Linux · Security advisory · November 7, 2023
ALSA-2023:6368: Security update for 20 packages
ALSA-2023:6368, released November 7, 2023, fixes 2 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0051
43rd percentile
Priority of the 2 CVEs
Patch now 0
Urgent 0
High 2
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| qemu-guest-agent | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-img | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-audio-pa | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-block-blkio | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-block-curl | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-block-rbd | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-common | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-core | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-device-display-virtio-gpu | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-device-display-virtio-gpu-ccw | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-device-display-virtio-gpu-pci | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-device-display-virtio-vga | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-device-usb-host | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-device-usb-redirect | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-docs | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-tools | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-ui-egl-headless | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-kvm-ui-opengl | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
| qemu-pr-helper | almalinux 9 | 17:8.0.0-16.el9_3.alma.1 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-3750 | hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 8.2 | 0.0051 | None reported | |
| High | CVE-2023-2680 | qemu-guest-agent: Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures | 7.5 | 0.0024 | None reported |
Showing 1 to 2 of 2
1