Linux · Oracle Linux · Security advisory · November 16, 2021

ELSA-2021-4191: Security update for 110 packages

ELSA-2021-4191, released November 16, 2021, fixes 7 CVEs across 110 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
7
None rated Critical
Exploited
0
None reported
Highest CVSS
6.5
Base score, 0 to 10
Highest EPSS
0.0137
72nd percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 0 Routine 7

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
hivex-develol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-bash-completionol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-benchmarkingol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-develol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-gfs2ol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-gobjectol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-gobject-develol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-inspect-iconsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-javaol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-java-develol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-javadocol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-man-pages-jaol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-man-pages-ukol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-rescueol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-rsyncol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-toolsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-tools-col 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libguestfs-winsupportol 80:8.2-1.module+el8.3.0+7860+a7792d29
libguestfs-xfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
libiscsiol 80:1.18.0-8.module+el8.3.0+7860+a7792d29
libiscsi-develol 80:1.18.0-8.module+el8.3.0+7860+a7792d29
libiscsi-utilsol 80:1.18.0-8.module+el8.3.0+7860+a7792d29
libnbdol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
libnbd-develol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
libvirtol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-adminol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-bash-completionol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-clientol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemonol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-config-networkol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-config-nwfilterol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-interfaceol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-networkol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-nodedevol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-nwfilterol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-qemuol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-secretol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storageol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-coreol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-diskol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-glusterol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-iscsiol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-iscsi-directol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-logicalol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-mpathol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-rbdol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-driver-storage-scsiol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-daemon-kvmol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-dbusol 80:1.3.0-2.module+el8.3.0+7860+a7792d29
libvirt-develol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-docsol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-libsol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-lock-sanlockol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
libvirt-nssol 80:6.0.0-37.0.1.module+el8.5.0+20365+3abb8f5b
lua-guestfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
nbdfuseol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
nbdkitol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-bash-completionol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-basic-filtersol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-basic-pluginsol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-curl-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-develol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-example-pluginsol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-gzip-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-linuxdisk-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-python-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-serverol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-ssh-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-vddk-pluginol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
nbdkit-xz-filterol 80:1.16.2-4.0.1.module+el8.3.0+7860+a7792d29
netcfol 80:0.2.8-12.module+el8.3.0+7860+a7792d29
netcf-develol 80:0.2.8-12.module+el8.3.0+7860+a7792d29
netcf-libsol 80:0.2.8-12.module+el8.3.0+7860+a7792d29
ocaml-hivexol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
ocaml-hivex-develol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
ocaml-libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
ocaml-libguestfs-develol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
ocaml-libnbdol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
ocaml-libnbd-develol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
perl-Sys-Guestfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
perl-Sys-Virtol 80:6.0.0-1.module+el8.3.0+7860+a7792d29
perl-hivexol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
python3-hivexol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
python3-libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
python3-libnbdol 80:1.2.2-1.module+el8.3.0+7860+a7792d29
python3-libvirtol 80:6.0.0-1.module+el8.3.0+7860+a7792d29
qemu-guest-agentol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-imgol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvmol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-block-curlol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-block-glusterol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-block-iscsiol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-block-rbdol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-block-sshol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-commonol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-coreol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
qemu-kvm-testsol 815:4.2.0-59.module+el8.5.0+20410+46b2d321
ruby-hivexol 80:1.3.18-21.module+el8.5.0+20365+3abb8f5b
ruby-libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
seabiosol 80:1.13.0-2.module+el8.3.0+7860+a7792d29
seabios-binol 80:1.13.0-2.module+el8.3.0+7860+a7792d29
seavgabios-binol 80:1.13.0-2.module+el8.3.0+7860+a7792d29
sgabiosol 81:0.20170427git-3.module+el8.3.0+7860+a7792d29
sgabios-binol 81:0.20170427git-3.module+el8.3.0+7860+a7792d29
superminol 80:5.1.19-10.module+el8.3.0+7860+a7792d29
supermin-develol 80:5.1.19-10.module+el8.3.0+7860+a7792d29
virt-dibol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b
virt-v2vol 81:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2021-3667 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.5 0.0137 None reported
Routine CVE-2021-3631 libnss-libvirt: A flaw was found in libvirt while it generates SELinux MCS category pairsfor VMs' dynamic labels6.5 0.0049 None reported
Routine CVE-2020-15859 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.5 0.0044 None reported
Routine CVE-2021-3592 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU6.5 0.0033 None reported
Routine CVE-2021-3593 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU6.5 0.0033 None reported
Routine CVE-2021-3594 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU6.5 0.0033 None reported
Routine CVE-2021-3595 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU6.5 0.0033 None reported
Showing 1 to 7 of 7 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.