Linux · Security advisory · November 9, 2021

RHSA-2021:4191: Security update for 111 packages

RHSA-2021:4191, released November 9, 2021, fixes 7 CVEs across 111 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0137
71st percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 0 Routine 7

Fixed package versions

ProductReleaseFixed in
SLOFRHEL 80:20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418
hivexRHEL 80:1.3.18-21.module+el8.5.0+10709+b3edb581
hivex-develRHEL 80:1.3.18-21.module+el8.5.0+10709+b3edb581
libguestfsRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-bash-completionRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-benchmarkingRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-develRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-gfs2RHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-gobjectRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-gobject-develRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-inspect-iconsRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-javaRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-java-develRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-javadocRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-man-pages-jaRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-man-pages-ukRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-rescueRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-rsyncRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-toolsRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-tools-cRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libguestfs-winsupportRHEL 80:8.2-1.module+el8.3.0+6423+e4cb6418
libguestfs-xfsRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
libiscsiRHEL 80:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-develRHEL 80:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-utilsRHEL 80:1.18.0-8.module+el8.1.0+4066+0f1aadab
libnbdRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
libnbd-develRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
libvirtRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-adminRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-bash-completionRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-clientRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemonRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-config-networkRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-config-nwfilterRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-interfaceRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-networkRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-nodedevRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-nwfilterRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-qemuRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-secretRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-storageRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-storage-coreRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-storage-diskRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-storage-glusterRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-storage-iscsiRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-storage-iscsi-directRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-storage-logicalRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-storage-mpathRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-storage-rbdRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-driver-storage-scsiRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-daemon-kvmRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-dbusRHEL 80:1.3.0-2.module+el8.3.0+6423+e4cb6418
libvirt-develRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-docsRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-libsRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-lock-sanlockRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
libvirt-nssRHEL 80:6.0.0-37.module+el8.5.0+12162+40884dd2
lua-guestfsRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
nbdfuseRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
nbdkitRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-bash-completionRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-basic-filtersRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-basic-pluginsRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-curl-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-develRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-example-pluginsRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-gzip-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-linuxdisk-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-python-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-serverRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-ssh-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-vddk-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-xz-filterRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
netcfRHEL 80:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-develRHEL 80:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-libsRHEL 80:0.2.8-12.module+el8.1.0+4066+0f1aadab
ocaml-hivexRHEL 80:1.3.18-21.module+el8.5.0+10709+b3edb581
ocaml-hivex-develRHEL 80:1.3.18-21.module+el8.5.0+10709+b3edb581
ocaml-libguestfsRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
ocaml-libguestfs-develRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
ocaml-libnbdRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
ocaml-libnbd-develRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
perl-Sys-GuestfsRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
perl-Sys-VirtRHEL 80:6.0.0-1.module+el8.3.0+6423+e4cb6418
perl-hivexRHEL 80:1.3.18-21.module+el8.5.0+10709+b3edb581
python3-hivexRHEL 80:1.3.18-21.module+el8.5.0+10709+b3edb581
python3-libguestfsRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
python3-libnbdRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
python3-libvirtRHEL 80:6.0.0-1.module+el8.3.0+6423+e4cb6418
qemu-guest-agentRHEL 815:4.2.0-59.module+el8.5.0+12817+cb650d43
qemu-imgRHEL 815:4.2.0-59.module+el8.5.0+12817+cb650d43
qemu-kvmRHEL 815:4.2.0-59.module+el8.5.0+12817+cb650d43
qemu-kvm-block-curlRHEL 815:4.2.0-59.module+el8.5.0+12817+cb650d43
qemu-kvm-block-glusterRHEL 815:4.2.0-59.module+el8.5.0+12817+cb650d43
qemu-kvm-block-iscsiRHEL 815:4.2.0-59.module+el8.5.0+12817+cb650d43
qemu-kvm-block-rbdRHEL 815:4.2.0-59.module+el8.5.0+12817+cb650d43
qemu-kvm-block-sshRHEL 815:4.2.0-59.module+el8.5.0+12817+cb650d43
qemu-kvm-commonRHEL 815:4.2.0-59.module+el8.5.0+12817+cb650d43
qemu-kvm-coreRHEL 815:4.2.0-59.module+el8.5.0+12817+cb650d43
qemu-kvm-testsRHEL 815:4.2.0-59.module+el8.5.0+12817+cb650d43
ruby-hivexRHEL 80:1.3.18-21.module+el8.5.0+10709+b3edb581
ruby-libguestfsRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
seabiosRHEL 80:1.13.0-2.module+el8.3.0+7353+9de0a3cc
seabios-binRHEL 80:1.13.0-2.module+el8.3.0+7353+9de0a3cc
seavgabios-binRHEL 80:1.13.0-2.module+el8.3.0+7353+9de0a3cc
sgabiosRHEL 81:0.20170427git-3.module+el8.1.0+4066+0f1aadab
sgabios-binRHEL 81:0.20170427git-3.module+el8.1.0+4066+0f1aadab
superminRHEL 80:5.1.19-10.module+el8.3.0+6423+e4cb6418
supermin-develRHEL 80:5.1.19-10.module+el8.3.0+6423+e4cb6418
virt-dibRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4
virt-v2vRHEL 81:1.40.2-28.module+el8.5.0+10717+67be7ac4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2021-3667 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.5 0.0137 None reported
Routine CVE-2021-3631 libnss-libvirt: A flaw was found in libvirt while it generates SELinux MCS category pairsfor VMs' dynamic labels 6.5 0.0049 None reported
Routine CVE-2020-15859 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.5 0.0044 None reported
Routine CVE-2021-3592 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU 6.5 0.0033 None reported
Routine CVE-2021-3593 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU 6.5 0.0033 None reported
Routine CVE-2021-3594 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU 6.5 0.0033 None reported
Routine CVE-2021-3595 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU 6.5 0.0033 None reported
Showing 1 to 7 of 7 1