Linux · Red Hat · Security advisory · November 4, 2020

RHSA-2020:4676: Security update for 111 packages

RHSA-2020:4676, released November 4, 2020, fixes 6 CVEs across 111 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Highest CVSS
8.8
Base score, 0 to 10
Highest EPSS
0.0399
90th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 2 Routine 4

Fixed package versions

ProductReleaseFixed in
SLOFRHEL 80:20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418
hivexRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
hivex-develRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
libguestfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-bash-completionRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-benchmarkingRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-develRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-gfs2RHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-gobjectRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-gobject-develRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-inspect-iconsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-javaRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-java-develRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-javadocRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-man-pages-jaRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-man-pages-ukRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-rescueRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-rsyncRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-toolsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-tools-cRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libguestfs-winsupportRHEL 80:8.2-1.module+el8.3.0+6423+e4cb6418
libguestfs-xfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
libiscsiRHEL 80:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-develRHEL 80:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-utilsRHEL 80:1.18.0-8.module+el8.1.0+4066+0f1aadab
libnbdRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
libnbd-develRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
libvirtRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-adminRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-bash-completionRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-clientRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemonRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-config-networkRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-config-nwfilterRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-interfaceRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-networkRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-nodedevRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-nwfilterRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-qemuRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-secretRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storageRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-coreRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-diskRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-glusterRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-iscsiRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-iscsi-directRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-logicalRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-mpathRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-rbdRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-driver-storage-scsiRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-daemon-kvmRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-dbusRHEL 80:1.3.0-2.module+el8.3.0+6423+e4cb6418
libvirt-develRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-docsRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-libsRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-lock-sanlockRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
libvirt-nssRHEL 80:6.0.0-28.module+el8.3.0+7827+5e65edd7
lua-guestfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
nbdfuseRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
nbdkitRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-bash-completionRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-basic-filtersRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-basic-pluginsRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-curl-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-develRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-example-pluginsRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-gzip-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-linuxdisk-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-python-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-serverRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-ssh-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-vddk-pluginRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
nbdkit-xz-filterRHEL 80:1.16.2-4.module+el8.3.0+6922+fd575af8
netcfRHEL 80:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-develRHEL 80:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-libsRHEL 80:0.2.8-12.module+el8.1.0+4066+0f1aadab
ocaml-hivexRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
ocaml-hivex-develRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
ocaml-libguestfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
ocaml-libguestfs-develRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
ocaml-libnbdRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
ocaml-libnbd-develRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
perl-Sys-GuestfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
perl-Sys-VirtRHEL 80:6.0.0-1.module+el8.3.0+6423+e4cb6418
perl-hivexRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
python3-hivexRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
python3-libguestfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
python3-libnbdRHEL 80:1.2.2-1.module+el8.3.0+7353+9de0a3cc
python3-libvirtRHEL 80:6.0.0-1.module+el8.3.0+6423+e4cb6418
qemu-guest-agentRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-imgRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvmRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-block-curlRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-block-glusterRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-block-iscsiRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-block-rbdRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-block-sshRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-commonRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-coreRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
qemu-kvm-testsRHEL 815:4.2.0-34.module+el8.3.0+7976+077be4ec
ruby-hivexRHEL 80:1.3.18-20.module+el8.3.0+6423+e4cb6418
ruby-libguestfsRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
seabiosRHEL 80:1.13.0-2.module+el8.3.0+7353+9de0a3cc
seabios-binRHEL 80:1.13.0-2.module+el8.3.0+7353+9de0a3cc
seavgabios-binRHEL 80:1.13.0-2.module+el8.3.0+7353+9de0a3cc
sgabiosRHEL 81:0.20170427git-3.module+el8.1.0+4066+0f1aadab
sgabios-binRHEL 81:0.20170427git-3.module+el8.1.0+4066+0f1aadab
superminRHEL 80:5.1.19-10.module+el8.3.0+6423+e4cb6418
supermin-develRHEL 80:5.1.19-10.module+el8.3.0+6423+e4cb6418
virt-dibRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f
virt-v2vRHEL 81:1.40.2-25.module+el8.3.0+7421+642fe24f

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2019-15890 qemu-guest-agent: libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass inip_input.c.7.5 0.0399 None reported
High CVE-2020-14339 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms8.8 0.0042 None reported
Routine CVE-2020-10703 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.5 0.0238 None reported
Routine CVE-2020-1983 libslirp0: A use after free vulnerability in ip_reass() in ip_input.c of libslirp4.2.0 and prior releases allows crafted packets...6.5 0.0236 None reported
Routine CVE-2020-14301 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.5 0.0116 None reported
Routine CVE-2019-20485 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms5.8 0.0081 None reported
Showing 1 to 6 of 6 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.