Linux · Oracle Linux · Security advisory · December 1, 2021

ELSA-2021-9568: Security update for 103 packages

ELSA-2021-9568, released December 1, 2021, fixes 14 CVEs across 103 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
14
None rated Critical
Exploited
0
None reported
Highest CVSS
8.2
Base score, 0 to 10
Highest EPSS
0.0049
42nd percentile

Priority of the 14 CVEs

Patch now 0 Urgent 0 High 1 Routine 13

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-20.module+el8.4.0+20319+6eb4347c
hivex-develol 80:1.3.18-20.module+el8.4.0+20319+6eb4347c
libguestfsol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-bash-completionol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-benchmarkingol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-develol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-gfs2ol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-gobjectol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-gobject-develol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-inspect-iconsol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-javaol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-java-develol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-javadocol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-man-pages-jaol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-man-pages-ukol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-rescueol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-rsyncol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-toolsol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-tools-col 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libguestfs-winsupportol 80:8.2-1.module+el8.4.0+20319+6eb4347c
libguestfs-xfsol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
libiscsiol 80:1.18.0-8.module+el8.4.0+20319+6eb4347c
libiscsi-develol 80:1.18.0-8.module+el8.4.0+20319+6eb4347c
libiscsi-utilsol 80:1.18.0-8.module+el8.4.0+20319+6eb4347c
libnbdol 80:1.2.2-1.module+el8.4.0+20319+6eb4347c
libnbd-develol 80:1.2.2-1.module+el8.4.0+20319+6eb4347c
libvirtol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-adminol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-bash-completionol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-clientol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemonol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-config-networkol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-config-nwfilterol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-interfaceol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-networkol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-nodedevol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-nwfilterol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-qemuol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-secretol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-storageol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-storage-coreol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-storage-diskol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-storage-glusterol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-storage-iscsiol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-storage-iscsi-directol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-storage-logicalol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-storage-mpathol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-storage-rbdol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-driver-storage-scsiol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-daemon-kvmol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-dbusol 80:1.3.0-2.module+el8.4.0+20319+6eb4347c
libvirt-develol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-docsol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-libsol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-lock-sanlockol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
libvirt-nssol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
lua-guestfsol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
nbdfuseol 80:1.2.2-1.module+el8.4.0+20319+6eb4347c
nbdkitol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-bash-completionol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-basic-filtersol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-basic-pluginsol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-curl-pluginol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-develol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-example-pluginsol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-gzip-pluginol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-linuxdisk-pluginol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-python-pluginol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-serverol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-ssh-pluginol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-vddk-pluginol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
nbdkit-xz-filterol 80:1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c
netcfol 80:0.2.8-12.module+el8.4.0+20319+6eb4347c
netcf-develol 80:0.2.8-12.module+el8.4.0+20319+6eb4347c
netcf-libsol 80:0.2.8-12.module+el8.4.0+20319+6eb4347c
perl-Sys-Guestfsol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
perl-Sys-Virtol 80:4.5.0-5.module+el8.4.0+20319+6eb4347c
perl-hivexol 80:1.3.18-20.module+el8.4.0+20319+6eb4347c
python3-hivexol 80:1.3.18-20.module+el8.4.0+20319+6eb4347c
python3-libguestfsol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
python3-libnbdol 80:1.2.2-1.module+el8.4.0+20319+6eb4347c
python3-libvirtol 80:5.7.0-31.module+el8.4.0+20319+6eb4347c
qemu-guest-agentol 815:4.2.1-11.module+el8.4.0+20319+6eb4347c
qemu-imgol 815:4.2.1-11.module+el8.4.0+20319+6eb4347c
qemu-kvmol 815:4.2.1-11.module+el8.4.0+20319+6eb4347c
qemu-kvm-block-curlol 815:4.2.1-11.module+el8.4.0+20319+6eb4347c
qemu-kvm-block-glusterol 815:4.2.1-11.module+el8.4.0+20319+6eb4347c
qemu-kvm-block-iscsiol 815:4.2.1-11.module+el8.4.0+20319+6eb4347c
qemu-kvm-block-rbdol 815:4.2.1-11.module+el8.4.0+20319+6eb4347c
qemu-kvm-block-sshol 815:4.2.1-11.module+el8.4.0+20319+6eb4347c
qemu-kvm-commonol 815:4.2.1-11.module+el8.4.0+20319+6eb4347c
qemu-kvm-coreol 815:4.2.1-11.module+el8.4.0+20319+6eb4347c
ruby-hivexol 80:1.3.18-20.module+el8.4.0+20319+6eb4347c
ruby-libguestfsol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
seabiosol 80:1.13.0-2.module+el8.4.0+20319+6eb4347c
seabios-binol 80:1.13.0-2.module+el8.4.0+20319+6eb4347c
seavgabios-binol 80:1.13.0-2.module+el8.4.0+20319+6eb4347c
sgabiosol 81:0.20170427git-3.module+el8.4.0+20319+6eb4347c
sgabios-binol 81:0.20170427git-3.module+el8.4.0+20319+6eb4347c
superminol 80:5.1.19-10.module+el8.4.0+20319+6eb4347c
supermin-develol 80:5.1.19-10.module+el8.4.0+20319+6eb4347c
virt-dibol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c
virt-v2vol 81:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2021-3546 qemu: An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versio...8.2 0.0046 None reported
Routine CVE-2021-3409 qemu-block-extra: The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective,thus making QEMU vulnerable to the out-of-bou...5.7 0.0049 None reported
Routine CVE-2021-3392 qemu-block-extra: A use-after-free flaw was found in the MegaRAID emulator of QEMU3.2 0.0045 None reported
Routine CVE-2021-3544 qemu-system-misc: Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and in...6.5 0.0044 None reported
Routine CVE-2020-15469 qemu-block-extra: In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.2.3 0.0043 None reported
Routine CVE-2021-3545 qemu: An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in ver...6.5 0.0042 None reported
Routine CVE-2021-3582 qemu: A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device6.5 0.0039 None reported
Routine CVE-2021-3527 qemu-block-extra: A flaw was found in the USB redirector device (usb-redir) of QEMU5.5 0.0037 None reported
Routine CVE-2021-20257 libguestfs-bash-completion: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.5 0.0037 None reported
Routine CVE-2020-27821 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.0 0.0036 None reported
Routine CVE-2021-3608 qemu: A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.06.0 0.0036 None reported
Routine CVE-2021-20221 qemu-block-extra: An out-of-bounds heap buffer access issue was found in the ARM GenericInterrupt Controller emulator of QEMU up to and...6.0 0.0033 None reported
Routine CVE-2020-27661 hivex: hivex [1.3.18] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [1.3.18...6.5 0.0031 None reported
Routine CVE-2021-3607 qemu: An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.06.0 0.0030 None reported
Showing 1 to 14 of 14 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.