Linux · Security advisory · May 25, 2021

ELSA-2021-1762: Security update for 110 packages

ELSA-2021-1762, released May 25, 2021, fixes 10 CVEs across 110 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
10
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0189
79th percentile

Priority of the 10 CVEs

Patch now 0 Urgent 0 High 0 Routine 10

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
hivex-develol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
libguestfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-bash-completionol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-benchmarkingol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-develol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-gfs2ol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-gobjectol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-gobject-develol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-inspect-iconsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-javaol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-java-develol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-javadocol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-man-pages-jaol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-man-pages-ukol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-rescueol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-rsyncol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-toolsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-tools-col 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-winsupportol 80:8.2-1.module+el8.3.0+7860+a7792d29
libguestfs-xfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libiscsiol 80:1.18.0-8.module+el8.3.0+7860+a7792d29
libiscsi-develol 80:1.18.0-8.module+el8.3.0+7860+a7792d29
libiscsi-utilsol 80:1.18.0-8.module+el8.3.0+7860+a7792d29
libnbdol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
libnbd-develol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
libvirtol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-adminol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-bash-completionol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-clientol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemonol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-config-networkol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-config-nwfilterol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-interfaceol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-networkol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-nodedevol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-nwfilterol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-qemuol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-secretol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storageol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-coreol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-diskol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-glusterol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-iscsiol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-iscsi-directol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-logicalol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-mpathol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-rbdol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-scsiol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-kvmol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-dbusol 80:1.3.0-2.module+el8.3.0+7860+a7792d29
libvirt-develol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-docsol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-libsol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-lock-sanlockol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-nssol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
lua-guestfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
nbdfuseol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
nbdkitol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-bash-completionol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-basic-filtersol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-basic-pluginsol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-curl-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-develol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-example-pluginsol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-gzip-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-linuxdisk-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-python-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-serverol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-ssh-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-vddk-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-xz-filterol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
netcfol 80:0.2.8-12.module+el8.3.0+7860+a7792d29
netcf-develol 80:0.2.8-12.module+el8.3.0+7860+a7792d29
netcf-libsol 80:0.2.8-12.module+el8.3.0+7860+a7792d29
ocaml-hivexol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
ocaml-hivex-develol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
ocaml-libguestfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
ocaml-libguestfs-develol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
ocaml-libnbdol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
ocaml-libnbd-develol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
perl-Sys-Guestfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
perl-Sys-Virtol 80:6.0.0-1.module+el8.3.0+7860+a7792d29
perl-hivexol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
python3-hivexol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
python3-libguestfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
python3-libnbdol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
python3-libvirtol 80:6.0.0-1.module+el8.3.0+7860+a7792d29
qemu-guest-agentol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-imgol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvmol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-block-curlol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-block-glusterol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-block-iscsiol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-block-rbdol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-block-sshol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-commonol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-coreol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-testsol 815:4.2.0-48.module+el8.4.0+20158+f6690737
ruby-hivexol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
ruby-libguestfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
seabiosol 80:1.13.0-2.module+el8.3.0+7860+a7792d29
seabios-binol 80:1.13.0-2.module+el8.3.0+7860+a7792d29
seavgabios-binol 80:1.13.0-2.module+el8.3.0+7860+a7792d29
sgabiosol 81:0.20170427git-3.module+el8.3.0+7860+a7792d29
sgabios-binol 81:0.20170427git-3.module+el8.3.0+7860+a7792d29
superminol 80:5.1.19-10.module+el8.3.0+7860+a7792d29
supermin-develol 80:5.1.19-10.module+el8.3.0+7860+a7792d29
virt-dibol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
virt-v2vol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2020-29130 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 4.3 0.0189 None reported
Routine CVE-2020-29129 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 4.3 0.0146 None reported
Routine CVE-2020-28916 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 5.5 0.0066 None reported
Routine CVE-2020-25637 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.7 0.0053 None reported
Routine CVE-2020-11947 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 3.8 0.0047 None reported
Routine CVE-2020-29443 qemu-system-s390x: ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allowsout-of-bounds read access because a buffer index is not... 3.9 0.0038 None reported
Routine CVE-2020-16092 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 3.8 0.0038 None reported
Routine CVE-2020-25723 qemu-block-extra: A reachable assertion issue was found in the USB EHCI emulation code ofQEMU 3.2 0.0037 None reported
Routine CVE-2020-27821 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.0 0.0036 None reported
Routine CVE-2020-25707 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 2.5 n/a None reported
Showing 1 to 10 of 10 1