Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
USN-4467-1 introduced a regression in QEMU.. =========================================================================Ubuntu Security Notice USN-4467-3 February 22, 2021 qemu regression ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.10 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: USN-4467-1 introduced a regression in QEMU. Software Description: - qemu: Machine emulator and virtualizer Details: USN-4467-1 fixed vulnerabilities in QEMU. The fix for CVE-2020-13754 introduced a regression in certain environments. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Ren Ding, Hanqing Zhao, Alexander Bulekov, and Anatoly Trosinenko discovered that the QEMU incorrectly handled certain msi-x mmio operations. An attacker inside a guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-13754) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.10: qemu 1:5.0-5ubuntu9.6 qemu-system 1:5.0-5ubuntu9.6 qemu-system-arm 1:5.0-5ubuntu9.6 qemu-system-mips 1:5.0-5ubuntu9.6 qemu-system-misc 1:5.0-5ubuntu9.6 qemu-system-ppc 1:5.0-5ubuntu9.6 qemu-system-s390x 1:5.0-5ubuntu9.6 qemu-system-sparc 1:5.0-5ubuntu9.6 qemu-system-x86 1:5.0-5ubuntu9.6 qemu-system-x86-microvm 1:5.0-5ubuntu9.6 qemu-system-x86-xen 1:5.0-5ubuntu9.6 Ubuntu 20.04 LTS: qemu 1:4.2-3ubuntu6.14 qemu-system 1:4.2-3ubuntu6.14 qemu-system-arm 1:4.2-3ubuntu6.14 qemu-system-mips 1:4.2-3ubuntu6.14 qemu-system-misc 1:4.2-3ubuntu6.14 qemu-system-ppc 1:4.2-3ubuntu6.14 qemu-system-s390x 1:4.2-3ubuntu6.14 qemu-system-sparc 1:4.2-3ubuntu6.14 qemu-system-x86 1:4.2-3ubuntu6.14 qemu-system-x86-microvm 1:4.2-3ubuntu6.14 qemu-system-x86-xen 1:4.2-3ubuntu6.14 Ubuntu 18.04 LTS: qemu 1:2.11+dfsg-1ubuntu7.36 qemu-system 1:2.11+dfsg-1ubuntu7.36 qemu-system-arm 1:2.11+dfsg-1ubuntu7.36 qemu-system-mips 1:2.11+dfsg-1ubuntu7.36 qemu-system-misc 1:2.11+dfsg-1ubuntu7.36 qemu-system-ppc 1:2.11+dfsg-1ubuntu7.36 qemu-system-s390x 1:2.11+dfsg-1ubuntu7.36 qemu-system-sparc 1:2.11+dfsg-1ubuntu7.36 qemu-system-x86 1:2.11+dfsg-1ubuntu7.36 Ubuntu 16.04 LTS: qemu 1:2.5+dfsg-5ubuntu10.51 qemu-system 1:2.5+dfsg-5ubuntu10.51 qemu-system-aarch64 1:2.5+dfsg-5ubuntu10.51 qemu-system-arm 1:2.5+dfsg-5ubuntu10.51 qemu-system-mips 1:2.5+dfsg-5ubuntu10.51 qemu-system-misc 1:2.5+dfsg-5ubuntu10.51 qemu-system-ppc 1:2.5+dfsg-5ubuntu10.51 qemu-system-s390x 1:2.5+dfsg-5ubuntu10.51 qemu-system-sparc 1:2.5+dfsg-5ubuntu10.51 qemu-system-x86 1:2.5+dfsg-5ubuntu10.51 After a standard system update you need to restart all QEMU virtual machines to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4467-3 https://ubuntu.com/security/notices/USN-4467-1 https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1914883 Package Information: https://launchpad.net/ubuntu/+source/qemu/1:5.0-5ubuntu9.6 https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.14 https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.36 https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.51 . A critical announcement for Ubuntu focusing on a fix for QEMU issues and vulnerabilities linked to Denial-of-Service attacks. Refer to the update guidelines.. QEMU Update, Ubuntu Security Notice, Regression Fixes, Denial of Service. . Severity: Critical. LinuxSecurity.com Team
An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2020:2214-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:2214 Issue date: 2020-05-19 CVE Names: CVE-2017-18595 CVE-2019-19768 CVE-2020-10711 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 7.4) - noarch, x86_64 Red Hat Enterprise Linux Server E4S (v. 7.4) - noarch, ppc64le, x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.4) - x86_64 Red Hat Enterprise Linux Server Optional E4S (v. 7.4) - ppc64le, x86_64 Red Hat Enterprise Linux Server Optional TUS (v. 7.4) - x86_64 Red Hat Enterprise Linux Server TUS (v. 7.4) - noarch, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (CVE-2017-18595) * kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c (CVE-2019-19768) * Kernel:NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic (CVE-2020-10711) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1758671 - CVE-2017-18595 kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c 1786164 - CVE-2019-19768 kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c 1825116 - CVE-2020-10711 Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic 6. Package List: Red Hat Enterprise Linux Server AUS (v. 7.4): Source: kernel-3.10.0-693.67.