch [bz#980833] - kvm-usb-Add-max_streams-attribute-to-endpoint-info.patch [bz#1111450] - kvm-usb-Add-usb_device_alloc-free_streams.patch [bz#1111450] - kvm-xhci-Call-usb_device_alloc-free_streams.patch [bz#980833] - kvm-uhci-invalidate-queue-on-device-address-changes.patch [bz#1111450] - kvm-xhci-iso-fix-time-calculation.patch [bz#949385] - kvm-xhci-iso-allow-for-some-latency.patch [bz#949385] - kvm-xhci-switch-debug-printf-to-tracepoint.patch [bz#980747] - kvm-xhci-use-DPRINTF-instead-of-fprintf-stderr.patch [bz#980833] - kvm-xhci-child-detach-fix.patch [bz#980833] - kvm-usb-add-usb_pick_speed.patch [bz#1075846] - kvm-xhci-make-port-reset-trace-point-more-verbose.patch [bz#980833] - kvm-usb-initialize-libusb_device-to-avoid-crash.patch [bz#1111450] - kvm-target-i386-get-CPL-from-SS.DPL.patch [bz#1097363] - kvm-trace-use-unique-Red-Hat-version-number-in-simpletra.patch [bz#1088112] - kvm-trace-add-pid-field-to-simpletrace-record.patch [bz#1088112] - kvm-simpletrace-add-support-for-trace-record-pid-field.patch [bz#1088112] - kvm-simpletrace-add-simpletrace.py-no-header-option.patch [bz#1088112] - kvm-trace-extract-stap_escape-function-for-reuse.patch [bz#1088112] - kvm-trace-add-tracetool-simpletrace_stap-format.patch [bz#1088112] - kvm-trace-install-simpletrace-SystemTap-tapset.patch [bz#1088112] - kvm-trace-install-trace-events-file.patch [bz#1088112] - kvm-trace-add-SystemTap-init-scripts-for-simpletrace-bri.patch [bz#1088112] - kvm-simpletrace-install-simpletrace.py.patch [bz#1088112] - kvm-trace-add-systemtap-initscript-README-file-to-RPM.patch [bz#1088112] - kvm-rdma-Fix-block-during-rdma-migration.patch [bz#1152969] - Resolves: bz#1046574 (fail to passthrough the USB speaker redirected from usb-redir with xhci controller) - Resolves: bz#1046873 (fail to be recognized the hotpluging usb-storage device with xhci controller in win2012R2 guest) - Resolves: bz#1075846 (qemu-kvm core dumped when hotplug/unhotplug USB3.0 device multi times) - Resolves: bz#1088112 ([Fujitsu 7.1 FEAT]:QEMU: capturing trace data all the time using ftrace-based tracing) - Resolves: bz#1088116 (qemu crash when device_del usb-redir) - Resolves: bz#1097363 (qemu ' KVM internal error. Suberror: 1' when query cpu frequently during pxe boot in Intel "Q95xx" host) - Resolves: bz#1111450 (Guest crash when hotplug usb while disable virt_use_usb) - Resolves: bz#1152969 (Qemu-kvm got stuck when migrate to wrong RDMA ip) - Resolves: bz#949385 (passthrough USB speaker to win2012 guest fail to work well) - Resolves: bz#980747 (flood with 'xhci: wrote doorbell while xHC stopped or paused' when redirected USB Webcam from usb-host with xHCI controller) - Resolves: bz#980833 (xhci: FIXME: endpoint stopped w/ xfers running, data might be lost) [1.5.3-75.el7] - kvm-target-i386-Broadwell-CPU-model.patch [bz#1116117] - kvm-pc-Add-Broadwell-CPUID-compatibility-bits.patch [bz#1116117] - kvm-virtio-balloon-fix-integer-overflow-in-memory-stats-.patch [bz#1142290] - Resolves: bz#1116117 ([Intel 7.1 FEAT] Broadwell new instructions support for KVM - qemu-kvm) - Resolves: bz#1142290 (guest is stuck when setting balloon memory with large guest-stats-polling-interval) [1.5.3-74.el7] - kvm-ide-Add-wwn-support-to-IDE-ATAPI-drive.patch [bz#1131316] - kvm-vmdk-Allow-vmdk_create-to-work-with-protocol.patch [bz#1098086] - kvm-block-make-vdi-bounds-check-match-upstream.patch [bz#1098086] - kvm-vdi-say-why-an-image-is-bad.patch [bz#1098086] - kvm-block-do-not-abuse-EMEDIUMTYPE.patch [bz#1098086] - kvm-cow-correctly-propagate-errors.patch [bz#1098086] - kvm-block-Use-correct-width-in-format-strings.patch [bz#1098086] - kvm-vdi-remove-double-conversion.patch [bz#1098086] - kvm-block-vdi-Error-out-immediately-in-vdi_create.patch [bz#1098086] - kvm-vpc-Implement-.bdrv_has_zero_init.patch [bz#1098086] - kvm-block-vpc-use-QEMU_PACKED-for-on-disk-structures.patch [bz#1098086] - kvm-block-allow-bdrv_unref-to-be-passed-NULL-pointers.patch [bz#1098086] - kvm-block-vdi-use-block-layer-ops-in-vdi_create-instead-.patch [bz#1098086] - kvm-block-use-the-standard-ret-instead-of-result.patch [bz#1098086] - kvm-block-vpc-use-block-layer-ops-in-vpc_create-instead-.patch [bz#1098086] - kvm-block-iotest-update-084-to-test-static-VDI-image-cre.patch [bz#1098086] - kvm-block-add-helper-function-to-determine-if-a-BDS-is-i.patch [bz#1122925] - kvm-block-extend-block-commit-to-accept-a-string-for-the.patch [bz#1122925] - kvm-block-add-backing-file-option-to-block-stream.patch [bz#1122925] - kvm-block-add-__com.redhat_change-backing-file-qmp-comma.patch [bz#1122925] - Resolves: bz#1098086 (RFE: Supporting creating vmdk/vdi/vpc format disk with protocols (glusterfs)) - Resolves: bz#1122925 (Maintain relative path to backing file image during live merge (block-commit)) - Resolves: bz#1131316 (fail to specify wwn for virtual IDE CD-ROM) [1.5.3-73.el7] - kvm-scsi-disk-fix-bug-in-scsi_block_new_request-introduc.patch [bz#1105880] - Resolves: bz#1105880 (bug in scsi_block_new_request() function introduced by upstream commit 137745c5c60f083ec982fe9e861e8c16ebca1ba8) [1.5.3-72.el7] - kvm-vbe-make-bochs-dispi-interface-return-the-correct-me.patch [bz#1139118] - kvm-vbe-rework-sanity-checks.patch [bz#1139118] - kvm-spice-display-add-display-channel-id-to-the-debug-me.patch [bz#1139118] - kvm-spice-make-sure-we-don-t-overflow-ssd-buf.patch [bz#1139118] - Resolves: bz#1139118 (CVE-2014-3615 qemu-kvm: Qemu: crash when guest sets high resolution [rhel-7.1]) [1.5.3-71.el7] - kvm-spice-move-qemu_spice_display_-from-spice-graphics-t.patch [bz#1054077] - kvm-spice-move-spice_server_vm_-start-stop-calls-into-qe.patch [bz#1054077] - kvm-spice-stop-server-for-qxl-hard-reset.patch [bz#1054077] - kvm-qemu-Adjust-qemu-wakeup.patch [bz#1064156] - kvm-vmstate_xhci_event-fix-unterminated-field-list.patch [bz#1122147] - kvm-vmstate_xhci_event-bug-compat-with-RHEL-7.0-RHEL-onl.patch [bz#1122147] - kvm-pflash_cfi01-write-flash-contents-to-bdrv-on-incomin.patch [bz#1139702] - kvm-ide-test-Add-enum-value-for-DEV.patch [bz#1123372] - kvm-ide-test-Add-FLUSH-CACHE-test-case.patch [bz#1123372] - kvm-ide-Fix-segfault-when-flushing-a-device-that-doesn-t.patch [bz#1123372] - kvm-IDE-Fill-the-IDENTIFY-request-consistently.patch [bz#852348] - kvm-ide-Add-resize-callback-to-ide-core.patch [bz#852348] - Resolves: bz#1054077 (qemu crash when reboot win7 guest with spice display) - Resolves: bz#1064156 ([qxl] The guest show black screen while resumed guest which managedsaved in pmsuspended status.) - Resolves: bz#1122147 (CVE-2014-5263 vmstate_xhci_event: fix unterminated field list) - Resolves: bz#1123372 (qemu-kvm crashed when doing iofuzz testing) - Resolves: bz#1139702 (pflash (UEFI varstore) migration shortcut for libvirt [RHEL]) - Resolves: bz#852348 (fail to block_resize local data disk with IDE/AHCI disk_interface) [1.5.3-70.el7] - kvm-Enforce-stack-protector-usage.patch [bz#1064260] - kvm-pc-increase-maximal-VCPU-count-to-240.patch [bz#1134408] - kvm-gluster-Add-discard-support-for-GlusterFS-block-driv.patch [bz#1136534] - kvm-gluster-default-scheme-to-gluster-and-host-to-localh.patch [bz#1088150] - kvm-qdev-properties-system.c-Allow-vlan-or-netdev-for-de.patch [bz#996011] - kvm-vl-process-object-after-other-backend-options.patch [bz#1128095] - Resolves: bz#1064260 (Handle properly --enable-fstack-protector option) - Resolves: bz#1088150 (qemu-img coredumpd when try to create a gluster format image) - Resolves: bz#1128095 (chardev 'chr0' isn't initialized when we try to open rng backend) - Resolves: bz#1134408 ([HP 7.1 FEAT] Increase qemu-kvm's VCPU limit to 240) - Resolves: bz#1136534 (glusterfs backend does not support discard) - Resolves: bz#996011 (vlan and queues options cause core dumped when qemu-kvm process quit(or ctrl+c)) [1.5.3-69.el7] - kvm-rdma-bug-fixes.patch [bz#1107821] - kvm-virtio-serial-report-frontend-connection-state-via-m.patch [bz#1122151] - kvm-char-report-frontend-open-closed-state-in-query-char.patch [bz#1122151] - kvm-acpi-fix-tables-for-no-hpet-configuration.patch [bz#1129552] - kvm-mirror-Fix-resource-leak-when-bdrv_getlength-fails.patch [bz#1130603] - kvm-blockjob-Add-block_job_yield.patch [bz#1130603] - kvm-mirror-Go-through-ready-complete-process-for-0-len-i.patch [bz#1130603] - kvm-qemu-iotests-Test-BLOCK_JOB_READY-event-for-0Kb-imag.patch [bz#1130603] - kvm-block-make-top-argument-to-block-commit-optional.patch [bz#1130603] - kvm-qemu-iotests-Test-0-length-image-for-mirror.patch [bz#1130603] - kvm-mirror-Fix-qiov-size-for-short-requests.patch [bz#1130603] - Resolves: bz#1107821 (rdma migration: seg if destination isn't listening) - Resolves: bz#1122151 (Pass close from qemu-ga) - Resolves: bz#1129552 (backport "acpi: fix tables for no-hpet configuration") - Resolves: bz#1130603 (advertise active commit to libvirt) [1.5.3-68.el7] - kvm-virtio-net-Do-not-filter-VLANs-without-F_CTRL_VLAN.patch [bz#1065724] - kvm-virtio-net-add-vlan-receive-state-to-RxFilterInfo.patch [bz#1065724] - kvm-virtio-rng-check-return-value-of-virtio_load.patch [bz#1116941] - kvm-qapi-treat-all-negative-return-of-strtosz_suffix-as-.patch [bz#1074403] - Resolves: bz#1065724 (rx filter incorrect when guest disables VLAN filtering) - Resolves: bz#1074403 (qemu-kvm can not give any warning hint when set sndbuf with negative value) - Resolves: bz#1116941 (Return value of virtio_load not checked in virtio_rng_load) [1.5.3-67.el7] - kvm-vl.c-Output-error-on-invalid-machine-type.patch [bz#990724] - kvm-migration-dump-vmstate-info-as-a-json-file-for-stati.patch [bz#1118707] - kvm-vmstate-static-checker-script-to-validate-vmstate-ch.patch [bz#1118707] - kvm-tests-vmstate-static-checker-add-dump1-and-dump2-fil.patch [bz#1118707] - kvm-tests-vmstate-static-checker-incompat-machine-types.patch [bz#1118707] - kvm-tests-vmstate-static-checker-add-version-error-in-ma.patch [bz#1118707] - kvm-tests-vmstate-static-checker-version-mismatch-inside.patch [bz#1118707] - kvm-tests-vmstate-static-checker-minimum_version_id-chec.patch [bz#1118707] - kvm-tests-vmstate-static-checker-remove-a-section.patch [bz#1118707] - kvm-tests-vmstate-static-checker-remove-a-field.patch [bz#1118707] - kvm-tests-vmstate-static-checker-remove-last-field-in-a-.patch [bz#1118707] - kvm-tests-vmstate-static-checker-change-description-name.patch [bz#1118707] - kvm-tests-vmstate-static-checker-remove-Fields.patch [bz#1118707] - kvm-tests-vmstate-static-checker-remove-Description.patch [bz#1118707] - kvm-tests-vmstate-static-checker-remove-Description-insi.patch [bz#1118707] - kvm-tests-vmstate-static-checker-remove-a-subsection.patch [bz#1118707] - kvm-tests-vmstate-static-checker-remove-Subsections.patch [bz#1118707] - kvm-tests-vmstate-static-checker-add-substructure-for-us.patch [bz#1118707] - kvm-tests-vmstate-static-checker-add-size-mismatch-insid.patch [bz#1118707] - kvm-aio-fix-qemu_bh_schedule-bh-ctx-race-condition.patch [bz#1116728] - kvm-block-Improve-driver-whitelist-checks.patch [bz#999789] - kvm-vmdk-Fix-format-specific-information-create-type-for.patch [bz#1029271] - kvm-virtio-pci-Report-an-error-when-msix-vectors-init-fa.patch [bz#1095645] - kvm-scsi-Report-error-when-lun-number-is-in-use.patch [bz#1096576] - kvm-util-Split-out-exec_dir-from-os_find_datadir.patch [bz#1017685] - kvm-rules.mak-fix-obj-to-a-real-relative-path.patch [bz#1017685] - kvm-rules.mak-allow-per-object-cflags-and-libs.patch [bz#1017685] - kvm-block-use-per-object-cflags-and-libs.patch [bz#1017685] - kvm-vmdk-Fix-creating-big-description-file.patch [bz#1039791] - Resolves: bz#1017685 (Gluster etc. should not be a dependency of vscclient and libcacard) - Resolves: bz#1029271 (Format specific information (create type) was wrong when create it specified subformat='streamOptimized') - Resolves: bz#1039791 (qemu-img creates truncated VMDK image with subformat=twoGbMaxExtentFlat) - Resolves: bz#1095645 (vectors