ALSA-2021:1762

See a problem?
Please try reporting it to the source first.

Source

https://errata.almalinux.org/8/ALSA-2021-1762.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:1762.json

JSON Data

https://api.osv.dev/v1/vulns/ALSA-2021:1762

Related

Published

2021-05-18T06:02:26Z

Modified

2021-12-23T15:15:25Z

Summary

Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Details

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c (CVE-2020-25637)
QEMU: heap buffer overflow in msixtablemmio_write() in hw/pci/msix.c (CVE-2020-27821)
QEMU: ide: atapi: OOB access while processing read commands (CVE-2020-29443)
QEMU: heap buffer overflow in iscsiaioioctl_cb() in block/iscsi.c may lead to information disclosure (CVE-2020-11947)
QEMU: reachable assertion failure in nettxpktaddrawfragment() in hw/net/nettx_pkt.c (CVE-2020-16092)
QEMU: infinite loop in e1000ewritepackettoguest() in hw/net/e1000e_core.c (CVE-2020-25707)
QEMU: assertion failure through usbpacketunmap() in hw/usb/hcd-ehci.c (CVE-2020-25723)
QEMU: e1000e: infinite loop scenario in case of null packet descriptor (CVE-2020-28916)
QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets (CVE-2020-29129, CVE-2020-29130)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:8 / hivex

Package

Name: hivex

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.18-20.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / hivex-devel

Package

Name: hivex-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.18-20.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / libguestfs-winsupport

Package

Name: libguestfs-winsupport

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.2-1.module_el8.5.0+2608+72063365

AlmaLinux:8 / libguestfs-winsupport

Package

Name: libguestfs-winsupport

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.2-1.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / libiscsi

Package

Name: libiscsi

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.0-8.module_el8.6.0+2880+7d9e3703

AlmaLinux:8 / libiscsi

Package

Name: libiscsi

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.0-8.module_el8.5.0+2608+72063365

AlmaLinux:8 / libiscsi

Package

Name: libiscsi

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.0-8.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / libiscsi-devel

Package

Name: libiscsi-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.0-8.module_el8.6.0+2880+7d9e3703

AlmaLinux:8 / libiscsi-devel

Package

Name: libiscsi-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.0-8.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / libiscsi-devel

Package

Name: libiscsi-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.0-8.module_el8.5.0+2608+72063365

AlmaLinux:8 / libiscsi-utils

Package

Name: libiscsi-utils

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.0-8.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / libiscsi-utils

Package

Name: libiscsi-utils

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.0-8.module_el8.6.0+2880+7d9e3703

AlmaLinux:8 / libiscsi-utils

Package

Name: libiscsi-utils

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.18.0-8.module_el8.5.0+2608+72063365

AlmaLinux:8 / libnbd

Package

Name: libnbd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-1.module_el8.5.0+2608+72063365

AlmaLinux:8 / libnbd

Package

Name: libnbd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-1.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / libnbd-devel

Package

Name: libnbd-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-1.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / libnbd-devel

Package

Name: libnbd-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-1.module_el8.5.0+2608+72063365

AlmaLinux:8 / libvirt-dbus

Package

Name: libvirt-dbus

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-2.module_el8.6.0+2880+7d9e3703

AlmaLinux:8 / libvirt-dbus

Package

Name: libvirt-dbus

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-2.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / libvirt-dbus

Package

Name: libvirt-dbus

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-2.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdfuse

Package

Name: nbdfuse

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-1.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / nbdfuse

Package

Name: nbdfuse

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-1.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit

Package

Name: nbdkit

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-bash-completion

Package

Name: nbdkit-bash-completion

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-basic-filters

Package

Name: nbdkit-basic-filters

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-basic-plugins

Package

Name: nbdkit-basic-plugins

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-curl-plugin

Package

Name: nbdkit-curl-plugin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-devel

Package

Name: nbdkit-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-example-plugins

Package

Name: nbdkit-example-plugins

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-gzip-plugin

Package

Name: nbdkit-gzip-plugin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-linuxdisk-plugin

Package

Name: nbdkit-linuxdisk-plugin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-python-plugin

