Linux · Security advisory · November 16, 2021

ELSA-2021-4191: Security update for 110 packages

ELSA-2021-4191, released November 16, 2021, fixes 7 CVEs across 110 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0137
71st percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 0 Routine 7

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
hivex-develol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-bash-completionol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-benchmarkingol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-develol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-gfs2ol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-gobjectol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-gobject-develol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-inspect-iconsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-javaol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-java-develol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-javadocol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-man-pages-jaol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-man-pages-ukol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-rescueol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-rsyncol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-toolsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-tools-col 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-winsupportol 80:8.2-1.module+el8.3.0+7860+a7792d29
libguestfs-xfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libiscsiol 80:1.18.0-8.module+el8.3.0+7860+a7792d29
libiscsi-develol 80:1.18.0-8.module+el8.3.0+7860+a7792d29
libiscsi-utilsol 80:1.18.0-8.module+el8.3.0+7860+a7792d29
libnbdol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
libnbd-develol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
libvirtol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-adminol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-bash-completionol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-clientol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemonol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-config-networkol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-config-nwfilterol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-interfaceol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-networkol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-nodedevol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-nwfilterol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-qemuol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-secretol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storageol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-coreol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-diskol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-glusterol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-iscsiol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-iscsi-directol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-logicalol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-mpathol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-rbdol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-scsiol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-kvmol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-dbusol 80:1.3.0-2.module+el8.3.0+7860+a7792d29
libvirt-develol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-docsol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-libsol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-lock-sanlockol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-nssol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
lua-guestfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
nbdfuseol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
nbdkitol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-bash-completionol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-basic-filtersol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-basic-pluginsol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-curl-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-develol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-example-pluginsol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-gzip-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-linuxdisk-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-python-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-serverol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-ssh-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-vddk-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-xz-filterol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
netcfol 80:0.2.8-12.module+el8.3.0+7860+a7792d29
netcf-develol 80:0.2.8-12.module+el8.3.0+7860+a7792d29
netcf-libsol 80:0.2.8-12.module+el8.3.0+7860+a7792d29
ocaml-hivexol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
ocaml-hivex-develol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
ocaml-libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
ocaml-libguestfs-develol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
ocaml-libnbdol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
ocaml-libnbd-develol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
perl-Sys-Guestfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
perl-Sys-Virtol 80:6.0.0-1.module+el8.3.0+7860+a7792d29
perl-hivexol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
python3-hivexol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
python3-libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
python3-libnbdol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
python3-libvirtol 80:6.0.0-1.module+el8.3.0+7860+a7792d29
qemu-guest-agentol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-imgol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvmol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-block-curlol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-block-glusterol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-block-iscsiol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-block-rbdol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-block-sshol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-commonol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-coreol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-testsol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
ruby-hivexol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
ruby-libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
seabiosol 80:1.13.0-2.module+el8.3.0+7860+a7792d29
seabios-binol 80:1.13.0-2.module+el8.3.0+7860+a7792d29
seavgabios-binol 80:1.13.0-2.module+el8.3.0+7860+a7792d29
sgabiosol 81:0.20170427git-3.module+el8.3.0+7860+a7792d29
sgabios-binol 81:0.20170427git-3.module+el8.3.0+7860+a7792d29
superminol 80:5.1.19-10.module+el8.3.0+7860+a7792d29
supermin-develol 80:5.1.19-10.module+el8.3.0+7860+a7792d29
virt-dibol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
virt-v2vol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2021-3667 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.5 0.0137 None reported
Routine CVE-2021-3631 libnss-libvirt: A flaw was found in libvirt while it generates SELinux MCS category pairsfor VMs' dynamic labels 6.5 0.0049 None reported
Routine CVE-2020-15859 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.5 0.0044 None reported
Routine CVE-2021-3592 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU 6.5 0.0033 None reported
Routine CVE-2021-3593 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU 6.5 0.0033 None reported
Routine CVE-2021-3594 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU 6.5 0.0033 None reported
Routine CVE-2021-3595 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU 6.5 0.0033 None reported
Showing 1 to 7 of 7 1