Linux · Security advisory · December 1, 2021
ELSA-2021-9568: Security update for 103 packages
ELSA-2021-9568, released December 1, 2021, fixes 14 CVEs across 103 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
14
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0049
42nd percentile
Priority of the 14 CVEs
Patch now 0
Urgent 0
High 1
Routine 13
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| hivex | ol 8 | 0:1.3.18-20.module+el8.4.0+20319+6eb4347c |
| hivex-devel | ol 8 | 0:1.3.18-20.module+el8.4.0+20319+6eb4347c |
| libguestfs | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-bash-completion | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-benchmarking | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-devel | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-gfs2 | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-gobject | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-gobject-devel | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-inspect-icons | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-java | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-java-devel | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-javadoc | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-man-pages-ja | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-man-pages-uk | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-rescue | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-rsync | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-tools | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-tools-c | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libguestfs-winsupport | ol 8 | 0:8.2-1.module+el8.4.0+20319+6eb4347c |
| libguestfs-xfs | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| libiscsi | ol 8 | 0:1.18.0-8.module+el8.4.0+20319+6eb4347c |
| libiscsi-devel | ol 8 | 0:1.18.0-8.module+el8.4.0+20319+6eb4347c |
| libiscsi-utils | ol 8 | 0:1.18.0-8.module+el8.4.0+20319+6eb4347c |
| libnbd | ol 8 | 0:1.2.2-1.module+el8.4.0+20319+6eb4347c |
| libnbd-devel | ol 8 | 0:1.2.2-1.module+el8.4.0+20319+6eb4347c |
| libvirt | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-admin | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-bash-completion | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-client | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-config-network | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-config-nwfilter | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-interface | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-network | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-nodedev | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-nwfilter | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-qemu | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-secret | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-storage | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-storage-core | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-storage-disk | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-storage-gluster | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-storage-iscsi | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-storage-iscsi-direct | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-storage-logical | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-storage-mpath | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-storage-rbd | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-driver-storage-scsi | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-daemon-kvm | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-dbus | ol 8 | 0:1.3.0-2.module+el8.4.0+20319+6eb4347c |
| libvirt-devel | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-docs | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-libs | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-lock-sanlock | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| libvirt-nss | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| lua-guestfs | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| nbdfuse | ol 8 | 0:1.2.2-1.module+el8.4.0+20319+6eb4347c |
| nbdkit | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-bash-completion | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-basic-filters | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-basic-plugins | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-curl-plugin | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-devel | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-example-plugins | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-gzip-plugin | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-linuxdisk-plugin | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-python-plugin | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-server | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-ssh-plugin | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-vddk-plugin | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| nbdkit-xz-filter | ol 8 | 0:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c |
