{ "cveId": "CVE-2020-27661", "url": "https://patchblox.com/security/cve/CVE-2020-27661", "summary": "CVE-2020-27661 is fixed in 103 products on 1 platform, first by ELSA-2021-9568, released December 1, 2021. It is not reported as exploited. Patch Radar priority: Routine.", "title": "hivex: hivex\n[1.3.18]\n- Resolves: bz#1810193\n (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)\n\n[1.3.18...", "description": "hivex\n[1.3.18]\n- Resolves: bz#1810193\n (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)\n\n[1.3.18]\n- Resolves: bz#1810193\n (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)\n\nlibguestfs\n[1:1.40.2-25.0.1]\n- Replace upstream references from description tag\n- Config supermin to use host yum.conf in ol8 [Orabug: 29319324]\n- Set DISTRO_ORACLE_LINUX correspeonding to ol\n\n[1:1.40.2-25]\n- v2v: handle HTTP/2 replies from vCenter\n resolves: rhbz#1854380\n\n[1:1.40.2-24]\n- v2v: ship a newer version of rhev-apt.exe\n resolves: rhbz#1849997\n\n[1:1.40.2-23]\n- Ignore the user.WofCompressedData xattr\n resolves: rhbz#1811539\n- sysprep: new ipa-client and kerberos-hostkeytab operations\n resolves: rhbz#1789592\n\n[1.40.2]\n- Resolves: bz#1810193\n (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)\n\n[1:1.38.4-15]\n- Stop building virt-p2v-maker, as it will be built by its own source\n resolves: rhbz#1777924\n\nlibguestfs-winsupport\n[8.2]\n- Resolves: bz#1810193\n (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)\n\n[8.0-4]\n- Rebuild all virt packages to fix RHEL\u0027s upgrade path\n- Resolves: rhbz#1695587\n (Ensure modular RPM upgrade path)\n\n[8.0-3]\n- Fix for CVE-2019-9755\n (heap-based buffer overflow leads to local root privilege escalation)\n resolves: rhbz#1698503\n\n[8.0-2]\n- Fix for ntfsclone crash (RHBZ#1601146).\n\n[8.0-1]\n- Rebase to 2017.3.23.\n- Remove patches which are now upstream.\n- Resynch with Fedora package.\n- Enable all architectures for RHEL 8.\n\n[7.2-2]\n- Fix for handling guest filenames with invalid or incomplete\n multibyte or wide characters\n resolves: rhbz#1301593\n\n[7.2-1]\n- Rebase and rebuild for RHEL 7.2\n resolves: rhbz#1240278\n\n[7.1-6]\n- Bump version and rebuild.\n related: rhbz#1221583\n\n[7.1-5]\n- Enable aarch64 architecture.\n resolves: rhbz#1221583\n\n[7.1-4]\n- Enable debuginfo support and stripping.\n resolves: rhbz#1100319\n\n[7.1-3]\n- Add patches from Fedora package which add fstrim support.\n resolves: rhbz#1100319\n\n[7.1-2]\n- New package for RHEL 7.1\n- Rebase to ntfs-3g 2014.2.15\n resolves: rhbz#1100319\n- Change the package so it works with supermin5.\n- Remove dependency on external FUSE.\n\n[7.0-2]\n- Resync against Rawhide package (ntfs-3g 2013.1.13).\n- Drop HAL file since HAL is dead.\n resolves: rhbz#819939\n\n[7.0-1]\n- New package for RHEL 7\n resolves: rhbz#819939\n- Resync against Rawhide package.\n\n[1.0-7]\n- Disable debuginfo package.\n resolves: RHBZ#691555.\n\n[1.0-6]\n- Require libguestfs 1.7.17 (newer version in RHEL 6.1).\n- Require febootstrap-supermin-helper instead of febootstrap\n resolves: RHBZ#670299.\n\n[1.0-5]\n- Make sure intermediate lib* directories are created in hostfiles (RHBZ#603429)\n\n[1.0-4]\n- Requires fuse-libs (RHBZ#599300).\n\n[1.0-3]\n- ExclusiveArch x86_64.\n\n[1.0-2]\n- Package Windows support for libguestfs.\n\nlibiscsi\nlibnbd\n[1.2.2]\n- Resolves: bz#1844296\n(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)\n\nlibvirt\n[5.7.0-31.el8]\n- qemu: Do not latch guestCPUs when guests hotplug with active domain groups (Wim ten Have) [Orabug: 33440015]\n\n[5.7.0-30.el8]\n- qemuDomainSnapshotDiskPrepareOne: Fix logic of relative backing store update (Peter Krempa) [Orabug: 33086913]\n- qemu: Don\u0027t set NVRAM label when creating it (Michal Privoznik) [Orabug: 33319048]\n- qemu: protect guestCPUs from drift under vcpu guest timeouts (Wim ten Have) [Orabug: 33368490]\n\n[5.7.0-29.el8]\n- qemu: vCORE distribution under vNUMA host partitioning should balance guests vCPU:pCPU pinning (Wim ten Have) [Orabug: 32355455]\n- qemuDomainSnapshotDiskPrepareOne: Don\u0027t load the relative path with blockdev (Peter Krempa) [Orabug: 33151464]\n- qemu: block: Support VIR_DOMAIN_BLOCK_COMMIT/PULL/REBASE_RELATIVE with blockdev (Peter Krempa) [Orabug: 33151464]\n- qemu: Tell secdrivers which images are top parent (Michal Privoznik) [Orabug: 33086913]\n- security: Introduce VIR_SECURITY_DOMAIN_IMAGE_PARENT_CHAIN_TOP flag (Michal Privoznik) [Orabug: 33086913]\n\n[5.7.0-28.el8]\n- qemu_capabilities: Rework domain caps cache (Michal Privoznik) [Orabug: 32664432]\n- tests: fix virArchFromHost() redefine error (Joe Jin) [Orabug: 32664432]\n- qemu: cache host arch separately from virCapsPtr (Daniel P. Berrange) [Orabug: 32664432]\n- cpu.c: Check properly for virCapabilitiesGetNodeInfo() retval (Michal Privoznik) [Orabug: 32664432]\n- virStorageSourceParseBackingJSONRaw: Parse \u0027offset\u0027 and \u0027size\u0027 attributes (Peter Krempa) [Orabug: 32164351]\n- tests: qemu: Add test data for the new \u003Cslice\u003E element (Peter Krempa) [Orabug: 32164351]\n- qemu: Add support for slices of type \u0027storage\u0027 (Peter Krempa) [Orabug: 32164351]\n- tests: qemublock: Add cases for creating image overlays on top of disks with \u003Cslice\u003E (Peter Krempa) [Orabug: 32164351]\n- qemu: block: Properly format storage slice into backing store strings (Peter Krempa) [Orabug: 32164351]\n- qemu: domain: Store nodenames of slice in status XML (Peter Krempa) [Orabug: 32164351]\n- conf: Implement support for \u003Cslices\u003E of disk source (Peter Krempa) [Orabug: 32164351]\n- docs: Document the new \u003Cslices\u003E sub-element of disk\u0027s \u003Csource\u003E (Peter Krempa) [Orabug: 32164351]\n- qemu: block: forbid creation of storage sources with \u003Cslice\u003E (Peter Krempa) [Orabug: 32164351]\n- qemuDomainValidateStorageSource: Reject unsupported slices (Peter Krempa) [Orabug: 32164351]\n- qemuBlockStorageSourceGetFormatRawProps: format \u0027offset\u0027 and \u0027size\u0027 for slice (Peter Krempa) [Orabug: 32164351]\n- util: virstoragefile: Add data structure for storing storage source slices (Peter Krempa) [Orabug: 32164351]\n- tests: virstorage: Add test data for json specified raw image with offset/size (Peter Krempa) [Orabug: 32164351]\n- docs: formatdomain: Close \u003Csource\u003E on one of disk examples (Peter Krempa) [Orabug: 32164351]\n- qemu: domain: Refactor formatting of node names into status XML (Peter Krempa) [Orabug: 32164351]\n- tests: virstorage: Add test cases for \u0027json:\u0027 pseudo-URI without \u0027file\u0027 wrapper (Peter Krempa) [Orabug: 32164351]\n- virStorageSourceParseBackingJSON: Prevent arbitrary nesting with