Linux · Security advisory · November 4, 2020

RHSA-2020:4676: Security update for 111 packages

RHSA-2020:4676, released November 4, 2020, fixes 6 CVEs across 111 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0399
90th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 2 Routine 4

Fixed package versions

ProductReleaseFixed in
SLOFRHEL 80:20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418
hivexRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
hivex-develRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
libguestfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-bash-completionRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-benchmarkingRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-develRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-gfs2RHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-gobjectRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-gobject-develRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-inspect-iconsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-javaRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-java-develRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-javadocRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-man-pages-jaRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-man-pages-ukRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-rescueRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-rsyncRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-toolsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-tools-cRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-winsupportRHEL 80:8.2-1.module+el8.3.0+6423+e4cb6418
libguestfs-xfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libiscsiRHEL 80:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-develRHEL 80:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-utilsRHEL 80:1.18.0-8.module+el8.1.0+4066+0f1aadab
libnbdRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
libnbd-develRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
libvirtRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-adminRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-bash-completionRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-clientRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemonRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-config-networkRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-config-nwfilterRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-interfaceRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-networkRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-nodedevRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-nwfilterRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-qemuRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-secretRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storageRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-coreRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-diskRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-glusterRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-iscsiRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-iscsi-directRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-logicalRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-mpathRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-rbdRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-scsiRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-kvmRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-dbusRHEL 80:1.3.0-2.module+el8.3.0+6423+e4cb6418
libvirt-develRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-docsRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-libsRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-lock-sanlockRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-nssRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
lua-guestfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
nbdfuseRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
nbdkitRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-bash-completionRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-basic-filtersRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-basic-pluginsRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-curl-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-develRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-example-pluginsRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-gzip-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-linuxdisk-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-python-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-serverRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-ssh-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-vddk-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-xz-filterRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
netcfRHEL 80:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-develRHEL 80:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-libsRHEL 80:0.2.8-12.module+el8.1.0+4066+0f1aadab
ocaml-hivexRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
ocaml-hivex-develRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
ocaml-libguestfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
ocaml-libguestfs-develRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
ocaml-libnbdRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
ocaml-libnbd-develRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
perl-Sys-GuestfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
perl-Sys-VirtRHEL 80:6.0.0-1.module+el8.3.0+6423+e4cb6418
perl-hivexRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
python3-hivexRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
python3-libguestfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
python3-libnbdRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
python3-libvirtRHEL 80:6.0.0-1.module+el8.3.0+6423+e4cb6418
qemu-guest-agentRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-imgRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvmRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-block-curlRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-block-glusterRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-block-iscsiRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-block-rbdRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-block-sshRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-commonRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-coreRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-testsRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
ruby-hivexRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
ruby-libguestfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
seabiosRHEL 80:1.13.0-2.module+el8.3.0+7353+9de0a3cc
seabios-binRHEL 80:1.13.0-2.module+el8.3.0+7353+9de0a3cc
seavgabios-binRHEL 80:1.13.0-2.module+el8.3.0+7353+9de0a3cc
sgabiosRHEL 81:0.20170427git-3.module+el8.1.0+4066+0f1aadab
sgabios-binRHEL 81:0.20170427git-3.module+el8.1.0+4066+0f1aadab
superminRHEL 80:5.1.19-10.module+el8.3.0+6423+e4cb6418
supermin-develRHEL 80:5.1.19-10.module+el8.3.0+6423+e4cb6418
virt-dibRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
virt-v2vRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-15890 qemu-guest-agent: libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass inip_input.c. 7.5 0.0399 None reported
High CVE-2020-14339 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 8.8 0.0042 None reported
Routine CVE-2020-10703 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.5 0.0238 None reported
Routine CVE-2020-1983 libslirp0: A use after free vulnerability in ip_reass() in ip_input.c of libslirp4.2.0 and prior releases allows crafted packets... 6.5 0.0236 None reported
Routine CVE-2020-14301 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.5 0.0116 None reported
Routine CVE-2019-20485 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 5.8 0.0081 None reported
Showing 1 to 6 of 6 1