of virtio-scsi-pci will be 0 when set vectors>=129) - Resolves: bz#1096576 (QEMU core dumped when boot up two scsi-hd disk on the same virtio-scsi-pci controller in Intel host) - Resolves: bz#1116728 (Backport qemu_bh_schedule() race condition fix) - Resolves: bz#1118707 (VMstate static checker: backport -dump-vmstate feature to export json-encoded vmstate info) - Resolves: bz#990724 (qemu-kvm failing when invalid machine type is provided) - Resolves: bz#999789 (qemu should give a more friendly prompt when didn't specify read-only for VMDK format disk) [1.5.3-66.el7] - kvm-xhci-fix-overflow-in-usb_xhci_post_load.patch [bz#1074219] - kvm-migration-qmp_migrate-keep-working-after-syntax-erro.patch [bz#1086598] - kvm-seccomp-add-shmctl-mlock-and-munlock-to-the-syscall-.patch [bz#1026314] - kvm-exit-when-no-kvm-and-vcpu-count-160.patch [bz#1076326] - kvm-Disallow-outward-migration-while-awaiting-incoming-m.patch [bz#1086987] - kvm-block-Ignore-duplicate-or-NULL-format_name-in-bdrv_i.patch [bz#1088695 bz#1093983] - kvm-block-vhdx-account-for-identical-header-sections.patch [bz#1097020] - kvm-aio-Fix-use-after-free-in-cancellation-path.patch [bz#1095877] - kvm-scsi-disk-Improve-error-messager-if-can-t-get-versio.patch [bz#1021788] - kvm-scsi-Improve-error-messages-more.patch [bz#1021788] - kvm-memory-Don-t-call-memory_region_update_coalesced_ran.patch [bz#1096645] - kvm-kvmclock-Ensure-time-in-migration-never-goes-backwar.patch [bz#1098602] - kvm-kvmclock-Ensure-proper-env-tsc-value-for-kvmclock_cu.patch [bz#1098602] - Resolves: bz#1021788 (the error message "scsi generic interface too old" is wrong more often than not) - Resolves: bz#1026314 (qemu-kvm hang when use '-sandbox on'+'vnc'+'hda') - Resolves: bz#1074219 (qemu core dump when install a RHEL.7 guest(xhci) with migration) - Resolves: bz#1076326 (qemu-kvm does not quit when booting guest w/ 161 vcpus and "-no-kvm") - Resolves: bz#1086598 (migrate_cancel wont take effect on previouly wrong migrate -d cmd) - Resolves: bz#1086987 (src qemu crashed when starting migration in inmigrate mode) - Resolves: bz#1088695 (there are four "gluster" in qemu-img supported format list) - Resolves: bz#1093983 (there are three "nbd" in qemu-img supported format list) - Resolves: bz#1095877 (segmentation fault in qemu-kvm due to use-after-free of a SCSIGenericReq (host device pass-through)) - Resolves: bz#1096645 ([FJ7.0 Bug] RHEL7.0 guest attaching 150 or more virtio-blk disks fails to start up) - Resolves: bz#1097020 ([RFE] qemu-img: Add/improve Disk2VHD tools creating VHDX images) - Resolves: bz#1098602 (kvmclock: Ensure time in migration never goes backward (backport)) [1.5.3-65.el7] - kvm-Allow-mismatched-virtio-config-len.patch [bz#1113009] - Resolves: bz#1113009 (Migration failed with virtio-blk from RHEL6.5.0 host to RHEL7.0 host) [1.5.3-64.el7] - kvm-zero-initialize-KVM_SET_GSI_ROUTING-input.patch [bz#1098976] - kvm-skip-system-call-when-msi-route-is-unchanged.patch [bz#1098976] - Resolves: bz#1098976 (2x RHEL 5.10 VM running on RHEL 7 KVM have low TCP_STREAM throughput) [1.5.3-63.el7] - kvm-char-restore-read-callback-on-a-reattached-hotplug-c.patch [bz#1038914] - kvm-qcow2-Free-preallocated-zero-clusters.patch [bz#1052093] - kvm-qemu-iotests-Discard-preallocated-zero-clusters.patch [bz#1052093] - kvm-XBZRLE-Fix-qemu-crash-when-resize-the-xbzrle-cache.patch [bz#1066338] - kvm-Provide-init-function-for-ram-migration.patch [bz#1066338] - kvm-Init-the-XBZRLE.lock-in-ram_mig_init.patch [bz#1066338] - kvm-XBZRLE-Fix-one-XBZRLE-corruption-issues.patch [bz#1066338] - kvm-Count-used-RAMBlock-pages-for-migration_dirty_pages.patch [bz#1074913] - kvm-virtio-net-fix-buffer-overflow-on-invalid-state-load.patch [bz#1095678] - kvm-virtio-net-out-of-bounds-buffer-write-on-invalid-sta.patch [bz#1095690] - kvm-virtio-net-out-of-bounds-buffer-write-on-load.patch [bz#1095685] - kvm-virtio-out-of-bounds-buffer-write-on-invalid-state-l.patch [bz#1095695] - kvm-virtio-avoid-buffer-overrun-on-incoming-migration.patch [bz#1095738] - kvm-virtio-scsi-fix-buffer-overrun-on-invalid-state-load.patch [bz#1095742] - kvm-virtio-validate-config_len-on-load.patch [bz#1095783] - kvm-virtio-validate-num_sg-when-mapping.patch [bz#1095766] - kvm-virtio-allow-mapping-up-to-max-queue-size.patch [bz#1095766] - kvm-usb-sanity-check-setup_index-setup_len-in-post_load.patch [bz#1095747] - kvm-usb-sanity-check-setup_index-setup_len-in-post_l2.patch [bz#1095747] - kvm-vmstate-reduce-code-duplication.patch [bz#1095716] - kvm-vmstate-add-VMS_MUST_EXIST.patch [bz#1095716] - kvm-vmstate-add-VMSTATE_VALIDATE.patch [bz#1095716] - kvm-hpet-fix-buffer-overrun-on-invalid-state-load.patch [bz#1095707] - kvm-hw-pci-pcie_aer.c-fix-buffer-overruns-on-invalid-sta.patch [bz#1095716] - kvm-usb-fix-up-post-load-checks.patch [bz#1096829] - kvm-qcow-correctly-propagate-errors.patch [bz#1097230] - kvm-qcow1-Make-padding-in-the-header-explicit.patch [bz#1097230] - kvm-qcow1-Check-maximum-cluster-size.patch [bz#1097230] - kvm-qcow1-Validate-L2-table-size-CVE-2014-0222.patch [bz#1097230] - kvm-qcow1-Validate-image-size-CVE-2014-0223.patch [bz#1097237] - kvm-qcow1-Stricter-backing-file-length-check.patch [bz#1097237] - Resolves: bz#1038914 (Guest can't receive any character transmitted from host after hot unplugging virtserialport then hot plugging again) - Resolves: bz#1052093 (qcow2 corruptions (leaked clusters after installing a rhel7 guest using virtio_scsi)) - Resolves: bz#1066338 (Reduce the migrate cache size during migration causes qemu segment fault) - Resolves: bz#1074913 (migration can not finish with 1024k 'remaining ram' left after hotunplug 4 nics) - Resolves: bz#1095678 (CVE-2013-4148 qemu-kvm: qemu: virtio-net: buffer overflow on invalid state load [rhel-7.1]) - Resolves: bz#1095685 (CVE-2013-4149 qemu-kvm: qemu: virtio-net: out-of-bounds buffer write on load [rhel-7.1]) - Resolves: bz#1095690 (CVE-2013-4150 qemu-kvm: qemu: virtio-net: out-of-bounds buffer write on invalid state load [rhel-7.1]) - Resolves: bz#1095695 (CVE-2013-4151 qemu-kvm: qemu: virtio: out-of-bounds buffer write on invalid state load [rhel-7.1]) - Resolves: bz#1095707 (CVE-2013-4527 qemu-kvm: qemu: hpet: buffer overrun on invalid state load [rhel-7.1]) - Resolves: bz#1095716 (CVE-2013-4529 qemu-kvm: qemu: hw/pci/pcie_aer.c: buffer overrun on invalid state load [rhel-7.1]) - Resolves: bz#1095738 (CVE-2013-6399 qemu-kvm: qemu: virtio: buffer overrun on incoming migration [rhel-7.1]) - Resolves: bz#1095742 (CVE-2013-4542 qemu-kvm: qemu: virtio-scsi: buffer overrun on invalid state load [rhel-7.1]) - Resolves: bz#1095747 (CVE-2013-4541 qemu-kvm: qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load [rhel-7.1]) - Resolves: bz#1095766 (CVE-2013-4535 CVE-2013-4536 qemu-kvm: qemu: virtio: insufficient validation of num_sg when mapping [rhel-7.1]) - Resolves: bz#1095783 (CVE-2014-0182 qemu-kvm: qemu: virtio: out-of-bounds buffer write on state load with invalid config_len [rhel-7.1]) - Resolves: bz#1096829 (CVE-2014-3461 qemu-kvm: Qemu: usb: fix up post load checks [rhel-7.1]) - Resolves: bz#1097230 (CVE-2014-0222 qemu-kvm: Qemu: qcow1: validate L2 table size to avoid integer overflows [rhel-7.1]) - Resolves: bz#1097237 (CVE-2014-0223 qemu-kvm: Qemu: qcow1: validate image size to avoid out-of-bounds memory access [rhel-7.1]) [1.5.3-62.el7] - kvm-pc-add-hot_add_cpu-callback-to-all-machine-types.patch [bz#1094285] - Resolves: bz#1094285 (Hot plug CPU not working with RHEL6 machine types running on RHEL7 host.) [1.5.3-61.el7] - kvm-iscsi-fix-indentation.patch [bz#1083413] - kvm-iscsi-correctly-propagate-errors-in-iscsi_open.patch [bz#1083413] - kvm-block-iscsi-query-for-supported-VPD-pages.patch [bz#1083413] - kvm-block-iscsi-fix-segfault-if-writesame-fails.patch [bz#1083413] - kvm-iscsi-recognize-invalid-field-ASCQ-from-WRITE-SAME-c.patch [bz#1083413] - kvm-iscsi-ignore-flushes-on-scsi-generic-devices.patch [bz#1083413] - kvm-iscsi-always-query-max-WRITE-SAME-length.patch [bz#1083413] - kvm-iscsi-Don-t-set-error-if-already-set-in-iscsi_do_inq.patch [bz#1083413] - kvm-iscsi-Remember-to-set-ret-for-iscsi_open-in-error-ca.patch [bz#1083413] - kvm-qemu_loadvm_state-shadow-SeaBIOS-for-VM-incoming-fro.patch [bz#1027565] - kvm-uhci-UNfix-irq-routing-for-RHEL-6-machtypes-RHEL-onl.patch [bz#1085701] - kvm-ide-Correct-improper-smart-self-test-counter-reset-i.patch [bz#1087980] - Resolves: bz#1027565 (fail to reboot guest after migration from RHEL6.5 host to RHEL7.0 host) - Resolves: bz#1083413 (qemu-kvm: iSCSI: Failure. SENSE KEY:ILLEGAL_REQUEST(5) ASCQ:INVALID_FIELD_IN_CDB(0x2400)) - Resolves: bz#1085701 (Guest hits call trace migrate from RHEL6.5 to RHEL7.0 host with -M 6.1 & balloon & uhci device) - Resolves: bz#1087980 (CVE-2014-2894 qemu-kvm: QEMU: out of bounds buffer accesses, guest triggerable via IDE SMART [rhel-7.1]) _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata