Linux · AlmaLinux · Security advisory · November 9, 2021

ALSA-2021:4191: Security update for 93 packages

ALSA-2021:4191, released November 9, 2021, fixes 7 CVEs across 93 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
7
None rated Critical
Exploited
0
None reported
Highest CVSS
6.5
Base score, 0 to 10
Highest EPSS
0.0137
72nd percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 0 Routine 7

Fixed package versions

ProductReleaseFixed in
hivexalmalinux 81.3.18-21.module_el8.5.0+2608+72063365
hivex-develalmalinux 81.3.18-21.module_el8.5.0+2608+72063365
libguestfsalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-bash-completionalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-benchmarkingalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-develalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-gfs2almalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-gobjectalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-gobject-develalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-inspect-iconsalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-javaalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-java-develalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-javadocalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-man-pages-jaalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-man-pages-ukalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-rescuealmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-rsyncalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-toolsalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-tools-calmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libguestfs-winsupportalmalinux 88.2-1.module_el8.5.0+2608+72063365
libguestfs-xfsalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
libiscsialmalinux 81.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-develalmalinux 81.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-utilsalmalinux 81.18.0-8.module_el8.6.0+2880+7d9e3703
libnbdalmalinux 81.2.2-1.module_el8.5.0+2608+72063365
libnbd-develalmalinux 81.2.2-1.module_el8.5.0+2608+72063365
libvirtalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-adminalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-bash-completionalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-clientalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemonalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-config-networkalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-config-nwfilteralmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-interfacealmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-networkalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-nodedevalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-nwfilteralmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-qemualmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-secretalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-storagealmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-storage-corealmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-storage-diskalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-storage-glusteralmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-storage-iscsialmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-storage-iscsi-directalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-storage-logicalalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-storage-mpathalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-storage-rbdalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-driver-storage-scsialmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-daemon-kvmalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-dbusalmalinux 81.3.0-2.module_el8.6.0+2880+7d9e3703
libvirt-develalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-docsalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-libsalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-lock-sanlockalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
libvirt-nssalmalinux 86.0.0-37.module_el8.5.0+2608+72063365
lua-guestfsalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
nbdfusealmalinux 81.2.2-1.module_el8.5.0+2608+72063365
nbdkitalmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-bash-completionalmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-basic-filtersalmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-basic-pluginsalmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-curl-pluginalmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-develalmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-example-pluginsalmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-gzip-pluginalmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-linuxdisk-pluginalmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-python-pluginalmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-serveralmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-ssh-pluginalmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-vddk-pluginalmalinux 81.16.2-4.module_el8.5.0+2608+72063365
nbdkit-xz-filteralmalinux 81.16.2-4.module_el8.5.0+2608+72063365
netcfalmalinux 80.2.8-12.module_el8.5.0+2608+72063365
netcf-develalmalinux 80.2.8-12.module_el8.6.0+2880+7d9e3703
netcf-libsalmalinux 80.2.8-12.module_el8.6.0+2880+7d9e3703
perl-Sys-Guestfsalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
perl-Sys-Virtalmalinux 86.0.0-1.module_el8.5.0+2608+72063365
perl-hivexalmalinux 81.3.18-21.module_el8.5.0+2608+72063365
python3-hivexalmalinux 81.3.18-21.module_el8.5.0+2608+72063365
python3-libguestfsalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
python3-libnbdalmalinux 81.2.2-1.module_el8.5.0+2608+72063365
python3-libvirtalmalinux 86.0.0-1.module_el8.5.0+2608+72063365
ruby-hivexalmalinux 81.3.18-21.module_el8.5.0+2608+72063365
ruby-libguestfsalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
seabiosalmalinux 81.13.0-2.module_el8.5.0+2608+72063365
seabios-binalmalinux 81.13.0-2.module_el8.5.0+2608+72063365
seavgabios-binalmalinux 81.13.0-2.module_el8.5.0+2608+72063365
sgabiosalmalinux 81:0.20170427git-3.module_el8.5.0+2608+72063365
sgabios-binalmalinux 81:0.20170427git-3.module_el8.5.0+2608+72063365
superminalmalinux 85.1.19-10.module_el8.5.0+2608+72063365
supermin-develalmalinux 85.1.19-10.module_el8.5.0+2608+72063365
virt-dibalmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma
virt-v2valmalinux 81:1.40.2-28.module_el8.5.0+2608+72063365.alma

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2021-3667 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.5 0.0137 None reported
Routine CVE-2021-3631 libnss-libvirt: A flaw was found in libvirt while it generates SELinux MCS category pairsfor VMs' dynamic labels6.5 0.0049 None reported
Routine CVE-2020-15859 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.5 0.0044 None reported
Routine CVE-2021-3592 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU6.5 0.0033 None reported
Routine CVE-2021-3593 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU6.5 0.0033 None reported
Routine CVE-2021-3594 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU6.5 0.0033 None reported
Routine CVE-2021-3595 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU6.5 0.0033 None reported
Showing 1 to 7 of 7 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.