Linux · Security advisory · May 23, 2023

ELSA-2023-2757: Security update for 129 packages

ELSA-2023-2757, released May 23, 2023, fixes 7 CVEs across 129 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
7
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0555
92nd percentile

Priority of the 7 CVEs

Patch now 0 Urgent 1 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-23.module+el8.8.0+20990+60c1530a
hivex-develol 80:1.3.18-23.module+el8.8.0+20990+60c1530a
libguestfsol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-applianceol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-bash-completionol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-develol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-gfs2ol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-gobjectol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-gobject-develol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-inspect-iconsol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-javaol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-java-develol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-javadocol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-man-pages-jaol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-man-pages-ukol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-rescueol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-rsyncol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-toolsol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-tools-col 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libguestfs-winsupportol 80:8.8-1.module+el8.8.0+20990+60c1530a
libguestfs-xfsol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
libiscsiol 80:1.18.0-8.module+el8.8.0+20990+60c1530a
libiscsi-develol 80:1.18.0-8.module+el8.8.0+20990+60c1530a
libiscsi-utilsol 80:1.18.0-8.module+el8.8.0+20990+60c1530a
libnbdol 80:1.6.0-5.module+el8.8.0+20990+60c1530a
libnbd-bash-completionol 80:1.6.0-5.module+el8.8.0+20990+60c1530a
libnbd-develol 80:1.6.0-5.module+el8.8.0+20990+60c1530a
libtpmsol 80:0.9.1-2.20211126git1ff6fe1f43.module+el8.8.0+21044+01700444
libtpms-develol 80:0.9.1-2.20211126git1ff6fe1f43.module+el8.8.0+21044+01700444
libvirtol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-clientol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemonol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-config-networkol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-config-nwfilterol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-interfaceol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-networkol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-nodedevol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-nwfilterol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-qemuol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-secretol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-storageol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-storage-coreol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-storage-diskol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-storage-glusterol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-storage-iscsiol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-storage-iscsi-directol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-storage-logicalol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-storage-mpathol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-storage-rbdol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-driver-storage-scsiol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-daemon-kvmol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-dbusol 80:1.3.0-2.module+el8.8.0+20990+60c1530a
libvirt-develol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-docsol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-libsol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-lock-sanlockol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-nssol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
libvirt-wiresharkol 80:8.0.0-19.0.1.module+el8.8.0+21044+01700444
lua-guestfsol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
nbdfuseol 80:1.6.0-5.module+el8.8.0+20990+60c1530a
nbdkitol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-bash-completionol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-basic-filtersol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-basic-pluginsol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-curl-pluginol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-develol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-example-pluginsol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-gzip-filterol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-gzip-pluginol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-linuxdisk-pluginol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-nbd-pluginol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-python-pluginol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-serverol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-ssh-pluginol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-tar-filterol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-tar-pluginol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-tmpdisk-pluginol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-vddk-pluginol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
nbdkit-xz-filterol 80:1.24.0-5.module+el8.8.0+20990+60c1530a
netcfol 80:0.2.8-12.module+el8.8.0+20990+60c1530a
netcf-develol 80:0.2.8-12.module+el8.8.0+20990+60c1530a
netcf-libsol 80:0.2.8-12.module+el8.8.0+20990+60c1530a
ocaml-hivexol 80:1.3.18-23.module+el8.8.0+20990+60c1530a
ocaml-hivex-develol 80:1.3.18-23.module+el8.8.0+20990+60c1530a
ocaml-libguestfsol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
ocaml-libguestfs-develol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
ocaml-libnbdol 80:1.6.0-5.module+el8.8.0+20990+60c1530a
ocaml-libnbd-develol 80:1.6.0-5.module+el8.8.0+20990+60c1530a
perl-Sys-Guestfsol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
perl-Sys-Virtol 80:8.0.0-1.module+el8.8.0+20990+60c1530a
perl-hivexol 80:1.3.18-23.module+el8.8.0+20990+60c1530a
python3-hivexol 80:1.3.18-23.module+el8.8.0+20990+60c1530a
python3-libguestfsol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
python3-libnbdol 80:1.6.0-5.module+el8.8.0+20990+60c1530a
python3-libvirtol 80:8.0.0-2.module+el8.8.0+20990+60c1530a
qemu-guest-agentol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-imgol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvmol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvm-block-curlol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvm-block-glusterol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvm-block-iscsiol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvm-block-rbdol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvm-block-sshol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvm-commonol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvm-coreol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvm-docsol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvm-hw-usbredirol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvm-testsol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvm-ui-openglol 815:6.2.0-32.module+el8.8.0+21044+01700444
qemu-kvm-ui-spiceol 815:6.2.0-32.module+el8.8.0+21044+01700444
ruby-hivexol 80:1.3.18-23.module+el8.8.0+20990+60c1530a
ruby-libguestfsol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
seabiosol 80:1.16.0-3.module+el8.8.0+20990+60c1530a
seabios-binol 80:1.16.0-3.module+el8.8.0+20990+60c1530a
seavgabios-binol 80:1.16.0-3.module+el8.8.0+20990+60c1530a
sgabiosol 81:0.20170427git-3.module+el8.8.0+20990+60c1530a
sgabios-binol 81:0.20170427git-3.module+el8.8.0+20990+60c1530a
superminol 80:5.2.1-2.module+el8.8.0+20990+60c1530a
supermin-develol 80:5.2.1-2.module+el8.8.0+20990+60c1530a
swtpmol 80:0.7.0-4.20211109gitb79fd91.module+el8.8.0+20990+60c1530a
swtpm-develol 80:0.7.0-4.20211109gitb79fd91.module+el8.8.0+20990+60c1530a
swtpm-libsol 80:0.7.0-4.20211109gitb79fd91.module+el8.8.0+20990+60c1530a
swtpm-toolsol 80:0.7.0-4.20211109gitb79fd91.module+el8.8.0+20990+60c1530a
swtpm-tools-pkcs11ol 80:0.7.0-4.20211109gitb79fd91.module+el8.8.0+20990+60c1530a
virt-dibol 81:1.44.0-9.0.1.module+el8.8.0+20990+60c1530a
virt-v2vol 81:1.42.0-22.module+el8.8.0+21044+01700444
virt-v2v-bash-completionol 81:1.42.0-22.module+el8.8.0+21044+01700444
virt-v2v-man-pages-jaol 81:1.42.0-22.module+el8.8.0+21044+01700444
virt-v2v-man-pages-ukol 81:1.42.0-22.module+el8.8.0+21044+01700444

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2023-1018 CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability 8.8 0.0555 Exploitation Less Likely
High CVE-2022-3165 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 7.8 0.0156 None reported
High CVE-2021-46790 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 7.8 0.0050 None reported
High CVE-2022-30786 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 7.8 0.0045 None reported
High CVE-2022-30788 libntfs-3g883: A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22. 7.8 0.0045 None reported
High CVE-2022-30789 libntfs-3g883: A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22. 7.8 0.0045 None reported
High CVE-2022-30784 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 7.8 0.0041 None reported
Showing 1 to 7 of 7 1