Linux · Oracle Linux · Security advisory · May 25, 2021

ELSA-2021-1762: Security update for 110 packages

ELSA-2021-1762, released May 25, 2021, fixes 10 CVEs across 110 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
10
None rated Critical
Exploited
0
None reported
Highest CVSS
6.7
Base score, 0 to 10
Highest EPSS
0.0189
79th percentile

Priority of the 10 CVEs

Patch now 0 Urgent 0 High 0 Routine 10

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
hivex-develol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
libguestfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-bash-completionol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-benchmarkingol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-develol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-gfs2ol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-gobjectol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-gobject-develol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-inspect-iconsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-javaol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-java-develol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-javadocol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-man-pages-jaol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-man-pages-ukol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-rescueol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-rsyncol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-toolsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-tools-col 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libguestfs-winsupportol 80:8.2-1.module+el8.3.0+7860+a7792d29
libguestfs-xfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
libiscsiol 80:1.18.0-8.module+el8.3.0+7860+a7792d29
libiscsi-develol 80:1.18.0-8.module+el8.3.0+7860+a7792d29
libiscsi-utilsol 80:1.18.0-8.module+el8.3.0+7860+a7792d29
libnbdol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
libnbd-develol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
libvirtol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-adminol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-bash-completionol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-clientol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemonol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-config-networkol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-config-nwfilterol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-interfaceol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-networkol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-nodedevol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-nwfilterol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-qemuol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-secretol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storageol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-coreol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-diskol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-glusterol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-iscsiol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-iscsi-directol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-logicalol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-mpathol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-rbdol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-driver-storage-scsiol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-daemon-kvmol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-dbusol 80:1.3.0-2.module+el8.3.0+7860+a7792d29
libvirt-develol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-docsol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-libsol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-lock-sanlockol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
libvirt-nssol 80:6.0.0-35.0.1.module+el8.4.0+20171+f6690737
lua-guestfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
nbdfuseol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
nbdkitol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-bash-completionol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-basic-filtersol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-basic-pluginsol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-curl-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-develol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-example-pluginsol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-gzip-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-linuxdisk-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-python-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-serverol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-ssh-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-vddk-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-xz-filterol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
netcfol 80:0.2.8-12.module+el8.3.0+7860+a7792d29
netcf-develol 80:0.2.8-12.module+el8.3.0+7860+a7792d29
netcf-libsol 80:0.2.8-12.module+el8.3.0+7860+a7792d29
ocaml-hivexol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
ocaml-hivex-develol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
ocaml-libguestfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
ocaml-libguestfs-develol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
ocaml-libnbdol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
ocaml-libnbd-develol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
perl-Sys-Guestfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
perl-Sys-Virtol 80:6.0.0-1.module+el8.3.0+7860+a7792d29
perl-hivexol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
python3-hivexol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
python3-libguestfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
python3-libnbdol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
python3-libvirtol 80:6.0.0-1.module+el8.3.0+7860+a7792d29
qemu-guest-agentol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-imgol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvmol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-block-curlol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-block-glusterol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-block-iscsiol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-block-rbdol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-block-sshol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-commonol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-coreol 815:4.2.0-48.module+el8.4.0+20158+f6690737
qemu-kvm-testsol 815:4.2.0-48.module+el8.4.0+20158+f6690737
ruby-hivexol 80:1.3.18-20.module+el8.3.0+7860+a7792d29
ruby-libguestfsol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
seabiosol 80:1.13.0-2.module+el8.3.0+7860+a7792d29
seabios-binol 80:1.13.0-2.module+el8.3.0+7860+a7792d29
seavgabios-binol 80:1.13.0-2.module+el8.3.0+7860+a7792d29
sgabiosol 81:0.20170427git-3.module+el8.3.0+7860+a7792d29
sgabios-binol 81:0.20170427git-3.module+el8.3.0+7860+a7792d29
superminol 80:5.1.19-10.module+el8.3.0+7860+a7792d29
supermin-develol 80:5.1.19-10.module+el8.3.0+7860+a7792d29
virt-dibol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712
virt-v2vol 81:1.40.2-27.0.1.module+el8.4.0+20093+03a97712

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2020-29130 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms4.3 0.0189 None reported
Routine CVE-2020-29129 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms4.3 0.0146 None reported
Routine CVE-2020-28916 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms5.5 0.0066 None reported
Routine CVE-2020-25637 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.7 0.0053 None reported
Routine CVE-2020-11947 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms3.8 0.0047 None reported
Routine CVE-2020-29443 qemu-system-s390x: ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allowsout-of-bounds read access because a buffer index is not...3.9 0.0038 None reported
Routine CVE-2020-16092 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms3.8 0.0038 None reported
Routine CVE-2020-25723 qemu-block-extra: A reachable assertion issue was found in the USB EHCI emulation code ofQEMU3.2 0.0037 None reported
Routine CVE-2020-27821 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.0 0.0036 None reported
Routine CVE-2020-25707 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms2.5 n/a None reported
Showing 1 to 10 of 10 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.