format drivers (Peter Krempa) [Orabug: 32164351]\n- virStorageSourceParseBackingJSON: Allow \u0027json:\u0027 pseudo URIs without \u0027file\u0027 wrapper (Peter Krempa) [Orabug: 32164351]\n- virStorageSourceJSONDriverParser: annotate \u0027format\u0027 drivers (Peter Krempa) [Orabug: 32164351]\n- virStorageSourceParseBackingJSON: Move deflattening of json: URIs out of recursion (Peter Krempa) [Orabug: 32164351]\n- virStorageSourceParseBackingJSON: Pass around original backing file string (Peter Krempa) [Orabug: 32164351]\n- qemu: enable blockdev support (Peter Krempa) [Orabug: 32164351]\n- qemu: Instantiate pflash via -machine when using blockdev (Peter Krempa) [Orabug: 32164351]\n- qemu: command: Build the \u0027pflash\u0027 drives via -machine (Peter Krempa) [Orabug: 32164351]\n- qemu: command: Build -blockdev-s for backing of pflash (Peter Krempa) [Orabug: 32164351]\n- qemu: domain: Introduce helper to convert \u003Cloader\u003E into virStorageSource (Peter Krempa) [Orabug: 32164351]\n- qemu: domain: Store virStorageSources representing pflash backing (Peter Krempa) [Orabug: 32164351]\n- qemu: command: Extract formatting of -drive for pflash (Peter Krempa) [Orabug: 32164351]\n- qemu: capabilities: Add detection of the \u0027savevm\u0027 fix for -blockdev (Peter Krempa) [Orabug: 32164351]\n- qemu: qapi: Add support for command features (Peter Krempa) [Orabug: 32164351]\n- qemu: caps: Add capability for dynamic \u0027auto-read-only\u0027 support for files (Peter Krempa) [Orabug: 32164351]\n- tests: qemucapabilities: Refresh data for unreleased qemu-4.2 on x86_64 (Peter Krempa) [Orabug: 32164351]\n- qemu: caps: Base support of \u0027backingStoreInput\u0027 domain feature on QEMU_CAPS_BLOCKDEV (Peter Krempa) [Orabug: 32164351]\n- docs: Document support for obeying \u003CbackingStore\u003E of \u003Cdisk\u003E on input (Peter Krempa) [Orabug: 32164351]\n- conf: domcaps: Add \u0027backingStoreInput\u0027 domain capability (Peter Krempa) [Orabug: 32164351]\n- qemu: domcaps: Simplify adding new domaincaps based on qemu caps (Peter Krempa) [Orabug: 32164351]\n- domaincaps: Store domain capability features in an array (Peter Krempa) [Orabug: 32164351]\n- qemu: domcaps: Initialize all features (Peter Krempa) [Orabug: 32164351]\n- domcaps: Add function for initializing domain caps as unsupported (Peter Krempa) [Orabug: 32164351]\n- conf: domaincaps: Use virXMLFormatElement in virDomainCapsFormatFeatures (Peter Krempa) [Orabug: 32164351]\n- conf: domaincaps: Extract formatting of the \u003Cfeatures\u003E subelement (Peter Krempa) [Orabug: 32164351]\n- conf: domaincaps: Replace FORMAT_SINGLE macro by a function (Peter Krempa) [Orabug: 32164351]\n- conf: capabilities: Modernize virCapabilitiesFormatMemoryBandwidth (Peter Krempa) [Orabug: 32164351]\n- conf: caps: Modernize virCapabilitiesFormatCaches (Peter Krempa) [Orabug: 32164351]\n- conf: turn virDomainMemtuneFormat void (Peter Krempa) [Orabug: 32164351]\n- conf: domain: Split up formatting of \u003Cmemtune\u003E and \u003CmemoryBacking\u003E (Peter Krempa) [Orabug: 32164351]\n- conf: Rename virDomainCapsFeature to virDomainProcessCapsFeature (Peter Krempa) [Orabug: 32164351]\n- conf: storagecaps: Fix broken attempt at being const-correct (Peter Krempa) [Orabug: 32164351]\n- conf: domaincaps: Fix broken attempt at being const-correct (Peter Krempa) [Orabug: 32164351]\n- qemu: caps: Make capability filler functions void (Peter Krempa) [Orabug: 32164351]\n- util: buffer: Add init macro for automatically setting child XML indent (Peter Krempa) [Orabug: 32164351]\n- qemu: snapshot: Fix inactive external snapshots when backing chain is present (Peter Krempa) [Orabug: 32164351]\n- qemu: blockjob: Transfer \u0027readonly\u0027 state of images after active layer block commit (Peter Krempa) [Orabug: 32164351]\n- qemu: command: Use XML based disk bus convertor in error message (Peter Krempa) [Orabug: 32164351]\n- storagefile: Fill in meta-\u003EexternalDataStore (Cole Robinson) [Orabug: 32164351]\n- storagefile: Add externalDataStore member (Cole Robinson) [Orabug: 32164351]\n- storagefile: Split out virStorageSourceNewFromChild (Cole Robinson) [Orabug: 32164351]\n- storagefile: Don\u0027t access backingStoreRaw directly in FromBackingRelative (Cole Robinson) [Orabug: 32164351]\n- storagefile: Fill in meta-\u003EexternalDataStoreRaw (Cole Robinson) [Orabug: 32164351]\n- storagefile: Add externalDataStoreRaw member (Cole Robinson) [Orabug: 32164351]\n- storagefile: Fix backing format \\0 check (Cole Robinson) [Orabug: 32164351]\n- storagefile: Rename qcow2GetExtensions \u0027format\u0027 argument (Cole Robinson) [Orabug: 32164351]\n- storagefile: Rename qcow2GetBackingStoreFormat (Cole Robinson) [Orabug: 32164351]\n- storagefile: Push extension_end calc to qcow2GetBackingStoreFormat (Cole Robinson) [Orabug: 32164351]\n- storagefile: Push \u0027start\u0027 into qcow2GetBackingStoreFormat (Cole Robinson) [Orabug: 32164351]\n- storagefile: Use qcowXGetBackingStore directly (Cole Robinson) [Orabug: 32164351]\n- storagefile: Drop now unused isQCow2 argument (Cole Robinson) [Orabug: 32164351]\n- storagefile: Check version to determine if qcow2 or not (Cole Robinson) [Orabug: 32164351]\n- storagefile: qcow1: Let qcowXGetBackingStore fill in format (Cole Robinson) [Orabug: 32164351]\n- storagefile: qcow1: Fix check for empty backing file (Cole Robinson) [Orabug: 32164351]\n- storagefile: qcow1: Check for BACKING_STORE_OK (Cole Robinson) [Orabug: 32164351]\n- qemu: snapshot: Don\u0027t update current snapshot until we\u0027re done (Peter Krempa) [Orabug: 32164351]\n- qemu: block: Replace snapshot transaction action generator (Peter Krempa) [Orabug: 32164351]\n- tests: qemumonitor: Add testing for the \u0027transaction\u0027 command and generators (Peter Krempa) [Orabug: 32164351]\n- qemu: monitor: Add transaction generators for snapshot APIs (Peter Krempa) [Orabug: 32164351]\n- qemu: monitor: Add transaction generators for dirty bitmap APIs (Peter Krempa) [Orabug: 32164351]\n- tests: qemucapabilities: fix 4.2.0 qemucapabilities (Joe Jin) [Orabug: 32164351]\n- qemu: checkpoint: Do ACL check prior to snapshot interlocking (Peter Krempa) [Orabug: 32164351]\n- qemu: driver: Remove misplaced qemuDomainObjEndJob in qemuDomainCheckpointGetXMLDesc (Peter Krempa) [Orabug: 32164351]\n- conf: Drop pointless \u0027domain\u0027 argument from virDomainSnapshotRedefinePrep (Peter Krempa) [Orabug: 32164351]\n- conf: Drop pointless \u0027domain\u0027 argument from virDomainCheckpointRedefinePrep (Peter Krempa) [Orabug: 32164351]\n- tests: qemucapabilities: Update caps of qemu-4.1 to released version (Peter Krempa) [Orabug: 32164351]\n- tests: add qemu capabilities data for