| netcf | ol 8 | 0:0.2.8-12.module+el8.4.0+20319+6eb4347c |
| netcf-devel | ol 8 | 0:0.2.8-12.module+el8.4.0+20319+6eb4347c |
| netcf-libs | ol 8 | 0:0.2.8-12.module+el8.4.0+20319+6eb4347c |
| perl-Sys-Guestfs | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| perl-Sys-Virt | ol 8 | 0:4.5.0-5.module+el8.4.0+20319+6eb4347c |
| perl-hivex | ol 8 | 0:1.3.18-20.module+el8.4.0+20319+6eb4347c |
| python3-hivex | ol 8 | 0:1.3.18-20.module+el8.4.0+20319+6eb4347c |
| python3-libguestfs | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| python3-libnbd | ol 8 | 0:1.2.2-1.module+el8.4.0+20319+6eb4347c |
| python3-libvirt | ol 8 | 0:5.7.0-31.module+el8.4.0+20319+6eb4347c |
| qemu-guest-agent | ol 8 | 15:4.2.1-11.module+el8.4.0+20319+6eb4347c |
| qemu-img | ol 8 | 15:4.2.1-11.module+el8.4.0+20319+6eb4347c |
| qemu-kvm | ol 8 | 15:4.2.1-11.module+el8.4.0+20319+6eb4347c |
| qemu-kvm-block-curl | ol 8 | 15:4.2.1-11.module+el8.4.0+20319+6eb4347c |
| qemu-kvm-block-gluster | ol 8 | 15:4.2.1-11.module+el8.4.0+20319+6eb4347c |
| qemu-kvm-block-iscsi | ol 8 | 15:4.2.1-11.module+el8.4.0+20319+6eb4347c |
| qemu-kvm-block-rbd | ol 8 | 15:4.2.1-11.module+el8.4.0+20319+6eb4347c |
| qemu-kvm-block-ssh | ol 8 | 15:4.2.1-11.module+el8.4.0+20319+6eb4347c |
| qemu-kvm-common | ol 8 | 15:4.2.1-11.module+el8.4.0+20319+6eb4347c |
| qemu-kvm-core | ol 8 | 15:4.2.1-11.module+el8.4.0+20319+6eb4347c |
| ruby-hivex | ol 8 | 0:1.3.18-20.module+el8.4.0+20319+6eb4347c |
| ruby-libguestfs | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| seabios | ol 8 | 0:1.13.0-2.module+el8.4.0+20319+6eb4347c |
| seabios-bin | ol 8 | 0:1.13.0-2.module+el8.4.0+20319+6eb4347c |
| seavgabios-bin | ol 8 | 0:1.13.0-2.module+el8.4.0+20319+6eb4347c |
| sgabios | ol 8 | 1:0.20170427git-3.module+el8.4.0+20319+6eb4347c |
| sgabios-bin | ol 8 | 1:0.20170427git-3.module+el8.4.0+20319+6eb4347c |
| supermin | ol 8 | 0:5.1.19-10.module+el8.4.0+20319+6eb4347c |
| supermin-devel | ol 8 | 0:5.1.19-10.module+el8.4.0+20319+6eb4347c |
| virt-dib | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
| virt-v2v | ol 8 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-3546 | qemu: An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versio... | 8.2 | 0.0046 | None reported | |
| Routine | CVE-2021-3409 | qemu-block-extra: The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective,thus making QEMU vulnerable to the out-of-bou... | 5.7 | 0.0049 | None reported | |
| Routine | CVE-2021-3392 | qemu-block-extra: A use-after-free flaw was found in the MegaRAID emulator of QEMU | 3.2 | 0.0045 | None reported | |
| Routine | CVE-2021-3544 | qemu-system-misc: Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and in... | 6.5 | 0.0044 | None reported | |
| Routine | CVE-2020-15469 | qemu-block-extra: In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference. | 2.3 | 0.0043 | None reported | |
| Routine | CVE-2021-3545 | qemu: An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in ver... | 6.5 | 0.0042 | None reported | |
| Routine | CVE-2021-3582 | qemu: A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device | 6.5 | 0.0039 | None reported | |
| Routine | CVE-2021-3527 | qemu-block-extra: A flaw was found in the USB redirector device (usb-redir) of QEMU | 5.5 | 0.0037 | None reported | |
| Routine | CVE-2021-20257 | libguestfs-bash-completion: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 6.5 | 0.0037 | None reported | |
| Routine | CVE-2020-27821 | hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 6.0 | 0.0036 | None reported | |
| Routine | CVE-2021-3608 | qemu: A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0 | 6.0 | 0.0036 | None reported | |
| Routine | CVE-2021-20221 | qemu-block-extra: An out-of-bounds heap buffer access issue was found in the ARM GenericInterrupt Controller emulator of QEMU up to and... | 6.0 | 0.0033 | None reported | |
| Routine | CVE-2020-27661 | hivex: hivex [1.3.18] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [1.3.18... | 6.5 | 0.0031 | None reported | |
| Routine | CVE-2021-3607 | qemu: An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0 | 6.0 | 0.0030 | None reported |
Showing 1 to 14 of 14
1