Linux · Oracle Linux · Security advisory · September 2, 2024

ELSA-2024-12604: Security update for 120 packages

ELSA-2024-12604, released September 2, 2024, fixes 5 CVEs across 120 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Highest CVSS
8.2
Base score, 0 to 10
Highest EPSS
0.0060
48th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 2 Routine 3

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.18-23.module+el8.10.0+90377+6a12a345
hivex-develol 80:1.3.18-23.module+el8.10.0+90377+6a12a345
libguestfsol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-applianceol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-bash-completionol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-develol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-gfs2ol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-gobjectol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-gobject-develol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-inspect-iconsol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-javaol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-java-develol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-javadocol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-man-pages-jaol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-man-pages-ukol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-rescueol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-rsyncol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-toolsol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-tools-col 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libguestfs-winsupportol 80:8.10-1.module+el8.10.0+90377+6a12a345
libguestfs-xfsol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
libiscsiol 80:1.18.0-8.module+el8.10.0+90377+6a12a345
libiscsi-develol 80:1.18.0-8.module+el8.10.0+90377+6a12a345
libiscsi-utilsol 80:1.18.0-8.module+el8.10.0+90377+6a12a345
libnbdol 80:1.6.0-5.module+el8.10.0+90377+6a12a345
libnbd-bash-completionol 80:1.6.0-5.module+el8.10.0+90377+6a12a345
libnbd-develol 80:1.6.0-5.module+el8.10.0+90377+6a12a345
libtpmsol 80:0.9.1-2.20211126git1ff6fe1f43.module+el8.10.0+90377+6a12a345
libtpms-develol 80:0.9.1-2.20211126git1ff6fe1f43.module+el8.10.0+90377+6a12a345
libvirtol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-clientol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-client-qemuol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemonol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-config-networkol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-config-nwfilterol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-interfaceol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-networkol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-nodedevol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-nwfilterol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-qemuol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-secretol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-storageol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-storage-coreol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-storage-diskol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-storage-glusterol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-storage-iscsiol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-storage-iscsi-directol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-storage-logicalol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-storage-mpathol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-storage-rbdol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-driver-storage-scsiol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-daemon-kvmol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-dbusol 80:1.3.0-2.module+el8.10.0+90377+6a12a345
libvirt-develol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-docsol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-libsol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-lock-sanlockol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-nssol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
libvirt-wiresharkol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
lua-guestfsol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
nbdfuseol 80:1.6.0-5.module+el8.10.0+90377+6a12a345
nbdkitol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-bash-completionol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-basic-filtersol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-basic-pluginsol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-curl-pluginol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-develol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-example-pluginsol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-gzip-filterol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-gzip-pluginol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-linuxdisk-pluginol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-nbd-pluginol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-python-pluginol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-serverol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-ssh-pluginol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-tar-filterol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-tar-pluginol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-tmpdisk-pluginol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-vddk-pluginol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
nbdkit-xz-filterol 80:1.24.0-5.module+el8.10.0+90377+6a12a345
netcfol 80:0.2.8-12.module+el8.10.0+90377+6a12a345
netcf-develol 80:0.2.8-12.module+el8.10.0+90377+6a12a345
netcf-libsol 80:0.2.8-12.module+el8.10.0+90377+6a12a345
perl-Sys-Guestfsol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
perl-Sys-Virtol 80:8.0.0-1.module+el8.10.0+90377+6a12a345
perl-hivexol 80:1.3.18-23.module+el8.10.0+90377+6a12a345
python3-hivexol 80:1.3.18-23.module+el8.10.0+90377+6a12a345
python3-libguestfsol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
python3-libnbdol 80:1.6.0-5.module+el8.10.0+90377+6a12a345
python3-libvirtol 80:9.0.0-6.module+el8.10.0+90377+6a12a345
qemu-guest-agentol 815:7.2.0-15.module+el8.10.0+90377+6a12a345
qemu-imgol 815:7.2.0-15.module+el8.10.0+90377+6a12a345
qemu-kvmol 815:7.2.0-15.module+el8.10.0+90377+6a12a345
qemu-kvm-block-curlol 815:7.2.0-15.module+el8.10.0+90377+6a12a345
qemu-kvm-block-glusterol 815:7.2.0-15.module+el8.10.0+90377+6a12a345
qemu-kvm-block-iscsiol 815:7.2.0-15.module+el8.10.0+90377+6a12a345
qemu-kvm-block-rbdol 815:7.2.0-15.module+el8.10.0+90377+6a12a345
qemu-kvm-block-sshol 815:7.2.0-15.module+el8.10.0+90377+6a12a345
qemu-kvm-commonol 815:7.2.0-15.module+el8.10.0+90377+6a12a345
qemu-kvm-coreol 815:7.2.0-15.module+el8.10.0+90377+6a12a345
qemu-virtiofsdol 815:7.2.0-15.module+el8.10.0+90377+6a12a345
ruby-hivexol 80:1.3.18-23.module+el8.10.0+90377+6a12a345
ruby-libguestfsol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
seabiosol 80:1.16.0-4.module+el8.10.0+90377+6a12a345
seabios-binol 80:1.16.0-4.module+el8.10.0+90377+6a12a345
seavgabios-binol 80:1.16.0-4.module+el8.10.0+90377+6a12a345
sgabiosol 81:0.20170427git-3.module+el8.10.0+90377+6a12a345
sgabios-binol 81:0.20170427git-3.module+el8.10.0+90377+6a12a345
superminol 80:5.2.1-2.0.1.module+el8.10.0+90377+6a12a345
supermin-develol 80:5.2.1-2.0.1.module+el8.10.0+90377+6a12a345
swtpmol 80:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90377+6a12a345
swtpm-develol 80:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90377+6a12a345
swtpm-libsol 80:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90377+6a12a345
swtpm-toolsol 80:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90377+6a12a345
swtpm-tools-pkcs11ol 80:0.7.0-4.20211109gitb79fd91.module+el8.10.0+90377+6a12a345
virt-dibol 81:1.44.0-9.0.2.module+el8.10.0+90377+6a12a345
virt-v2vol 81:1.42.0-22.module+el8.10.0+90377+6a12a345
virt-v2v-bash-completionol 81:1.42.0-22.module+el8.10.0+90377+6a12a345
virt-v2v-man-pages-jaol 81:1.42.0-22.module+el8.10.0+90377+6a12a345
virt-v2v-man-pages-ukol 81:1.42.0-22.module+el8.10.0+90377+6a12a345

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2024-4467 qemu-block-extra: A flaw was found in the QEMU disk image utility (qemu-img) 'info' command.A specially crafted image file containing a...7.8 0.0034 None reported
High CVE-2024-3446 qemu-block-extra: A double free vulnerability was found in QEMU virtio devices (virtio-gpu,virtio-serial-bus, virtio-crypto), where the...8.2 0.0031 None reported
Routine CVE-2024-26327 qemu-system-modules-spice: An issue was discovered in QEMU 7.1.0 through 8.2.15.5 0.0060 None reported
Routine CVE-2024-4418 libnss-libvirt: A race condition leading to a stack use-after-free flaw was found inlibvirt6.2 0.0049 None reported
Routine CVE-2024-26328 qemu-system: An issue was discovered in QEMU 7.1.0 through 8.2.16.0 0.0029 None reported
Showing 1 to 5 of 5 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.