qemu 4.2 (Peter Krempa) [Orabug: 32164351]\n- lxc: fix compile error (Joe Jin) [Orabug: 32164351]\n- qemu: driver: Remove QEMU_ADD_BLOCK_PARAM_LL macro (Peter Krempa) [Orabug: 32164351]\n- qemu: driver: Don\u0027t return anything from qemuDomainBlockStatsGatherTotals (Peter Krempa) [Orabug: 32164351]\n- qemu: driver: Remove pointless macro QEMU_BLOCK_STAT_TOTAL (Peter Krempa) [Orabug: 32164351]\n- qemu: monitor: Change fields in qemuBlockStats to \u0027unsigned\u0027 (Peter Krempa) [Orabug: 32164351]\n- qemu: monitor: Refactor cleanup in qemuMonitorJSONGetAllBlockStatsInfo (Peter Krempa) [Orabug: 32164351]\n- qemu: monitor: Refactor cleanup in qemuMonitorJSONGetOneBlockStatsInfo (Peter Krempa) [Orabug: 32164351]\n- qemu: monitor: Refactor cleanup in qemuMonitorJSONBlockStatsCollectData (Peter Krempa) [Orabug: 32164351]\n- qemu: Remove stale comment for qemuDomainBlockStats (Peter Krempa) [Orabug: 32164351]\n- qemu_blockjob: Remove secdriver metadata for whole backing chain on job completion (Michal Privoznik) [Orabug: 32164351]\n- qemu: hotplug: Use VIR_AUTOFREE() instead VIR_FREE for strings (Daniel Henrique Barboza) [Orabug: 32164351]\n- qemu: snapshot: Do ACL check prior to checkpoint interlocking (Peter Krempa) [Orabug: 32164351]\n- qemuCheckDiskConfigAgainstDomain: Validate disk\u0027s SCSI address iff disk is SCSI (Xu Yandong) [Orabug: 32164351]\n- qemuSharedDeviceEntryRemove: Free domain name before VIR_DELETE_ELEMENT (Xu Yandong) [Orabug: 32164351]\n- qemu_capabilities: Temporarily disable dbus-vmstate capability (Michal Privoznik) [Orabug: 32164351]\n- Revert \u0027qemu: add socket datagram capability\u0027 (Michal Privoznik) [Orabug: 32164351]\n- tests: qemustatusxml2xml: Fix disk target mess (Peter Krempa) [Orabug: 32164351]\n- snapshot: Store both config and live XML in the snapshot domain (Maxiwell S. Garcia) [Orabug: 32164351]\n- qemu: formatting XML from domain def choosing the root name (Maxiwell S. Garcia) [Orabug: 32164351]\n- qemu: Don\u0027t leak domain def when RevertToSnapshot fails (Jiri Denemark) [Orabug: 32164351]\n- qemu: Fix regression in snapshot-revert (Eric Blake) [Orabug: 32164351]\n- lib: Define and use autofree for virConfPtr (Michal Privoznik) [Orabug: 32164351]\n- qemu_conf: Use more of VIR_AUTOUNREF() (Michal Privoznik) [Orabug: 32164351]\n- qemu_conf: Use more of VIR_AUTOFREE() (Michal Privoznik) [Orabug: 32164351]\n- qemu_conf: Drop a pair of needless \u0027cleanup\u0027 labels (Michal Privoznik) [Orabug: 32164351]\n- virhostdev: Don\u0027t unref @pcidevs twice (Michal Privoznik) [Orabug: 32164351]\n- qemu_conf.c: introduce qemuAddRemoveSharedDeviceInternal (Daniel Henrique Barboza) [Orabug: 32164351]\n- qemu_conf.c: introduce qemuAddRemoveSharedDiskInternal (Daniel Henrique Barboza) [Orabug: 32164351]\n- qemu_conf.c: introduce qemuAddRemoveSharedHostdevInternal (Daniel Henrique Barboza) [Orabug: 32164351]\n- remote: fix UNIX socket path being incorrectly built for libvirtd (eater) [Orabug: 32164351]\n- lib: Grab write lock when modifying list of domains (Michal Privoznik) [Orabug: 32164351]\n- qemu: reset VM id after external devices stop (Marc-Andre Lureau) [Orabug: 32164351]\n- qemu: add dbus-vmstate capability (Marc-Andre Lureau) [Orabug: 32164351]\n- qemu: add socket datagram capability (Marc-Andre Lureau) [Orabug: 32164351]\n- tests: fix xml2xml tpm-emulator.xml test (Marc-Andre Lureau) [Orabug: 32164351]\n- qemu: migration: Switch to blockdev mode for non-shared storage migration (Peter Krempa) [Orabug: 32164351]\n- qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopy (Peter Krempa) [Orabug: 32164351]\n- qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopyBlockdev (Peter Krempa) [Orabug: 32164351]\n- qemu: Defer support checks for external active snapshots to blockdev code or qemu (Peter Krempa) [Orabug: 32164351]\n- qemu: Add -blockdev support for external snapshots (Peter Krempa) [Orabug: 32164351]\n- qemu: snapshot: Skip overlay file creation/interogation if unsupported (Peter Krempa) [Orabug: 32164351]\n- qemu: Merge use of \u0027reuse\u0027 flag in qemuDomainSnapshotDiskPrepareOne (Peter Krempa) [Orabug: 32164351]\n- qemu: Disband qemuDomainSnapshotCreateSingleDiskActive (Peter Krempa) [Orabug: 32164351]\n- qemu: snapshot: Rename external disk snapshot handling functions (Peter Krempa) [Orabug: 32164351]\n- qemu: snapshot: Move error preservation to qemuDomainSnapshotDiskDataCleanup (Peter Krempa) [Orabug: 32164351]\n- qemu: snapshot: Save status and config XMLs only on success (Peter Krempa) [Orabug: 32164351]\n- qemu: snapshot: Fix image lock handling when taking a snapshot (Peter Krempa) [Orabug: 32164351]\n- qemu: driver: Fix shallow non-reuse block copy (Peter Krempa) [Orabug: 32164351]\n- qemu: Explicitly pass backing store to qemuBuildStorageSourceChainAttachPrepareBlockdevTop (Peter Krempa) [Orabug: 32164351]\n- qemu: block: explicitly pass backing store to qemuBlockStorageSourceAttachPrepareBlockdev (Peter Krempa) [Orabug: 32164351]\n- qemu: command: Refactor qemuBuildStorageSourceChainAttachPrepareBlockdevInternal (Peter Krempa) [Orabug: 32164351]\n- qemu: block: Explicitly specify backingStore when creating format layer props (Peter Krempa) [Orabug: 32164351]\n- qemu: block: Unify conditions to format backing store of format node definition (Peter Krempa) [Orabug: 32164351]\n- qemu: Prevent storage causing too much nested XML (Peter Krempa) [Orabug: 32164351]\n- qemu: domain: Refactor cleanup in qemuDomainDetermineDiskChain (Peter Krempa) [Orabug: 32164351]\n- qemu: hotplug: Setup disk throttling with blockdev (Peter Krempa) [Orabug: 32164351]\n- qemu: hotplug: Use VIR_AUTOFREE in qemuDomainAttachDiskGeneric (Peter Krempa) [Orabug: 32164351]\n- qemu: hotplug: Simplify cleanup in qemuDomainChangeMediaLegacy (Peter Krempa) [Orabug: 32164351]\n- qemu: Fix qemuDomainObjTaint with virtlogd (Jiri Denemark) [Orabug: 32164351]\n- qemu: monitor: Fix formatting of \u0027offset\u0027 in qemuMonitorJSONSaveMemory (Peter Krempa) [Orabug: 32164351]\n- tests: qemublock: Use bigger numbers as dummy capacity/physical (Peter Krempa) [Orabug: 32164351]\n- qemu: block: Use correct type when creating image size JSON entries (Peter Krempa) [Orabug: 32164351]\n- Exadata: protect vNUMA/SMT from artificially injected faults (Wim ten Have) [Orabug: 32708041]\n- virnetserver: fix some memory leaks in virNetTLSContextReloadForServer (Jin Yan)\n- virt-admin: Introduce command srv-update-tls (Zhang Bo) [Orabug: 32768102]\n- admin: Introduce virAdmServerUpdateTlsFiles (Zhang Bo) [Orabug: 32768102]\n- tls: Add a mutex lock on \u0027tlsCtxt\u0027 (Zhang Bo) [Orabug: 32768102]\n- virnetserver: Introduce virNetServerUpdateTlsFiles (Zhang