Linux · Oracle Linux · Security advisory · October 1, 2020

ELSA-2020-4059: Security update for 99 packages

ELSA-2020-4059, released October 1, 2020, fixes 2 CVEs across 99 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
2
None rated Critical
Exploited
0
None reported
Highest CVSS
6.5
Base score, 0 to 10
Highest EPSS
0.0540
92nd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 0 Routine 2

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.15-7.module+el8.2.0+5598+5fbb295f
hivex-develol 80:1.3.15-7.module+el8.2.0+5598+5fbb295f
libguestfsol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-bash-completionol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-benchmarkingol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-develol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-gfs2ol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-gobjectol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-gobject-develol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-inspect-iconsol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-javaol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-java-develol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-javadocol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-man-pages-jaol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-man-pages-ukol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-rescueol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-rsyncol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-toolsol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-tools-col 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libguestfs-winsupportol 80:8.0-4.module+el8.2.0+5598+5fbb295f
libguestfs-xfsol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
libiscsiol 80:1.18.0-8.module+el8.2.0+5598+5fbb295f
libiscsi-develol 80:1.18.0-8.module+el8.2.0+5598+5fbb295f
libiscsi-utilsol 80:1.18.0-8.module+el8.2.0+5598+5fbb295f
libvirtol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-adminol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-bash-completionol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-clientol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemonol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-config-networkol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-config-nwfilterol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-interfaceol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-networkol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-nodedevol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-nwfilterol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-qemuol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-secretol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-storageol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-storage-coreol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-storage-diskol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-storage-glusterol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-storage-iscsiol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-storage-logicalol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-storage-mpathol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-storage-rbdol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-driver-storage-scsiol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-daemon-kvmol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-dbusol 80:1.2.0-3.module+el8.2.0+5598+5fbb295f
libvirt-develol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-docsol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-libsol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-lock-sanlockol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
libvirt-nssol 80:4.5.0-42.0.1.module+el8.2.0+5598+5fbb295f
lua-guestfsol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
nbdkitol 80:1.4.2-5.module+el8.2.0+5598+5fbb295f
nbdkit-bash-completionol 80:1.4.2-5.module+el8.2.0+5598+5fbb295f
nbdkit-basic-pluginsol 80:1.4.2-5.module+el8.2.0+5598+5fbb295f
nbdkit-develol 80:1.4.2-5.module+el8.2.0+5598+5fbb295f
nbdkit-example-pluginsol 80:1.4.2-5.module+el8.2.0+5598+5fbb295f
nbdkit-plugin-gzipol 80:1.4.2-5.module+el8.2.0+5598+5fbb295f
nbdkit-plugin-python-commonol 80:1.4.2-5.module+el8.2.0+5598+5fbb295f
nbdkit-plugin-python3ol 80:1.4.2-5.module+el8.2.0+5598+5fbb295f
nbdkit-plugin-vddkol 80:1.4.2-5.module+el8.2.0+5598+5fbb295f
nbdkit-plugin-xzol 80:1.4.2-5.module+el8.2.0+5598+5fbb295f
netcfol 80:0.2.8-12.module+el8.2.0+5598+5fbb295f
netcf-develol 80:0.2.8-12.module+el8.2.0+5598+5fbb295f
netcf-libsol 80:0.2.8-12.module+el8.2.0+5598+5fbb295f
ocaml-hivexol 80:1.3.15-7.module+el8.2.0+5598+5fbb295f
ocaml-hivex-develol 80:1.3.15-7.module+el8.2.0+5598+5fbb295f
ocaml-libguestfsol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
ocaml-libguestfs-develol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
perl-Sys-Guestfsol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
perl-Sys-Virtol 80:4.5.0-5.module+el8.2.0+5598+5fbb295f
perl-hivexol 80:1.3.15-7.module+el8.2.0+5598+5fbb295f
python3-hivexol 80:1.3.15-7.module+el8.2.0+5598+5fbb295f
python3-libguestfsol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
python3-libvirtol 80:4.5.0-2.module+el8.2.0+5598+5fbb295f
qemu-guest-agentol 815:2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4
qemu-imgol 815:2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4
qemu-kvmol 815:2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4
qemu-kvm-block-curlol 815:2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4
qemu-kvm-block-glusterol 815:2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4
qemu-kvm-block-iscsiol 815:2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4
qemu-kvm-block-rbdol 815:2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4
qemu-kvm-block-sshol 815:2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4
qemu-kvm-commonol 815:2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4
qemu-kvm-coreol 815:2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4
qemu-kvm-testsol 815:2.12.0-99.0.1.module+el8.2.0+7798+88bea828.4
ruby-hivexol 80:1.3.15-7.module+el8.2.0+5598+5fbb295f
ruby-libguestfsol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
seabiosol 80:1.11.1-4.module+el8.2.0+5598+5fbb295f
seabios-binol 80:1.11.1-4.module+el8.2.0+5598+5fbb295f
seavgabios-binol 80:1.11.1-4.module+el8.2.0+5598+5fbb295f
sgabiosol 81:0.20170427git-3.module+el8.2.0+5598+5fbb295f
sgabios-binol 81:0.20170427git-3.module+el8.2.0+5598+5fbb295f
superminol 80:5.1.19-9.module+el8.2.0+5598+5fbb295f
supermin-develol 80:5.1.19-9.module+el8.2.0+5598+5fbb295f
virt-dibol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f
virt-v2vol 81:1.38.4-15.0.1.module+el8.2.0+5598+5fbb295f

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2020-14364 libguestfs-gfs2: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms5.0 0.0540 None reported
Routine CVE-2020-10756 podman-catatonit: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se...6.5 0.0051 None reported
Showing 1 to 2 of 2 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.