{
  "cves": [
    "CVE-2017-5715",
    "CVE-2017-2630",
    "CVE-2017-8380",
    "CVE-2017-10806",
    "CVE-2017-11334",
    "CVE-2017-15038",
    "CVE-2017-18030",
    "CVE-2018-20126",
    "CVE-2018-20191",
    "CVE-2018-20216",
    "CVE-2017-15268",
    "CVE-2018-10839",
    "CVE-2018-15746",
    "CVE-2018-20124",
    "CVE-2017-8379",
    "CVE-2018-7550",
    "CVE-2018-7858",
    "CVE-2018-12617",
    "CVE-2018-17963",
    "CVE-2018-19364",
    "CVE-2018-19489",
    "CVE-2018-20125",
    "CVE-2017-17381",
    "CVE-2017-18043",
    "CVE-2017-8309",
    "CVE-2017-9503",
    "CVE-2017-13672",
    "CVE-2017-13673",
    "CVE-2017-15119",
    "CVE-2018-18849",
    "CVE-2018-3639",
    "CVE-2018-11806",
    "CVE-2018-16872",
    "CVE-2017-2633",
    "CVE-2017-5753",
    "CVE-2017-5754",
    "CVE-2017-12809",
    "CVE-2017-15124",
    "CVE-2017-15289",
    "CVE-2017-16845",
    "CVE-2017-7471",
    "CVE-2017-8112",
    "CVE-2017-13711",
    "CVE-2018-17962",
    "CVE-2017-7493",
    "CVE-2017-14167",
    "CVE-2018-5683",
    "CVE-2018-16847",
    "CVE-2018-16867",
    "CVE-2018-17958"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[15:3.1.0-1.el7]\n- vfio-pci: emit FAILOVER_PRIMARY_CHANGED event on guest behalf when unrealized\n- vfio-pci: emit FAILOVER_PRIMARY_CHANGED event on guest behalf when unrealized (Si-Wei Liu)  [Orabug: 29216696]\n- vfio-pci: add FAILOVER_PRIMARY_CHANGED event to shorten downtime during failover (Si-Wei Liu)  [Orabug: 29216701]\n- virtio_net: Add support for 'Data Path Switching' during Live Migration. (Venu Busireddy)  [Orabug: 29216704]\n- virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit to virtio_net (Sridhar Samudrala)  [Orabug: 29216714]\n- i386: Add some MSR based features on Cascadelake-Server CPU model (Tao Xu)  [Orabug: 29216681]\n- i386: Update stepping of Cascadelake-Server (Tao Xu)  [Orabug: 29216681]\n- usb-mtp: use O_NOFOLLOW and O_CLOEXEC. (Gerd Hoffmann)  [Orabug: 29216656]  {CVE-2018-16872}\n- pvrdma: add uar_read routine (Prasad J Pandit)  [Orabug: 29216658]  {CVE-2018-20191}\n- pvrdma: release ring object in case of an error (Prasad J Pandit)  [Orabug: 29216659]  {CVE-2018-20126}\n- pvrdma: check number of pages when creating rings (Prasad J Pandit)  [Orabug: 29216666]  {CVE-2018-20125}\n- pvrdma: check return value from pvrdma_idx_ring_has_ routines (Prasad J Pandit)  [Orabug: 29216672]  {CVE-2018-20216}\n- rdma: remove unused VENDOR_ERR_NO_SGE macro (Prasad J Pandit)  [Orabug: 29216678]  {CVE-2018-20124}\n- rdma: check num_sge does not exceed MAX_SGE (Prasad J Pandit)  [Orabug: 29216678]  {CVE-2018-20124}\n- i386: Add 'stibp' flag name (Eduardo Habkost) \n- parfait: Run static analysis when --with parfait specified (Liam Merwick)  [Orabug: 29216688]\n- parfait: add buildrpm/parfait-qemu.conf (Liam Merwick)  [Orabug: 29216688]\n- Document various CVEs as fixed (Mark Kanda)  [Orabug: 29212424]  {CVE-2017-10806} {CVE-2017-11334} {CVE-2017-12809} {CVE-2017-13672} {CVE-2017-13673} {CVE-2017-13711} {CVE-2017-14167} {CVE-2017-15038} {CVE-2017-15119} {CVE-2017-15124} {CVE-2017-15268} {CVE-2017-15289} {CVE-2017-16845} {CVE-2017-17381} {CVE-2017-18030} {CVE-2017-18043} {CVE-2017-2630} {CVE-2017-2633} {CVE-2017-5715} {CVE-2017-5753} {CVE-2017-5754} {CVE-2017-7471} {CVE-2017-7493} {CVE-2017-8112} {CVE-2017-8309} {CVE-2017-8379} {CVE-2017-8380} {CVE-2017-9503} {CVE-2018-10839} {CVE-2018-11806} {CVE-2018-12617} {CVE-2018-15746} {CVE-2018-16847} {CVE-2018-16867} {CVE-2018-17958} {CVE-2018-17962} {CVE-2018-17963} {CVE-2018-18849} {CVE-2018-19364} {CVE-2018-19489} {CVE-2018-3639} {CVE-2018-5683} {CVE-2018-7550} {CVE-2018-7858}\n- qemu.spec: Initial qemu.spec (Mark Kanda) \n- virtio-pci: Set subsystem vendor ID to Oracle (Mark Kanda) \n- qemu_regdump.py: Initial qemu_regdump.py (Mark Kanda) \n- qmp-regdump: Initial qmp-regdump (Mark Kanda) \n- bridge.conf: Initial bridge.conf (Mark Kanda) \n- kvm.conf: Initial kvm.conf (Mark Kanda) \n- 80-kvm.rules: Initial 80-kvm.rules (Mark Kanda)",
  "id": "ELSA-2019-4585",
  "ovalId": "oval:com.oracle.elsa:def:20194585",
  "source": "oracle_linux",
  "title": "ELSA-2019-4585:  qemu security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2019-4585.html"
}