Bo) [Orabug: 32768102]\n\n[5.7.0-27.el8]\n- Exadata: protect libvirt hugepage acquisition from QEMU async init (Wim ten Have) [Orabug: 32561685]\n\n[5.7.0-26.el8]\n- exadata: Fix autonomous hugepage acquisition barrier hang (Wim ten Have) [Orabug: 32537538]\n- exadata: Fix CPU Packing when out of pCPUs (Wim ten Have) [Orabug: 32527311]\n\n[5.7.0-25.el8]\n- exadata: force a host CPUs reserved pCPU threshold (Wim ten Have) [Orabug: 32516090]\n\n[5.7.0-24.el8]\n- exadata: Add configurable libvirtd mlockall support (Wim ten Have) [Orabug: 32479237]\n- exadata: hint a configurable number of memory init threads to qemu (Wim ten Have) [Orabug: 32460334]\n- Exadata: domain group should allow for asymmetric creation (Wim ten Have) [Orabug: 32060622]\n\n[5.7.0-23.el8]\n- util: remove unneeded cleanup labels (Wim ten Have) [Orabug: 32399255]\n- virnuma: Don\u0027t work around numa_node_to_cpus() for non-existent nodes (Wim ten Have) [Orabug: 32379098]\n\n[5.7.0-22.el8]\n- build: add dependency to help patch tooling (Menno Lageman) [Orabug: 32284540]\n- Exadata: fix active guest dgroup-delete requests (Wim ten Have) [Orabug: 32095306]\n- Exadata: fix a rogue Domain Groups dgroup-undefine flaw (Wim ten Have) [Orabug: 31945084]\n\n[2.7.0-21.el8]\n- exadata: Fix the validation when defining domain groups (Wim ten Have) [Orabug: 32085856]\n- qemu: improve error message when guest vcpu count exceeds domain group limit (Menno Lageman) [Orabug: 31985111]\n- qemu: Autonomous hugepage acquisition for 2-MiB and 1-GiB guest memoryBacking (Wim ten Have)\n- qemu: Fix a qemuMemReleaseHostHugepages state error (Wim ten Have) [Orabug: 32069203]\n- qemu: avoid guest CPU process handling if exadataConfig is disabled (Wim ten Have) [Orabug: 32053696]\n- domain_conf: Relax SCSI addr used check (Michal Privoznik) [Orabug: 31386162]\n- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (Michal Privoznik) [Orabug: 31386162]\n- qemu: remove use of qemuDomainObjBeginJobWithAgent() (Jonathon Jongsma) [Orabug: 31990187] {CVE-2019-20485}\n- qemu: agent: set ifname to NULL after freeing (Jan Tomko) [Orabug: 31964426] {CVE-2020-25637}\n- rpc: require write acl for guest agent in virDomainInterfaceAddresses (Jan Tomko) [Orabug: 31964426] {CVE-2020-25637}\n- rpc: add support for filtering @acls by uint params (Jan Tomko) [Orabug: 31964426] {CVE-2020-25637}\n- rpc: gendispatch: handle empty flags (Jan Tomko) [Orabug: 31964426] {CVE-2020-25637}\n\n[5.7.0-19.el8]\n- qemu: Verify use of hugepages when releasing its acquired status (Wim ten Have) [Orabug: 31839035]\n- qemu: Autonomous hugepages acquisition and release (Wim ten Have) [Orabug: 31367986]\n\n[5.7.0-17.el8]\n- qemu: Fix cpu boundary checks when starting or configuring guest domains. (Wim ten Have) [Orabug: 31469231]\n- libvirt: Allocate max possible CPUs for QEMU to prepare guest memory (Wim ten Have) [Orabug: 31064560]\n\n[5.7.0-16.el8]\n- qemu: format \u0027x-aw-bits\u0027 on intel-iommu command line (Menno Lageman)\n- qemu: format address wdith on intel-iommu command line (Menno Lageman)\n- conf: add address width attribute to iommu (Menno Lageman)\n- tests: add tests for host-phys-bits KVM feature (Menno Lageman) [Orabug: 31354547]\n- qemu: support host-phys-bits KVM feature (Menno Lageman) [Orabug: 31374547]\n- storage: Fix daemon crash on lookup storagepool by targetpath (Yi Li) [Orabug: 31439483] {CVE-2020-10703}\n\n[5.7.0-15.el8]\n- qemu: Escape the qemu driver systemd DOT hoax (Wim ten Have) [Orabug:\n 31380815]\n\n[5.7.0-14.el8]\n- vmx: make \u0027fileName\u0027 optional for CD-ROMs (Pino Toscano) [Orabug: 31350200]\n- vmx: shortcut earlier few \u0027ignore\u0027 cases in virVMXParseDisk() (Pino Toscano) [Orabug: 31350200]\n- domain group: Fix a potential SEGV while restoring guest domains (Wim ten Have) [Orabug: 31285615]\n- cpu_map: Distinguish Cascadelake-Server from Skylake-Server (Jiri Denemark) [Orabug: 31214897]\n- cpu_map: Add more -noTSX x86 CPU models (Christian Ehrhardt) [Orabug: 31214897]\n- qemuDomainGetStatsIOThread: Don\u0027t leak array with 0 iothreads (Peter Krempa) [Orabug: 31251756] {CVE-2020-12430}\n\n[5.7.0-13.el8]\n- domain groups: Fix multiple Domain Group vCPU administration flaws (Wim ten Have) [Orabug: 31145304]\n- qemu: fix missing #if defined(ENABLE_EXADATA) (Menno Lageman)\n- build: Fix qemu-submodule-init syntax-check issue (Wim ten Have)\n- libvirt: Fix various introduced Fedora/RHEL build violations (Wim ten Have) [Orabug: 31143337]\n- qemu: don\u0027t hold both jobs for suspend (Jonathon Jongsma) [Orabug: 31073098] {CVE-2019-20485}\n- domain groups: qemu driver error refers to pCPUs instead of vCPUs (Wim ten Have) [Orabug: 31075757]\n- node_device_conf: Don\u0027t leak @physical_function in virNodeDeviceGetPCISRIOVCaps (Jiang Kun) [Orabug: 31070337]\n\n[5.7.0-12.el8]\n- libvirt: vNUMA automatic host paritioning allows erroneous vcpu settings (Wim ten Have) [Orabug: 31050313]\n- remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 31003707]\n- remote: do not use socket activation by default (Menno Lageman) [Orabug: 31003707]\n- qemu driver: handle targetNode under memory hot-plug operations (Wim ten Have) [Orabug: 31009716]\n- domain groups: refresh dgbase host capabilities prior to defining a new group (Wim ten Have) [Orabug: 31026069]\n- domain groups: Always cleanup system.slice controlled hugepage reservations (Wim ten Have) [Orabug: 31025853]\n- domain groups: Enable DGs upon fresh groups arrival (Wim ten Have) [Orabug: 31021247]\n- domain groups: Skip undefined domain groups when validating lists (Wim ten Have) [Orabug: 31030117]\n\n[5.7.0-11.el8]\n- domain groups: Add functionality to control NUMA node alignment (Wim ten Have) [Orabug: 30988105]\n- domain groups: A rename should always update active and config domain definitions (Wim ten Have) [Orabug: 30999730]\n\n[5.7.0-10.el8]\n- domain groups: refresh dgbase depending host capabilities before rendering the cpuguestmask (Wim ten Have) [Orabug: 30987361]\n- conf: domain group validation errors should print correct group info (Menno Lageman) [Orabug: 30988428]\n- qemu: reserve hugepages when memoryBacking when live attaching memory (Wim ten Have) [Orabug: 30985510]\n- domain groups: avoid virDomainGroupInit if exadataConfig is disabled (Wim ten Have) [Orabug: 30985907]\n\n[5.7.0-9.el8]\n- vNUMA: distinguish standard and vNUMA memory \u0027setmaxmem\u0027 operations (Wim ten\n Have) [Orabug: 30894536]\n\n[5.7.0-8.el8]\n- domain groups: End Of BETA (Wim ten Have)\n- domaingroups: ExaData Domain Groups POC (Wim ten Have)\n- domaingroup: preliminary virsh support for domain groups - drop #4 (Menno Lageman)\n- tests: add various tests to exercise vNUMA host partitioning (Wim ten Have) [Orabug: 29720293]\n- qemu: driver changes for new vNUMA Host and Nodeset partitioning (Wim ten Have) [Orabug: 29720293]\n- XML definitions for guest vNUMA and parsing routines (Wim ten Have) [Orabug: 29720293]\n- Revert \u0027exadata: can not configure shared memory hosted disk devices for vhostmd.service\u0027 (Menno Lageman)\n- qemu: Forcibly mknod() even if it exists (Michal Privoznik)\n\n[5.7.0-5.el8]\n- exadata: can not configure shared memory hosted disk devices for\n vhostmd.service (Menno Lageman) [Orabug: 30598065]\n\n[5.7.0-4.el8]\n- build: skip copyright check for gnulib (Menno Lageman)\n- Revert \u0027network: pull global chain init into separate method\u0027 (Menno Lageman) [Orabug: 30611188]\n- Revert \u0027network: add more debugging of firewall chain creation\u0027 (Menno Lageman) [Orabug: 30611188]\n- Revert \u0027network: delay global firewall setup if no networks are running\u0027 (Menno Lageman) [Orabug: 30611188]\n- qemu-submodule-init: Add Git submodule init script (Karl Heubaum) [Orabug: 30796221]\n\n[5.7.0-3.el8]\n- Add VMware esx support (Menno Lageman) [Orabug: 30449929]\n\n[5.7.0-2.el8]\n- enable VMware hypervisor driver\n\nlibvirt-dbus\n[1.3.0]\n- Resolves: bz#1810193\n (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)\n\n[1.2.0-3]\n- Rebuild all virt packages to fix RHEL\u0027s upgrade path\n- Resolves: rhbz#1695587\n (Ensure modular RPM upgrade path)\n\n[1.2.0-2]\n- util: fix virtDBusUtilDecodeUUID (rhbz#1647823)\n\n[1.2.0-1]\n- Rebased to libvirt-dbus-1.2.0 (rhbz#1630196)\n\nlibvirt-python\n[5.7.0-1.el8]\n- libvirt-python.spec: Add a .spec file for libvirt-python\n\nnbdkit\n[1.16.2-4.0.1]\n- Replace upstream references within the description tag\n\n[1.16.2]\n- Resolves: bz#1810193\n (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)\n\n[1.16.2]\n- Resolves: bz#1810193\n (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)\n\nperl-Sys-Virt\nqemu-kvm\n[4.1.1-11.el8]\n- trace: use STAP_SDT_V2 to work around symbol visibility (Stefan Hajnoczi) [Orabug: 33272428]\n\n[4.2.1-11.el8]\n- pvrdma: Fix the ring init error flow (Marcel Apfelbaum) [Orabug: 33120142] {CVE-2021-3608}\n- pvrdma: Ensure correct input on ring init (Marcel Apfelbaum) [Orabug: 33120146] {CVE-2021-3607}\n- hw/rdma: Fix possible mremap overflow in the pvrdma device (Marcel Apfelbaum) [Orabug: 33120084] {CVE-2021-3582}\n- vhost-user-gpu: reorder free calls (Gerd Hoffmann) [Orabug: 32950701] {CVE-2021-3544}\n- vhost-user-gpu: abstract vg_cleanup_mapping_iov (Li Qiang) [Orabug: 32950716] {CVE-2021-3546}\n- vhost-user-gpu: fix OOB write in \u0027virgl_cmd_get_capset\u0027 (Li Qiang) [Orabug: 32950716] {CVE-2021-3546}\n- vhost-user-gpu: fix memory leak in \u0027virgl_resource_attach_backing\u0027 (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}\n- vhost-user-gpu: fix memory leak in \u0027virgl_cmd_resource_unref\u0027 (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}\n- vhost-user-gpu: fix memory leak while calling \u0027vg_resource_unref\u0027 (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}\n- vhost-user-gpu: fix memory leak in vg_resource_attach_backing (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}\n- vhost-user-gpu: fix resource leak in \u0027vg_resource_create_2d\u0027 (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}\n- vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (Li Qiang) [Orabug: 32950708] {CVE-2021-3545}\n- usb: limit combined packets to 1 MiB (Gerd Hoffmann) [Orabug: 32842778] {CVE-2021-3527}\n- usb/redir: avoid dynamic stack allocation (Gerd Hoffmann) [Orabug: 32842778] {CVE-2021-3527}\n- mptsas: Remove unused MPTSASState \u0027pending\u0027 field (Michael Tokarev) [Orabug: 32470463] {CVE-2021-3392}\n- oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]\n- oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]\n\n[4.2.1-10.el8]\n- e1000: fail early for evil descriptor (Jason Wang) [Orabug: 32560552] {CVE-2021-20257}\n- Document CVE-2020-27661 as fixed (Mark Kanda) [Orabug: 32960200] {CVE-2020-27661}\n- block: Avoid stale pointer dereference in blk_get_aio_context() (Greg Kurz)\n- block: Fix blk-\u003Ein_flight during blk_wait_while_drained() (Kevin Wolf)\n- block: Increase BB.in_flight for coroutine and sync interfaces (Kevin Wolf)\n- block-backend: Reorder flush/pdiscard function definitions (Kevin Wolf)\n- i386/pc: let iterator handle regions below 4G (Joao Martins)\n- arm/virt: Add memory hot remove support (Shameer Kolothum) [Orabug: 32643506]\n- i386/pc: consolidate usable iova iteration (Joao Martins)\n- i386/acpi: fix SRAT ranges in accordance to usable IOVA (Joao Martins)\n- migration: increase listening socket backlog (Elena Ufimtseva)\n- multifd: Make multifd_save_setup() get an Error parameter (Juan Quintela)\n- multifd: Make multifd_load_setup() get an Error parameter (Juan Quintela)\n- migration: fix maybe-uninitialized warning (Marc-Andre Lureau)\n- migration: Fix the re-run check of the migrate-incoming command (Yury Kotov)\n- multifd: Initialize local variable (Juan Quintela)\n- multifd: Be consistent about using uint64_t (Juan Quintela)\n- Bug #1829242 correction. (Alexey Romko)\n- migration/multifd: fix destroyed mutex access in terminating multifd threads (Jiahui Cen)\n- migration/multifd: fix nullptr access in terminating multifd threads (Jiahui Cen)\n- migration/multifd: not use multifd during postcopy (Wei Yang)\n- migration/multifd: clean pages after filling packet (Wei Yang)\n- migration: Make sure that we don\u0027t call write() in case of error (Juan Quintela)\n- migration: fix multifd_send_pages() next channel (Laurent Vivier)\n- migration/multifd: bypass uuid check for initial packet (Elena Ufimtseva) [Orabug: 32610480]\n- migration/tls: add error handling in multifd_tls_handshake_thread (Hao Wang)\n- migration/tls: fix inverted semantics in multifd_channel_connect (Hao Wang)\n- migration/multifd: do not access uninitialized multifd_recv_state (Elena Ufimtseva) [Orabug: 32795384]\n- io/channel-tls.c: make qio_channel_tls_shutdown thread-safe (Lukas Straub)\n- qemu.spec: Enable qemu-guest-agent RPM for OL7 (Karl Heubaum) [Orabug: 32415543]\n- virtio-net: Set mac address to hardware if the peer is vdpa (Cindy Lu)\n- net: Add vhost-vdpa in show_netdevs() (Cindy Lu)\n- vhost-vdpa: Add qemu_close in vhost_vdpa_cleanup (Cindy Lu)\n- hw/virtio/vhost-vdpa: Fix Coverity CID 1432864 (Philippe Mathieu-Daude)\n- vhost-vdpa: negotiate VIRTIO_NET_F_STATUS with driver (Si-Wei Liu)\n- configure: Fix build dependencies with vhost-vdpa. (Laurent Vivier)\n- configure: simplify vhost condition with Kconfig (Marc-Andre Lureau)\n- vhost-vdpa: add trace-events (Laurent Vivier)\n- dma/pl330: Fix