Package

Name: nbdkit-python-plugin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-server

Package

Name: nbdkit-server

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-ssh-plugin

Package

Name: nbdkit-ssh-plugin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-vddk-plugin

Package

Name: nbdkit-vddk-plugin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / nbdkit-xz-filter

Package

Name: nbdkit-xz-filter

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.16.2-4.module_el8.5.0+2608+72063365

AlmaLinux:8 / netcf

Package

Name: netcf

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.8-12.module_el8.5.0+2608+72063365

AlmaLinux:8 / netcf

Package

Name: netcf

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.8-12.module_el8.6.0+2880+7d9e3703

AlmaLinux:8 / netcf

Package

Name: netcf

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.8-12.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / netcf-devel

Package

Name: netcf-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.8-12.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / netcf-devel

Package

Name: netcf-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.8-12.module_el8.5.0+2608+72063365

AlmaLinux:8 / netcf-devel

Package

Name: netcf-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.8-12.module_el8.6.0+2880+7d9e3703

AlmaLinux:8 / netcf-libs

Package

Name: netcf-libs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.8-12.module_el8.6.0+2880+7d9e3703

AlmaLinux:8 / netcf-libs

Package

Name: netcf-libs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.8-12.module_el8.5.0+2608+72063365

AlmaLinux:8 / netcf-libs

Package

Name: netcf-libs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2.8-12.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / ocaml-hivex

Package

Name: ocaml-hivex

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.18-20.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / ocaml-hivex-devel

Package

Name: ocaml-hivex-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.18-20.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / ocaml-libguestfs

Package

Name: ocaml-libguestfs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.40.2-27.module_el8.4.0+2358+630e803b.alma

AlmaLinux:8 / ocaml-libguestfs-devel

Package

Name: ocaml-libguestfs-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.40.2-27.module_el8.4.0+2358+630e803b.alma

AlmaLinux:8 / ocaml-libnbd

Package

Name: ocaml-libnbd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-1.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / ocaml-libnbd-devel

Package

Name: ocaml-libnbd-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-1.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / perl-Sys-Virt

Package

Name: perl-Sys-Virt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0.0-1.module_el8.5.0+2608+72063365

AlmaLinux:8 / perl-Sys-Virt

Package

Name: perl-Sys-Virt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0.0-1.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / perl-hivex

Package

Name: perl-hivex

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.18-20.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / python3-hivex

Package

Name: python3-hivex

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.18-20.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / python3-libnbd

Package

Name: python3-libnbd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-1.module_el8.5.0+2608+72063365

AlmaLinux:8 / python3-libnbd

Package

Name: python3-libnbd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.2-1.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / python3-libvirt

Package

Name: python3-libvirt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0.0-1.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / python3-libvirt

Package

Name: python3-libvirt

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0.0-1.module_el8.5.0+2608+72063365

AlmaLinux:8 / ruby-hivex

Package

Name: ruby-hivex

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.18-20.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / seabios

Package

Name: seabios

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.13.0-2.module_el8.5.0+2608+72063365

AlmaLinux:8 / seabios-bin

Package

Name: seabios-bin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.13.0-2.module_el8.5.0+2608+72063365

AlmaLinux:8 / seavgabios-bin

Package

Name: seavgabios-bin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.13.0-2.module_el8.5.0+2608+72063365

AlmaLinux:8 / sgabios

Package

Name: sgabios

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:0.20170427git-3.module_el8.5.0+2608+72063365

AlmaLinux:8 / sgabios

Package

Name: sgabios

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:0.20170427git-3.module_el8.3.0+2048+e7a0a3ea

AlmaLinux:8 / sgabios-bin

Package

Name: sgabios-bin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:0.20170427git-3.module_el8.5.0+2608+72063365

AlmaLinux:8 / sgabios-bin

Package

Name: sgabios-bin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:0.20170427git-3.module_el8.6.0+2880+7d9e3703

AlmaLinux:8 / supermin

Package

Name: supermin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.1.19-10.module_el8.5.0+2608+72063365

AlmaLinux:8 / supermin-devel

Package

Name: supermin-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.1.19-10.module_el8.5.0+2608+72063365