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-693.67.1.el7.noarch.rpm kernel-doc-3.10.0-693.67.1.el7.noarch.rpm x86_64: kernel-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.67.1.el7.x86_64.rpm kernel-devel-3.10.0-693.67.1.el7.x86_64.rpm kernel-headers-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-693.67.1.el7.x86_64.rpm perf-3.10.0-693.67.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm python-perf-3.10.0-693.67.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm Red Hat Enterprise Linux Server E4S (v.7.4): Source: kernel-3.10.0-693.67.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-693.67.1.el7.noarch.rpm kernel-doc-3.10.0-693.67.1.el7.noarch.rpm ppc64le: kernel-3.10.0-693.67.1.el7.ppc64le.rpm kernel-bootwrapper-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debug-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debug-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-693.67.1.el7.ppc64le.rpm kernel-devel-3.10.0-693.67.1.el7.ppc64le.rpm kernel-headers-3.10.0-693.67.1.el7.ppc64le.rpm kernel-tools-3.10.0-693.67.1.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm kernel-tools-libs-3.10.0-693.67.1.el7.ppc64le.rpm perf-3.10.0-693.67.1.el7.ppc64le.rpm perf-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm python-perf-3.10.0-693.67.1.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm x86_64: kernel-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.67.1.el7.x86_64.rpm kernel-devel-3.10.0-693.67.1.el7.x86_64.rpm kernel-headers-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-693.67.1.el7.x86_64.rpm perf-3.10.0-693.67.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm python-perf-3.10.0-693.67.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm Red Hat Enterprise Linux Server TUS (v.7.4): Source: kernel-3.10.0-693.67.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-693.67.1.el7.noarch.rpm kernel-doc-3.10.0-693.67.1.el7.noarch.rpm x86_64: kernel-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.67.1.el7.x86_64.rpm kernel-devel-3.10.0-693.67.1.el7.x86_64.rpm kernel-headers-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-693.67.1.el7.x86_64.rpm perf-3.10.0-693.67.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm python-perf-3.10.0-693.67.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional AUS (v. 7.4): x86_64: kernel-debug-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-693.67.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional E4S (v.7.4): ppc64le: kernel-debug-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debug-devel-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-693.67.1.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm kernel-tools-libs-devel-3.10.0-693.67.1.el7.ppc64le.rpm perf-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm x86_64: kernel-debug-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-693.67.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional TUS (v. 7.4): x86_64: kernel-debug-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-693.67.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2017-18595 https://access.redhat.com/security/cve/CVE-2019-19768 https://access.redhat.com/security/cve/CVE-2020-10711 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBXsPwQNzjgjWX9erEAQjrVA/8D9RdiE7wf6RAWKKV/I0HmKuXrGecJhbW dDSyURIXi3zPtUHqa7aa64geBTi/Sb3WhxNgKfbVOToMSC5yLkHYW4ecZirDHTmr F2SGSmzFq0GSPN6nPVNQJ4CkV3oaFfXGBmeX4jCA8kdnFpW3v2EZgo90ikGQYwIn QohESsrwZIKJsWyenapuymk5E6klLIOmVv+mihHsN1rZQIaItwbUBlfCM6HGjzv4 sfJDXwRMc8+22xdc9KlMkbRyOLqZ5TU9Xm5qENis+612OQ6wEYjyZnlDmnZEfWem U3krM03JzycNZXizYIq8vXYb9j+kZ6BbFV7SV700QZzDvKvIk7V3xwHU/aN0P9Da 2R3Fe7A+yK1wKBQCIgDKILmD+BH4WK4z+RKGTOSzFN7DEdCWAYDS2gyDNH4I+SSJ GTpKbwD89YRYZsFuaLJ+3Fmlay1B0zfri0TJuCxjC95Xr5fC6cQ5z/t2eShnY7JB /Vd1JGCBDQA0I+K/Gon+Bj2NScP5aXuTfwthAaMqj9bcKOhEhswRhsyXOb2rVddd qOBaJrkFnltvQQHl7JdaUWMoefkg3C4/qwCQKPOTUVpjFpLvaxmhmUGW8UCvkY8o HnjmV1VEpLPl67D7I5gnzGzuoZVXd576u1qisRwgs05/Pmm0j+f0JNr81D5DUinC gt3XbK7EqqA=vE0e -----END PGP SIGNATURE----- -- RHSA-announce mailing list
The update for postgresql-9.1 in DSA-3269-1 introduced a regression which can causes PostgreSQL to refuse to restart after an unexpected shutdown or when restoring from a binary backup. Updated packages are now available to address this regression. Please refer to the upstream . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3269-2
Get the latest Linux and open source security news straight to your inbox.