qemu_hexdump() usage in pl330.c (Mark Kanda)\n- util/hexdump: introduce qemu_hexdump_line() (Laurent Vivier)\n- util/hexdump: Reorder qemu_hexdump() arguments (Philippe Mathieu-Daude)\n- util/hexdump: Convert to take a void pointer argument (Philippe Mathieu-Daude)\n- net/colo-compare.c: Only hexdump packets if tracing is enabled (Lukas Straub)\n- vhost-vdpa: batch updating IOTLB mappings (Jason Wang)\n- vhost: switch to use IOTLB v2 format (Jason Wang)\n- vhost-vdpa: remove useless variable (Laurent Vivier)\n- virtio: vdpa: omit check return of g_malloc (Li Qiang)\n- vhost-vdpa: fix indentation in vdpa_ops (Stefano Garzarella)\n- virtio-net: check the existence of peer before accessing vDPA config (Jason Wang)\n- virtio-pci: fix wrong index in virtio_pci_queue_enabled (Yuri Benditovich)\n- virtio-pci: fix virtio_pci_queue_enabled() (Laurent Vivier)\n- vhost-vdpa :Fix Coverity CID 1430270 / CID 1420267 (Cindy Lu)\n- vhost-vdpa: fix the compile issue without kvm (Cindy Lu)\n- vhost-vdpa: introduce vhost-vdpa net client (Cindy Lu)\n- vhost-vdpa: introduce vhost-vdpa backend (Cindy Lu)\n- linux headers: sync to 5.9-rc4 (Jason Wang)\n- Linux headers: update (Cornelia Huck)\n- virtio-net: fix rsc_ext compat handling (Cornelia Huck)\n- linux-headers: update against Linux 5.7-rc3 (Cornelia Huck)\n- linux-headers: update (Cornelia Huck)\n- virtiofsd: Pull in kernel\u0027s fuse.h (Dr. David Alan Gilbert)\n- linux-headers: Update (Bharata B Rao)\n- linux-headers: Update (Greg Kurz)\n- vhost_net: introduce set_config \u0026 get_config (Cindy Lu)\n- vhost: implement vhost_force_iommu method (Cindy Lu)\n- vhost: introduce new VhostOps vhost_force_iommu (Cindy Lu)\n- vhost: implement vhost_vq_get_addr method (Cindy Lu)\n- vhost: introduce new VhostOps vhost_vq_get_addr (Cindy Lu)\n- vhost: implement vhost_dev_start method (Cindy Lu)\n- vhost: introduce new VhostOps vhost_dev_start (Cindy Lu)\n- vhost: check the existence of vhost_set_iotlb_callback (Jason Wang)\n- virtio-pci: implement queue_enabled method (Jason Wang)\n- virtio-bus: introduce queue_enabled method (Jason Wang)\n- vhost_net: use the function qemu_get_peer (Cindy Lu)\n- net: introduce qemu_get_peer (Cindy Lu)\n- vhost: correctly turn on VIRTIO_F_IOMMU_PLATFORM (Jason Wang)\n- imx7-ccm: add digprog mmio write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}\n- tz-ppc: add dummy read/write methods (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}\n- spapr_pci: add spapr msi read method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}\n- nvram: add nrf51_soc flash read method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}\n- prep: add ppc-parity write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}\n- vfio: add quirk device write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}\n- pci-host: designware: add pcie-msi read method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}\n- hw/pci-host: add pci-intack write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}\n- oslib-posix: take lock before qemu_cond_broadcast (Bauerchen) [Orabug: 32555402]\n- oslib-posix: initialize mutex and condition variable (Paolo Bonzini) [Orabug: 32555402]\n- mem-prealloc: optimize large guest startup (Bauerchen) [Orabug: 32555402]\n- i386: Add the support for AMD EPYC 3rd generation processors (Babu Moger)\n- acpi: cpuhp: document CPHP_GET_CPU_ID_CMD command (Igor Mammedov)\n- acpi: cpuhp: add CPHP_GET_CPU_ID_CMD command (Igor Mammedov)\n- acpi: cpuhp: spec: add typical usecases (Igor Mammedov)\n- acpi: cpuhp: spec: clarify store into \u0027Command data\u0027 when \u0027Command field\u0027 == 0 (Igor Mammedov)\n- acpi: cpuhp: spec: fix \u0027Command data\u0027 description (Igor Mammedov)\n- acpi: cpuhp: spec: clarify \u0027CPU selector\u0027 register usage and endianness (Igor Mammedov)\n- acpi: cpuhp: introduce \u0027Command data 2\u0027 field (Igor Mammedov)\n- x86: ich9: let firmware negotiate \u0027CPU hot-unplug with SMI\u0027 feature (Igor Mammedov)\n- x86: ich9: factor out \u0027guest_cpu_hotplug_features\u0027 (Igor Mammedov)\n- x86: acpi: let the firmware handle pending \u0027CPU remove\u0027 events in SMM (Igor Mammedov)\n- x86: acpi: introduce AcpiPmInfo::smi_on_cpu_unplug (Igor Mammedov)\n- acpi: cpuhp: introduce \u0027firmware performs eject\u0027 status/control bits (Igor Mammedov)\n- x68: acpi: trigger SMI before sending hotplug Notify event to OSPM (Igor Mammedov)\n- x86: acpi: introduce the PCI0.SMI0 ACPI device (Igor Mammedov)\n- x86: acpi: introduce AcpiPmInfo::smi_on_cpuhp (Igor Mammedov)\n- x86: ich9: expose \u0027smi_negotiated_features\u0027 as a QOM property (Igor Mammedov)\n- tests: acpi: mark to be changed tables in bios-tables-test-allowed-diff (Igor Mammedov)\n- acpi: add aml_land() and aml_break() primitives (Igor Mammedov)\n- x86: cpuhp: refuse cpu hot-unplug request earlier if not supported (Igor Mammedov)\n- x86: cpuhp: prevent guest crash on CPU hotplug when broadcast SMI is in use (Igor Mammedov)\n- x86: lpc9: let firmware negotiate \u0027CPU hotplug with SMI\u0027 features (Igor Mammedov)\n- q35: implement 128K SMRAM at default SMBASE address (Igor Mammedov)\n- hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register (Philippe Mathieu-Daude) [Orabug: 32470471] {CVE-2021-20221}\n- memory: clamp cached translation in case it points to an MMIO region (Paolo Bonzini) [Orabug: 32252673] {CVE-2020-27821}\n- hw/sd/sdhci: Fix DMA Transfer Block Size field (Philippe Mathieu-Daude) [Orabug: 32613470] {CVE-2021-3409}\n\n[4.2.1-6.el8]\n- i386/pc: Keep PCI 64-bit hole within usable IOVA space (Joao Martins)\n- pc/cmos: Adjust CMOS above 4G memory size according to 1Tb boundary (Joao Martins)\n- i386/pc: Round up the hotpluggable memory within valid IOVA ranges (Joao Martins)\n- i386/pc: Account IOVA reserved ranges above 4G boundary (Joao Martins)\n\n[4.2.1-5.el8]\n- hostmem: fix default \u0027prealloc-threads\u0027 count (Mark Kanda)\n- hostmem: introduce \u0027prealloc-threads\u0027 property (Igor Mammedov)\n- qom: introduce object_register_sugar_prop (Paolo Bonzini)\n- migration/multifd: Do error_free after migrate_set_error to avoid memleaks (Pan Nengyuan)\n- multifd/tls: fix memoryleak of the QIOChannelSocket object when cancelling migration (Chuan Zheng)\n- migration/multifd: fix hangup with TLS-Multifd due to blocking handshake (Chuan Zheng)\n- migration/tls: add trace points for multifd-tls (Chuan Zheng)\n- migration/tls: add support for multifd tls-handshake (Chuan Zheng)\n- migration/tls: extract cleanup function for common-use (Chuan Zheng)\n- migration/multifd: fix memleaks in multifd_new_send_channel_async (Pan Nengyuan)\n- migration/multifd: fix nullptr access in