RLSA-2022:1759: Security update for 18 packages

RLSA-2022:1759, released May 10, 2022, fixes 29 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

8.8

Base score, 0 to 10

Highest EPSS

0.0495

92nd percentile

Priority of the 29 CVEs

Patch now 0
                                Urgent 0
                                High 29
                                Routine 0

Fixed package versions

Product	Release	Fixed in
hivex	rocky 8	0:1.3.18-23.module+el8.7.0+1084+97b81f61
libguestfs	rocky 8	1:1.44.0-5.module+el8.6.0+1052+ff61d164.rocky
libguestfs-winsupport	rocky 8	0:8.6-1.module+el8.7.0+1084+97b81f61
libiscsi	rocky 8	0:1.18.0-8.module+el8.7.0+1084+97b81f61
libnbd	rocky 8	0:1.6.0-5.module+el8.7.0+1084+97b81f61
libtpms	rocky 8	0:0.9.1-0.20211126git1ff6fe1f43.module+el8.6.0+1052+ff61d164
libvirt	rocky 8	0:8.0.0-5.module+el8.6.0+847+b490afdd
libvirt-dbus	rocky 8	0:1.3.0-2.module+el8.7.0+1084+97b81f61
libvirt-python	rocky 8	0:8.0.0-1.module+el8.6.0+847+b490afdd
nbdkit	rocky 8	0:1.24.0-4.module+el8.6.0+847+b490afdd
netcf	rocky 8	0:0.2.8-12.module+el8.7.0+1084+97b81f61
perl-Sys-Virt	rocky 8	0:8.0.0-1.module+el8.7.0+1084+97b81f61
qemu-kvm	rocky 8	5:6.2.0-11.module+el8.6.0+1000+18e3b59f.5
seabios	rocky 8	0:1.15.0-2.module+el8.6.0+1052+ff61d164
sgabios	rocky 8	1:0.20170427git-3.module+el8.7.0+1084+97b81f61
supermin	rocky 8	0:5.2.1-1.module+el8.6.0+1052+ff61d164
swtpm	rocky 8	0:0.7.0-1.20211109gitb79fd91.module+el8.6.0+847+b490afdd
virt-v2v	rocky 8	1:1.42.0-18.module+el8.6.0+847+b490afdd

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2021-3622	hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0495	None reported
High	CVE-2021-3975	qemu-kvm-docs: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0164	None reported
High	CVE-2022-0485	libvirt-dbus: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0104	None reported
High	CVE-2021-3716	nbdkit-bash-completion: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0058	None reported
High	CVE-2021-3748	python3-libguestfs: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	8.8	0.0052	None reported
High	CVE-2021-33289	hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0049	None reported
High	CVE-2021-35266	libguestfs-bash-completion: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0049	None reported
High	CVE-2021-35267	virt-v2v-man-pages-ja: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0049	None reported
High	CVE-2021-20196	qemu-block-extra: A NULL pointer dereference flaw was found in the floppy disk emulator ofQEMU	7.8	0.0048	None reported
High	CVE-2021-35269	hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0048	None reported
High	CVE-2021-35268	hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0047	None reported
High	CVE-2021-33286	libvirt: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0046	None reported
High	CVE-2021-39256	libvirt-nss: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0044	None reported
High	CVE-2021-39254	hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0044	None reported
High	CVE-2021-39261	libvirt-daemon-driver-storage-iscsi-direct: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0043	None reported
High	CVE-2021-39263	qemu-kvm-block-gluster: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0043	None reported
High	CVE-2021-39252	hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0043	None reported
High	CVE-2021-39253	hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0042	None reported
High	CVE-2021-39260	libvirt-daemon-driver-storage-iscsi-direct: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0042	None reported
High	CVE-2021-39262	libtpms: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0042	None reported
High	CVE-2021-39251	libguestfs-javadoc: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0042	None reported
High	CVE-2021-33285	libvirt-daemon-driver-qemu: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0042	None reported
High	CVE-2021-33287	hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0041	None reported
High	CVE-2021-39255	hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0040	None reported
High	CVE-2021-39258	nbdkit-basic-plugins: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms	7.8	0.0040	None reported

Also fixes CVE-2021-3622

ALSA-2022:1759
SLOF, hivex, hivex-devel and 127 more on almalinux 8
RHSA-2022:1759
SLOF, hivex, hivex-devel and 127 more on RHEL 8
ELSA-2022-1759
hivex, hivex-devel, libguestfs and 126 more on ol 8
DEBIAN-CVE-2021-3622
hivex on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14

Vendor advisory

https://errata.rockylinux.org/RLSA-2022:1759

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/rlsa-2022-1759">RLSA-2022:1759 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.