Linux · Security advisory · September 2, 2024
ELSA-2024-12605: Security update for 119 packages
ELSA-2024-12605, released September 2, 2024, fixes 16 CVEs across 119 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
16
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0140
72nd percentile
Priority of the 16 CVEs
Patch now 0
Urgent 0
High 5
Routine 11
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| hivex | ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 |
| hivex-devel | ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 |
| libguestfs | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-appliance | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-bash-completion | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-devel | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-gfs2 | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-gobject | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-gobject-devel | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-inspect-icons | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-java | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-java-devel | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-javadoc | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-man-pages-ja | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-man-pages-uk | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-rescue | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-rsync | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-tools | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-tools-c | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libguestfs-winsupport | ol 8 | 0:8.6-1.module+el8.10.0+90374+95a91213 |
| libguestfs-xfs | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| libiscsi | ol 8 | 0:1.18.0-8.module+el8.10.0+90374+95a91213 |
| libiscsi-devel | ol 8 | 0:1.18.0-8.module+el8.10.0+90374+95a91213 |
| libiscsi-utils | ol 8 | 0:1.18.0-8.module+el8.10.0+90374+95a91213 |
| libnbd | ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 |
| libnbd-bash-completion | ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 |
| libnbd-devel | ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 |
| libtpms | ol 8 | 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.10.0+90374+95a91213 |
| libtpms-devel | ol 8 | 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.10.0+90374+95a91213 |
| libvirt | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-client | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-config-network | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-config-nwfilter | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-interface | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-network | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-nodedev | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-nwfilter | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-qemu | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-secret | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-storage | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-storage-core | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-storage-disk | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-storage-gluster | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-storage-iscsi | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-storage-iscsi-direct | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-storage-logical | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-storage-mpath | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-storage-rbd | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-driver-storage-scsi | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-daemon-kvm | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-dbus | ol 8 | 0:1.3.0-2.module+el8.10.0+90374+95a91213 |
| libvirt-devel | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-docs | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-libs | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-lock-sanlock | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-nss | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| libvirt-wireshark | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| lua-guestfs | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| nbdfuse | ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 |
| nbdkit | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-bash-completion | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-basic-filters | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-basic-plugins | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-curl-plugin | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-devel | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-example-plugins | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-gzip-filter | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-gzip-plugin | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-linuxdisk-plugin | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-nbd-plugin | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-python-plugin | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-server | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-ssh-plugin | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-tar-filter | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-tar-plugin | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-tmpdisk-plugin | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-vddk-plugin | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| nbdkit-xz-filter | ol 8 | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| netcf | ol 8 | 0:0.2.8-12.module+el8.10.0+90374+95a91213 |
| netcf-devel | ol 8 | 0:0.2.8-12.module+el8.10.0+90374+95a91213 |
| netcf-libs | ol 8 | 0:0.2.8-12.module+el8.10.0+90374+95a91213 |
| perl-Sys-Guestfs | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| perl-Sys-Virt | ol 8 | 0:6.0.0-1.module+el8.10.0+90374+95a91213 |
| perl-hivex | ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 |
| python3-hivex | ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 |
| python3-libguestfs | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| python3-libnbd | ol 8 | 0:1.6.0-5.module+el8.10.0+90374+95a91213 |
| python3-libvirt | ol 8 | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| qemu-guest-agent | ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| qemu-img | ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| qemu-kvm | ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| qemu-kvm-block-curl | ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| qemu-kvm-block-gluster | ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| qemu-kvm-block-iscsi | ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| qemu-kvm-block-rbd | ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| qemu-kvm-block-ssh | ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| qemu-kvm-common | ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| qemu-kvm-core | ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| qemu-virtiofsd | ol 8 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| ruby-hivex | ol 8 | 0:1.3.18-23.module+el8.10.0+90374+95a91213 |
| ruby-libguestfs | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| seabios | ol 8 | 0:1.15.0-2.module+el8.10.0+90374+95a91213 |
| seabios-bin | ol 8 | 0:1.15.0-2.module+el8.10.0+90374+95a91213 |
| seavgabios-bin | ol 8 | 0:1.15.0-2.module+el8.10.0+90374+95a91213 |
| sgabios | ol 8 | 1:0.20170427git-3.module+el8.10.0+90374+95a91213 |
| sgabios-bin | ol 8 | 1:0.20170427git-3.module+el8.10.0+90374+95a91213 |
| supermin | ol 8 | 0:5.2.1-1.module+el8.10.0+90374+95a91213 |
| supermin-devel | ol 8 | 0:5.2.1-1.module+el8.10.0+90374+95a91213 |
| swtpm | ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 |
| swtpm-devel | ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 |
| swtpm-libs | ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 |
| swtpm-tools | ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 |
| swtpm-tools-pkcs11 | ol 8 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 |
| virt-dib | ol 8 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| virt-v2v | ol 8 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 |
| virt-v2v-bash-completion | ol 8 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 |
| virt-v2v-man-pages-ja | ol 8 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 |
| virt-v2v-man-pages-uk | ol 8 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2024-24474 | qemu: QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA... | 8.8 | 0.0140 | None reported | |
| High | CVE-2021-3750 | hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 8.2 | 0.0051 | None reported | |
| High | CVE-2023-0664 | virtio-win: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from t... | 7.8 | 0.0031 | None reported | |
| High | CVE-2024-3446 | qemu-block-extra: A double free vulnerability was found in QEMU virtio devices (virtio-gpu,virtio-serial-bus, virtio-crypto), where the... | 8.2 | 0.0031 | None reported | |
| High | CVE-2023-5088 | qemu: A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to off... | 7.0 | 0.0026 | None reported | |
| Routine | CVE-2023-6683 | qemu: A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages | 6.5 | 0.0126 | None reported | |
| Routine | CVE-2024-26327 | qemu-system-modules-spice: An issue was discovered in QEMU 7.1.0 through 8.2.1 | 5.5 | 0.0060 | None reported | |
| Routine | CVE-2024-4418 | libnss-libvirt: A race condition leading to a stack use-after-free flaw was found inlibvirt | 6.2 | 0.0049 | None reported | |
| Routine | CVE-2024-3567 | qemu-block-extra: A flaw was found in QEMU | 5.5 | 0.0045 | None reported | |
| Routine | CVE-2021-3638 | qemu: An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU | 6.5 | 0.0043 | None reported | |
| Routine | CVE-2023-42467 | qemu-system-arm: QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset inhw/scsi/scsi-disk.c because scsi_disk_emulat... | 5.5 | 0.0042 | None reported | |
| Routine | CVE-2023-4135 | qemu: A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU | 6.5 | 0.0037 | None reported | |
| Routine | CVE-2023-40360 | qemu-block-extra: QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive inhw/nvme/ctrl.c because there is no check for w... | 6.0 | 0.0036 | None reported | |
| Routine | CVE-2023-6693 | qemu: A stack based buffer overflow was found in the virtio-net device of QEMU | 5.5 | 0.0033 | None reported | |
| Routine | CVE-2023-3019 | qemu: A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU | 6.5 | 0.0032 | None reported | |
| Routine | CVE-2024-26328 | qemu-system: An issue was discovered in QEMU 7.1.0 through 8.2.1 | 6.0 | 0.0029 | None reported |
Showing 1 to 16 of 16
1