multifd_send_terminate_threads (Zhimin Feng)\n- migration/tls: add tls_hostname into MultiFDSendParams (Chuan Zheng)\n- migration/tls: extract migration_tls_client_create for common-use (Chuan Zheng)\n- migration/tls: save hostname into MigrationState (Chuan Zheng)\n- tests/qtest: add a test case for pvpanic-pci (Mihai Carabas)\n- pvpanic : update pvpanic spec document (Mihai Carabas)\n- hw/misc/pvpanic: add PCI interface support (Mihai Carabas)\n- hw/misc/pvpanic: split-out generic and bus dependent code (Mihai Carabas)\n- qemu-img: Add --target-is-zero to convert (David Edmondson)\n- 9pfs: Fully restart unreclaim loop (CVE-2021-20181) (Greg Kurz) [Orabug: 32441198] {CVE-2021-20181}\n- ide: atapi: check logical block address and read size (CVE-2020-29443) (Prasad J Pandit) [Orabug: 32393835] {CVE-2020-29443}\n- Document CVE-2019-20808 as fixed (Mark Kanda) [Orabug: 32339196] {CVE-2019-20808}\n- block/iscsi:fix heap-buffer-overflow in iscsi_aio_ioctl_cb (Chen Qun) [Orabug: 32339207] {CVE-2020-11947}\n- net: remove an assert call in eth_get_gso_type (Prasad J Pandit) [Orabug: 32102583] {CVE-2020-27617}\n- nvdimm: honor -object memory-backend-file, readonly=on option (Stefan Hajnoczi) [Orabug: 32265408]\n- hostmem-file: add readonly=on|off option (Stefan Hajnoczi) [Orabug: 32265408]\n- memory: add readonly support to memory_region_init_ram_from_file() (Stefan Hajnoczi) [Orabug: 32265408]\n\n[4.2.1-4.el8]\n- Document CVE-2020-25723 as fixed (Mark Kanda) [Orabug: 32222397] {CVE-2020-25723}\n- hw/net/e1000e: advance desc_offset in case of null descriptor (Prasad J Pandit) [Orabug: 32217517] {CVE-2020-28916}\n- i386: Add 2nd Generation AMD EPYC processors (Babu Moger) [Orabug: 32217570]\n- libslirp: Update version to include CVE fixes (Mark Kanda) [Orabug: 32208456] [Orabug: 32208462] {CVE-2020-29129} {CVE-2020-29130}\n- Document CVE-2020-25624 as fixed (Mark Kanda) [Orabug: 32212527] {CVE-2020-25624}\n- pvpanic: Advertise the PVPANIC_CRASHLOADED event support (Paolo Bonzini) [Orabug: 32102853]\n- ati: check x y display parameter values (Prasad J Pandit) [Orabug: 32108251] {CVE-2020-27616}\n- Add AArch64 support for QMP regdump tool and sosreport plugin (Mark Kanda) [Orabug: 32080658]\n- Add qemu_regdump sosreport plugin support for \u0027-mon\u0027 QMP sockets (Mark Kanda)\n- migration/dirtyrate: present dirty rate only when querying the rate has completed (Chuan Zheng)\n- migration/dirtyrate: record start_time and calc_time while at the measuring state (Chuan Zheng)\n- migration/dirtyrate: Add trace_calls to make it easier to debug (Chuan Zheng)\n- migration/dirtyrate: Implement qmp_cal_dirty_rate()/qmp_get_dirty_rate() function (Chuan Zheng)\n- migration/dirtyrate: Implement calculate_dirtyrate() function (Chuan Zheng)\n- migration/dirtyrate: Implement set_sample_page_period() and is_sample_period_valid() (Chuan Zheng)\n- migration/dirtyrate: skip sampling ramblock with size below MIN_RAMBLOCK_SIZE (Chuan Zheng)\n- migration/dirtyrate: Compare page hash results for recorded sampled page (Chuan Zheng)\n- migration/dirtyrate: Record hash results for each sampled page (Chuan Zheng)\n- migration/dirtyrate: move RAMBLOCK_FOREACH_MIGRATABLE into ram.h (Chuan Zheng)\n- migration/dirtyrate: Add dirtyrate statistics series functions (Chuan Zheng)\n- migration/dirtyrate: Add RamblockDirtyInfo to store sampled page info (Chuan Zheng)\n- migration/dirtyrate: add DirtyRateStatus to denote calculation status (Chuan Zheng)\n- migration/dirtyrate: setup up query-dirtyrate framwork (Chuan Zheng)\n- ram_addr: Split RAMBlock definition (Juan Quintela)\n\nseabios\n[1.13.0]\n- Resolves: bz#1844296\n(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)\n\n[1.13.0]\n- Resolves: bz#1810193\n (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)\n\nsupermin\n[5.1.19]\n- Resolves: bz#1810193\n (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)\n\n[5.1.19-9]\n- Rebuild all virt packages to fix RHEL\u0027s upgrade path\n- Resolves: rhbz#1695587\n (Ensure modular RPM upgrade path)\n\n[5.1.19-8]\n- Pass CFLAGS \u0026 LDFLAGS to final supermin link\n resolves: rhbz#1624175\n\n[5.1.19-7]\n- Rebuild for OCaml 4.07.0.\n\n[5.1.19-6]\n- Drop dietlibc in RHEL 8\n resolves: rhbz#1588067\n\n[5.1.19-5]\n- Bump release and rebuild.\n\n[5.1.19-4]\n- Reenable hardened build\n\n[5.1.19-3]\n- Fix bytes/string problems.\n\n[5.1.19-2]\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild\n\n[5.1.19-1]\n- New upstream version 5.1.19.\n- Remove all patches, now upstream.", "published": "2021-12-01T00:00:00Z", "severity": "IMPORTANT", "cvss": 6.5, "epss": 0.00314, "epssPercentile": 0.24479, "priority": "Routine", "priorityTier": 4, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "hivex", "release": "ol 8", "fixedVersion": "0:1.3.18-20.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "hivex-devel", "release": "ol 8", "fixedVersion": "0:1.3.18-20.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-bash-completion", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-benchmarking", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-devel", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-gfs2", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-gobject", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-gobject-devel", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-inspect-icons", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-java", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-java-devel", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-javadoc", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-man-pages-ja", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-man-pages-uk", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-rescue", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-rsync", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-tools", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-tools-c", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-winsupport", "release": "ol 8", "fixedVersion": "0:8.2-1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libguestfs-xfs", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libiscsi", "release": "ol 8", "fixedVersion": "0:1.18.0-8.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libiscsi-devel", "release": "ol 8", "fixedVersion": "0:1.18.0-8.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libiscsi-utils", "release": "ol 8", "fixedVersion": "0:1.18.0-8.