Linux · Security advisory · October 7, 2023
ELSA-2023-12855: Security update for 120 packages
ELSA-2023-12855, released October 7, 2023, fixes 7 CVEs across 120 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0189
79th percentile
Priority of the 7 CVEs
Patch now 0
Urgent 0
High 2
Routine 5
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| hivex | ol 8 | 0:1.3.18-23.module+el8.8.0+21147+1292344f |
| hivex-devel | ol 8 | 0:1.3.18-23.module+el8.8.0+21147+1292344f |
| libguestfs | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-appliance | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-bash-completion | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-devel | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-gfs2 | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-gobject | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-gobject-devel | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-inspect-icons | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-java | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-java-devel | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-javadoc | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-man-pages-ja | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-man-pages-uk | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-rescue | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-rsync | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-tools | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-tools-c | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libguestfs-winsupport | ol 8 | 0:8.6-1.module+el8.8.0+21147+1292344f |
| libguestfs-xfs | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| libiscsi | ol 8 | 0:1.18.0-8.module+el8.8.0+21147+1292344f |
| libiscsi-devel | ol 8 | 0:1.18.0-8.module+el8.8.0+21147+1292344f |
| libiscsi-utils | ol 8 | 0:1.18.0-8.module+el8.8.0+21147+1292344f |
| libnbd | ol 8 | 0:1.6.0-5.module+el8.8.0+21147+1292344f |
| libnbd-bash-completion | ol 8 | 0:1.6.0-5.module+el8.8.0+21147+1292344f |
| libnbd-devel | ol 8 | 0:1.6.0-5.module+el8.8.0+21147+1292344f |
| libtpms | ol 8 | 0:0.9.1-1.20211126git1ff6fe1f43.module+el8.8.0+21147+1292344f |
| libtpms-devel | ol 8 | 0:0.9.1-1.20211126git1ff6fe1f43.module+el8.8.0+21147+1292344f |
| libvirt | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-client | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-client-qemu | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-config-network | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-config-nwfilter | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-interface | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-network | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-nodedev | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-nwfilter | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-qemu | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-secret | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-storage | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-storage-core | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-storage-disk | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-storage-gluster | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-storage-iscsi | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-storage-iscsi-direct | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-storage-logical | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-storage-mpath | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-storage-rbd | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-driver-storage-scsi | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-daemon-kvm | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-dbus | ol 8 | 0:1.3.0-2.module+el8.8.0+21147+1292344f |
| libvirt-devel | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-docs | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-libs | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-lock-sanlock | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-nss | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| libvirt-wireshark | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| lua-guestfs | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| nbdfuse | ol 8 | 0:1.6.0-5.module+el8.8.0+21147+1292344f |
