Linux · Security advisory · February 25, 2022

ELSA-2022-9172: Security update for 103 packages

ELSA-2022-9172, released February 25, 2022, fixes 14 CVEs across 103 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
14
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0288
86th percentile

Priority of the 14 CVEs

Patch now 0 Urgent 0 High 4 Routine 10

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-21.module+el8.5.0+20482+a450964e
hivex-develol 80:1.3.18-21.module+el8.5.0+20482+a450964e
libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-bash-completionol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-benchmarkingol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-develol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-gfs2ol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-gobjectol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-gobject-develol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-inspect-iconsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-javaol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-java-develol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-javadocol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-man-pages-jaol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-man-pages-ukol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-rescueol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-rsyncol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-toolsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-tools-col 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-winsupportol 80:8.2-1.module+el8.5.0+20482+a450964e
libguestfs-xfsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libiscsiol 80:1.18.0-8.module+el8.5.0+20482+a450964e
libiscsi-develol 80:1.18.0-8.module+el8.5.0+20482+a450964e
libiscsi-utilsol 80:1.18.0-8.module+el8.5.0+20482+a450964e
libnbdol 80:1.2.2-1.module+el8.5.0+20482+a450964e
libnbd-develol 80:1.2.2-1.module+el8.5.0+20482+a450964e
libvirtol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-adminol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-bash-completionol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-clientol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemonol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-config-networkol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-config-nwfilterol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-interfaceol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-networkol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-nodedevol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-nwfilterol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-qemuol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-secretol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storageol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-coreol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-diskol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-glusterol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-iscsiol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-iscsi-directol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-logicalol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-mpathol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-rbdol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-scsiol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-kvmol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-dbusol 80:1.3.0-2.module+el8.5.0+20482+a450964e
libvirt-develol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-docsol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-libsol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-lock-sanlockol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-nssol 80:5.7.0-32.module+el8.5.0+20482+a450964e
lua-guestfsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
nbdfuseol 80:1.2.2-1.module+el8.5.0+20482+a450964e
nbdkitol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-bash-completionol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-basic-filtersol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-basic-pluginsol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-curl-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-develol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-example-pluginsol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-gzip-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-linuxdisk-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-python-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-serverol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-ssh-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-vddk-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-xz-filterol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
netcfol 80:0.2.8-12.module+el8.5.0+20482+a450964e
netcf-develol 80:0.2.8-12.module+el8.5.0+20482+a450964e
netcf-libsol 80:0.2.8-12.module+el8.5.0+20482+a450964e
perl-Sys-Guestfsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
perl-Sys-Virtol 80:4.5.0-5.module+el8.5.0+20482+a450964e
perl-hivexol 80:1.3.18-21.module+el8.5.0+20482+a450964e
python3-hivexol 80:1.3.18-21.module+el8.5.0+20482+a450964e
python3-libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
python3-libnbdol 80:1.2.2-1.module+el8.5.0+20482+a450964e
python3-libvirtol 80:5.7.0-32.module+el8.5.0+20482+a450964e
qemu-guest-agentol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-imgol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvmol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-block-curlol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-block-glusterol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-block-iscsiol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-block-rbdol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-block-sshol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-commonol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-coreol 815:4.2.1-15.module+el8.5.0+20482+a450964e
ruby-hivexol 80:1.3.18-21.module+el8.5.0+20482+a450964e
ruby-libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
seabiosol 80:1.13.0-2.module+el8.5.0+20482+a450964e
seabios-binol 80:1.13.0-2.module+el8.5.0+20482+a450964e
seavgabios-binol 80:1.13.0-2.module+el8.5.0+20482+a450964e
sgabiosol 81:0.20170427git-3.module+el8.5.0+20482+a450964e
sgabios-binol 81:0.20170427git-3.module+el8.5.0+20482+a450964e
superminol 80:5.1.19-10.module+el8.5.0+20482+a450964e
supermin-develol 80:5.1.19-10.module+el8.5.0+20482+a450964e
virt-dibol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
virt-v2vol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-3682 qemu: A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2 8.5 0.0288 None reported
High CVE-2021-3713 qemu: An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.... 7.4 0.0057 None reported
High CVE-2021-20196 qemu-block-extra: A NULL pointer dereference flaw was found in the floppy disk emulator ofQEMU 7.8 0.0048 None reported
High CVE-2021-4158 qemu-kvm-block-rbd: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 7.8 0.0040 None reported
Routine CVE-2020-29130 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 4.3 0.0189 None reported
Routine CVE-2020-29129 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 4.3 0.0146 None reported
Routine CVE-2021-20203 qemu-block-extra: An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMUfor versions up to v5.2.0 3.2 0.0059 None reported
Routine CVE-2021-3416 libguestfs-gfs2: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.0 0.0046 None reported
Routine CVE-2021-3930 qemu-kvm-block-gluster: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.5 0.0034 None reported
Routine CVE-2021-3592 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU 6.5 0.0033 None reported
Routine CVE-2021-3593 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU 6.5 0.0033 None reported
Routine CVE-2021-3594 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU 6.5 0.0033 None reported
Routine CVE-2021-3595 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU 6.5 0.0033 None reported
Routine CVE-2021-3947 qemu: A stack-buffer-overflow was found in QEMU in the NVME component 5.5 0.0032 None reported
Showing 1 to 14 of 14 1