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libnbd", "release": "ol 8", "fixedVersion": "0:1.2.2-1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libnbd-devel", "release": "ol 8", "fixedVersion": "0:1.2.2-1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-admin", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-bash-completion", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-client", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-config-network", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-config-nwfilter", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-interface", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-network", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-nodedev", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-nwfilter", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-qemu", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-secret", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-storage", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-storage-core", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-storage-disk", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-storage-gluster", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-storage-iscsi", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-storage-iscsi-direct", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-storage-logical", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-storage-mpath", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-storage-rbd", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-driver-storage-scsi", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-daemon-kvm", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-dbus", "release": "ol 8", "fixedVersion": "0:1.3.0-2.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-devel", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-docs", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-libs", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-lock-sanlock", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "libvirt-nss", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "lua-guestfs", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdfuse", "release": "ol 8", "fixedVersion": "0:1.2.2-1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-bash-completion", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-basic-filters", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-basic-plugins", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-curl-plugin", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-devel", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-example-plugins", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-gzip-plugin", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-linuxdisk-plugin", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-python-plugin", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-server", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-ssh-plugin", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-vddk-plugin", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "nbdkit-xz-filter", "release": "ol 8", "fixedVersion": "0:1.16.2-4.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "netcf", "release": "ol 8", "fixedVersion": "0:0.2.8-12.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "netcf-devel", "release": "ol 8", "fixedVersion": "0:0.2.8-12.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "netcf-libs", "release": "ol 8", "fixedVersion": "0:0.2.8-12.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "perl-Sys-Guestfs", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "perl-Sys-Virt", "release": "ol 8", "fixedVersion": "0:4.5.0-5.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "perl-hivex", "release": "ol 8", "fixedVersion": "0:1.3.18-20.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "python3-hivex", "release": "ol 8", "fixedVersion": "0:1.3.18-20.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "python3-libguestfs", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "python3-libnbd", "release": "ol 8", "fixedVersion": "0:1.2.2-1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "python3-libvirt", "release": "ol 8", "fixedVersion": "0:5.7.0-31.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "qemu-guest-agent", "release": "ol 8", "fixedVersion": "15:4.2.1-11.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "qemu-img", "release": "ol 8", "fixedVersion": "15:4.2.1-11.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "qemu-kvm", "release": "ol 8", "fixedVersion": "15:4.2.1-11.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "qemu-kvm-block-curl", "release": "ol 8", "fixedVersion": "15:4.2.1-11.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "qemu-kvm-block-gluster", "release": "ol 8", "fixedVersion": "15:4.2.1-11.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "qemu-kvm-block-iscsi", "release": "ol 8", "fixedVersion": "15:4.2.1-11.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "qemu-kvm-block-rbd", "release": "ol 8", "fixedVersion": "15:4.2.1-11.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "qemu-kvm-block-ssh", "release": "ol 8", "fixedVersion": "15:4.2.1-11.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "qemu-kvm-common", "release": "ol 8", "fixedVersion": "15:4.2.1-11.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "qemu-kvm-core", "release": "ol 8", "fixedVersion": "15:4.2.1-11.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "ruby-hivex", "release": "ol 8", "fixedVersion": "0:1.3.18-20.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "ruby-libguestfs", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "seabios", "release": "ol 8", "fixedVersion": "0:1.13.0-2.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "seabios-bin", "release": "ol 8", "fixedVersion": "0:1.13.0-2.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "seavgabios-bin", "release": "ol 8", "fixedVersion": "0:1.13.0-2.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "sgabios", "release": "ol 8", "fixedVersion": "1:0.20170427git-3.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "sgabios-bin", "release": "ol 8", "fixedVersion": "1:0.20170427git-3.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "supermin", "release": "ol 8", "fixedVersion": "0:5.1.19-10.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "supermin-devel", "release": "ol 8", "fixedVersion": "0:5.1.19-10.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "virt-dib", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" }, { "platform": "linux", "product": "virt-v2v", "release": "ol 8", "fixedVersion": "1:1.40.2-25.0.1.module\u002Bel8.4.0\u002B20319\u002B6eb4347c", "fix": "ELSA-2021-9568", "url": "https://patchblox.com/security/fix/linux/elsa-2021-9568", "released": "2021-12-01T00:00:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-07T06:34:28Z" }