| nbdkit | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-bash-completion | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-basic-filters | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-basic-plugins | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-curl-plugin | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-devel | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-example-plugins | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-gzip-filter | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-gzip-plugin | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-linuxdisk-plugin | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-nbd-plugin | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-python-plugin | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-server | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-ssh-plugin | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-tar-filter | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-tar-plugin | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-tmpdisk-plugin | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-vddk-plugin | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| nbdkit-xz-filter | ol 8 | 0:1.24.0-4.module+el8.8.0+21147+1292344f |
| netcf | ol 8 | 0:0.2.8-12.module+el8.8.0+21147+1292344f |
| netcf-devel | ol 8 | 0:0.2.8-12.module+el8.8.0+21147+1292344f |
| netcf-libs | ol 8 | 0:0.2.8-12.module+el8.8.0+21147+1292344f |
| perl-Sys-Guestfs | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| perl-Sys-Virt | ol 8 | 0:8.0.0-1.module+el8.8.0+21147+1292344f |
| perl-hivex | ol 8 | 0:1.3.18-23.module+el8.8.0+21147+1292344f |
| python3-hivex | ol 8 | 0:1.3.18-23.module+el8.8.0+21147+1292344f |
| python3-libguestfs | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| python3-libnbd | ol 8 | 0:1.6.0-5.module+el8.8.0+21147+1292344f |
| python3-libvirt | ol 8 | 0:9.0.0-3.module+el8.8.0+21147+1292344f |
| qemu-guest-agent | ol 8 | 15:7.2.0-5.module+el8.8.0+21147+1292344f |
| qemu-img | ol 8 | 15:7.2.0-5.module+el8.8.0+21147+1292344f |
| qemu-kvm | ol 8 | 15:7.2.0-5.module+el8.8.0+21147+1292344f |
| qemu-kvm-block-curl | ol 8 | 15:7.2.0-5.module+el8.8.0+21147+1292344f |
| qemu-kvm-block-gluster | ol 8 | 15:7.2.0-5.module+el8.8.0+21147+1292344f |
| qemu-kvm-block-iscsi | ol 8 | 15:7.2.0-5.module+el8.8.0+21147+1292344f |
| qemu-kvm-block-rbd | ol 8 | 15:7.2.0-5.module+el8.8.0+21147+1292344f |
| qemu-kvm-block-ssh | ol 8 | 15:7.2.0-5.module+el8.8.0+21147+1292344f |
| qemu-kvm-common | ol 8 | 15:7.2.0-5.module+el8.8.0+21147+1292344f |
| qemu-kvm-core | ol 8 | 15:7.2.0-5.module+el8.8.0+21147+1292344f |
| qemu-virtiofsd | ol 8 | 15:7.2.0-5.module+el8.8.0+21147+1292344f |
| ruby-hivex | ol 8 | 0:1.3.18-23.module+el8.8.0+21147+1292344f |
| ruby-libguestfs | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| seabios | ol 8 | 0:1.16.0-3.module+el8.8.0+21147+1292344f |
| seabios-bin | ol 8 | 0:1.16.0-3.module+el8.8.0+21147+1292344f |
| seavgabios-bin | ol 8 | 0:1.16.0-3.module+el8.8.0+21147+1292344f |
| sgabios | ol 8 | 1:0.20170427git-3.module+el8.8.0+21147+1292344f |
| sgabios-bin | ol 8 | 1:0.20170427git-3.module+el8.8.0+21147+1292344f |
| supermin | ol 8 | 0:5.2.1-2.module+el8.8.0+21147+1292344f |
| supermin-devel | ol 8 | 0:5.2.1-2.module+el8.8.0+21147+1292344f |
| swtpm | ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.8.0+21147+1292344f |
| swtpm-devel | ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.8.0+21147+1292344f |
| swtpm-libs | ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.8.0+21147+1292344f |
| swtpm-tools | ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.8.0+21147+1292344f |
| swtpm-tools-pkcs11 | ol 8 | 0:0.7.0-4.20211109gitb79fd91.module+el8.8.0+21147+1292344f |
| virt-dib | ol 8 | 1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f |
| virt-v2v | ol 8 | 1:1.42.0-21.module+el8.8.0+21147+1292344f |
| virt-v2v-bash-completion | ol 8 | 1:1.42.0-21.module+el8.8.0+21147+1292344f |
| virt-v2v-man-pages-ja | ol 8 | 1:1.42.0-21.module+el8.8.0+21147+1292344f |
| virt-v2v-man-pages-uk | ol 8 | 1:1.42.0-21.module+el8.8.0+21147+1292344f |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2023-3354 | qemu: A flaw was found in the QEMU built-in VNC server | 7.5 | 0.0161 | None reported | |
| High | CVE-2023-3301 | qemu: A flaw was found in QEMU | 7.5 | 0.0026 | None reported | |
| Routine | CVE-2023-3255 | qemu: A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages | 6.5 | 0.0189 | None reported | |
| Routine | CVE-2023-3750 | libvirt: A flaw was found in libvirt | 6.5 | 0.0076 | None reported | |
| Routine | CVE-2023-2700 | libvirt: A vulnerability was found in libvirt | 6.3 | 0.0025 | None reported | |
| Routine | CVE-2023-0330 | qemu: A vulnerability in the lsi53c895a device affects the latest version of qemu | 6.0 | 0.0025 | None reported | |
| Routine | CVE-2023-3180 | qemu: A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypt... | 6.5 | 0.0023 | None reported |
Showing 1 to 7 of 7
1