[ol8_kvm_appstream] qemu-kvm-block-curl-15:6.1.1-4.module+el8.6.0+20842+e9607200.x86_64

This package provides the additional CURL block driver for QEMU.

Install this package if you want to access remote disks over
http, https, ftp and other transports provided by the CURL library.

Changelog (Show File list) (Show related packages)

• Tue Sep 13 2022 Karl Heubaum <karl.heubaum@oracle.com> - 6.1.1-4-el8

  - display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
  - ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
  - scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
  - scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
  - tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
  - hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
  - virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
  - vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
  - Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
  - vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
  - vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
  - vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
  - kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
  - kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
  - event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
  - virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
  - vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
  - vhost-vdpa: backend feature should set only once (Si-Wei Liu)
  - vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
  - vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
  - virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
  - virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
  - virtio: fix the condition for iommu_platform not supported (Halil Pasic)
  - vdpa: Make ncs autofree (Eugenio Perez)
  - vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
  - hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
  - vhost-vdpa: stick to -errno error return convention (Roman Kagan)
  - vdpa: Add dummy receive callback (Eugenio Perez)
  - vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
  - vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
  - vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
  - vhost: Rename last_index to vq_index_end (Eugenio Perez)
  - net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
  - vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
  - vhost-vdpa: multiqueue support (Jason Wang)
  - virtio-net: vhost control virtqueue support (Jason Wang)
  - vhost: record the last virtqueue index for the virtio device (Jason Wang)
  - virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
  - vhost-net: control virtqueue support (Jason Wang)
  - net: introduce control client (Jason Wang)
  - vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
  - vhost-vdpa: prepare for the multiqueue support (Jason Wang)
  - vhost-vdpa: classify one time request (Jason Wang)
  - vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
  - vdpa: Check for iova range at mappings changes (Eugenio Perez)
  - vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
  - net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
  - net/vhost-user: Fix device compatibility check (Kevin Wolf)
  - net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
  - memory: Name all the memory listeners (Peter Xu)
  - vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
  - vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
  - vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
  - vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
  - vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
  - vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
  - vhost_net: do not assume nvqs is always 2 (Jason Wang)
  - vhost: use unsigned int for nvqs (Jason Wang)
  - vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
  - vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
  - vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
  - vhost: correctly detect the enabling IOMMU (Jason Wang)
  - virtio-pci: implement iommu_enabled() (Jason Wang)
  - virtio-bus: introduce iommu_enabled() (Jason Wang)
  - hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
  - vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
  - target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]

• Fri Apr 08 2022 Karl Heubaum <karl.heubaum@oracle.com> - 6.1.1-3.el8

  - acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
  - hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
  - bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
  - hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]

• Wed Mar 09 2022 Karl Heubaum <karl.heubaum@oracle.com> - 6.1.1-2.el8

  - vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
  - qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
  - block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}

• Fri Feb 25 2022 Karl Heubaum <karl.heubaum@oracle.com> - 6.1.1-1.el8

  - ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
  - ACPI ERST: bios-tables-test testcase (Eric DeVolder)
  - ACPI ERST: qtest for ERST (Eric DeVolder)
  - ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
  - ACPI ERST: build the ACPI ERST table (Eric DeVolder)
  - ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
  - ACPI ERST: header file for ERST (Eric DeVolder)
  - ACPI ERST: PCI device_id for ERST (Eric DeVolder)
  - hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
  - oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
  - oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
  - tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
  - virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
  - migration: increase listening socket backlog (Elena Ufimtseva)
  - virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
  - virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
  - acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
  - Update to QEMU 6.1.1 (Karl Heubaum)

• Wed Jan 19 2022 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1.15.el8

  - qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
  - Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
  - hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
  - hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé) [Orabug: 32439466] {CVE-2021-20196}
  - net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
  - lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
  - pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
  - rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
  - tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
  - target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
  - target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
  - target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
  - target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
  - target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
  - target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
  - target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)

• Wed Dec 22 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-14.el8

  - scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
  - scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
  - scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
  - scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
  - scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
  - scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
  - scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
  - scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
  - scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
  - scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
  - scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
  - scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
  - scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]

• Wed Dec 15 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-13.el8

  - pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]

• Thu Dec 02 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-12.1.el8

  - Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
  - hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
  - pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
  - pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
  - pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
  - pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
  - pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
  - pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
  - hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
  - hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
  - hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
  - pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
  - qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
  - i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
  - uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
  - usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
  - hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
  - e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
  - virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda) [Orabug: 33537594]
  - MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
  - target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
  - ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
  - KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
  - ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
  - ACPI: Build Hardware Error Source Table (Dongjiu Geng)
  - ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
  - docs: APEI GHES generation and CPER record description (Dongjiu Geng)
  - hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
  - acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
  - block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
  - block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]

• Sun Sep 12 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-11.el8

  - trace: use STAP_SDT_V2 to work around symbol visibility (Stefan Hajnoczi) [Orabug: 33272428]

• Tue Jul 27 2021 Karl Heubaum <karl.heubaum@oracle.com> - 4.2.1-11.el8

  - pvrdma: Fix the ring init error flow (Marcel Apfelbaum) [Orabug: 33120142] {CVE-2021-3608}
  - pvrdma: Ensure correct input on ring init (Marcel Apfelbaum) [Orabug: 33120146] {CVE-2021-3607}
  - hw/rdma: Fix possible mremap overflow in the pvrdma device (Marcel Apfelbaum) [Orabug: 33120084] {CVE-2021-3582}
  - vhost-user-gpu: reorder free calls (Gerd Hoffmann) [Orabug: 32950701] {CVE-2021-3544}
  - vhost-user-gpu: abstract vg_cleanup_mapping_iov (Li Qiang) [Orabug: 32950716] {CVE-2021-3546}
  - vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (Li Qiang) [Orabug: 32950716] {CVE-2021-3546}
  - vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
  - vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
  - vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
  - vhost-user-gpu: fix memory leak in vg_resource_attach_backing (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
  - vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
  - vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (Li Qiang) [Orabug: 32950708] {CVE-2021-3545}
  - usb: limit combined packets to 1 MiB (Gerd Hoffmann) [Orabug: 32842778] {CVE-2021-3527}
  - usb/redir: avoid dynamic stack allocation (Gerd Hoffmann) [Orabug: 32842778] {CVE-2021-3527}
  - mptsas: Remove unused MPTSASState 'pending' field (Michael Tokarev) [Orabug: 32470463] {CVE-2021-3392}
  - oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
  - oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]