Linux · Oracle Linux · Security advisory · February 25, 2022

ELSA-2022-9172: Security update for 103 packages

ELSA-2022-9172, released February 25, 2022, fixes 14 CVEs across 103 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
14
None rated Critical
Exploited
0
None reported
Highest CVSS
8.5
Base score, 0 to 10
Highest EPSS
0.0288
86th percentile

Priority of the 14 CVEs

Patch now 0 Urgent 0 High 4 Routine 10

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-21.module+el8.5.0+20482+a450964e
hivex-develol 80:1.3.18-21.module+el8.5.0+20482+a450964e
libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-bash-completionol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-benchmarkingol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-develol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-gfs2ol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-gobjectol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-gobject-develol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-inspect-iconsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-javaol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-java-develol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-javadocol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-man-pages-jaol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-man-pages-ukol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-rescueol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-rsyncol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-toolsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-tools-col 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libguestfs-winsupportol 80:8.2-1.module+el8.5.0+20482+a450964e
libguestfs-xfsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
libiscsiol 80:1.18.0-8.module+el8.5.0+20482+a450964e
libiscsi-develol 80:1.18.0-8.module+el8.5.0+20482+a450964e
libiscsi-utilsol 80:1.18.0-8.module+el8.5.0+20482+a450964e
libnbdol 80:1.2.2-1.module+el8.5.0+20482+a450964e
libnbd-develol 80:1.2.2-1.module+el8.5.0+20482+a450964e
libvirtol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-adminol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-bash-completionol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-clientol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemonol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-config-networkol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-config-nwfilterol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-interfaceol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-networkol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-nodedevol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-nwfilterol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-qemuol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-secretol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storageol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-coreol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-diskol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-glusterol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-iscsiol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-iscsi-directol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-logicalol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-mpathol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-rbdol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-driver-storage-scsiol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-daemon-kvmol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-dbusol 80:1.3.0-2.module+el8.5.0+20482+a450964e
libvirt-develol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-docsol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-libsol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-lock-sanlockol 80:5.7.0-32.module+el8.5.0+20482+a450964e
libvirt-nssol 80:5.7.0-32.module+el8.5.0+20482+a450964e
lua-guestfsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
nbdfuseol 80:1.2.2-1.module+el8.5.0+20482+a450964e
nbdkitol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-bash-completionol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-basic-filtersol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-basic-pluginsol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-curl-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-develol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-example-pluginsol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-gzip-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-linuxdisk-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-python-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-serverol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-ssh-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-vddk-pluginol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
nbdkit-xz-filterol 80:1.16.2-4.0.1.module+el8.5.0+20482+a450964e
netcfol 80:0.2.8-12.module+el8.5.0+20482+a450964e
netcf-develol 80:0.2.8-12.module+el8.5.0+20482+a450964e
netcf-libsol 80:0.2.8-12.module+el8.5.0+20482+a450964e
perl-Sys-Guestfsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
perl-Sys-Virtol 80:4.5.0-5.module+el8.5.0+20482+a450964e
perl-hivexol 80:1.3.18-21.module+el8.5.0+20482+a450964e
python3-hivexol 80:1.3.18-21.module+el8.5.0+20482+a450964e
python3-libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
python3-libnbdol 80:1.2.2-1.module+el8.5.0+20482+a450964e
python3-libvirtol 80:5.7.0-32.module+el8.5.0+20482+a450964e
qemu-guest-agentol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-imgol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvmol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-block-curlol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-block-glusterol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-block-iscsiol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-block-rbdol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-block-sshol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-commonol 815:4.2.1-15.module+el8.5.0+20482+a450964e
qemu-kvm-coreol 815:4.2.1-15.module+el8.5.0+20482+a450964e
ruby-hivexol 80:1.3.18-21.module+el8.5.0+20482+a450964e
ruby-libguestfsol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
seabiosol 80:1.13.0-2.module+el8.5.0+20482+a450964e
seabios-binol 80:1.13.0-2.module+el8.5.0+20482+a450964e
seavgabios-binol 80:1.13.0-2.module+el8.5.0+20482+a450964e
sgabiosol 81:0.20170427git-3.module+el8.5.0+20482+a450964e
sgabios-binol 81:0.20170427git-3.module+el8.5.0+20482+a450964e
superminol 80:5.1.19-10.module+el8.5.0+20482+a450964e
supermin-develol 80:5.1.19-10.module+el8.5.0+20482+a450964e
virt-dibol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e
virt-v2vol 81:1.40.2-28.0.1.module+el8.5.0+20482+a450964e

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2021-3682 qemu: A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc28.5 0.0288 None reported
High CVE-2021-3713 qemu: An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6....7.4 0.0057 None reported
High CVE-2021-20196 qemu-block-extra: A NULL pointer dereference flaw was found in the floppy disk emulator ofQEMU7.8 0.0048 None reported
High CVE-2021-4158 qemu-kvm-block-rbd: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.8 0.0040 None reported
Routine CVE-2020-29130 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms4.3 0.0189 None reported
Routine CVE-2020-29129 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms4.3 0.0146 None reported
Routine CVE-2021-20203 qemu-block-extra: An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMUfor versions up to v5.2.03.2 0.0059 None reported
Routine CVE-2021-3416 libguestfs-gfs2: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.0 0.0046 None reported
Routine CVE-2021-3930 qemu-kvm-block-gluster: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.5 0.0034 None reported
Routine CVE-2021-3592 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU6.5 0.0033 None reported
Routine CVE-2021-3593 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU6.5 0.0033 None reported
Routine CVE-2021-3594 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU6.5 0.0033 None reported
Routine CVE-2021-3595 libslirp0: An invalid pointer initialization issue was found in the SLiRP networkingimplementation of QEMU6.5 0.0033 None reported
Routine CVE-2021-3947 qemu: A stack-buffer-overflow was found in QEMU in the NVME component5.5 0.0032 None reported
Showing 1 to 14 of 14 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.