Skip to content
OpenAdvisories
Low ALSA-2019:3345 3 CVEs

Low: virt:rhel security, bug fix, and enhancement update

Published Nov 5, 2019 · Updated Nov 5, 2026

Ecosystem: AlmaLinux

Summary

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)

* QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)

* QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 22

ReleasePackageFixed in
AlmaLinux · 8 libiscsi 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi 1.18.0-8.module_el8.5.0+2608+72063365
AlmaLinux · 8 libiscsi 1.18.0-8.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libiscsi-devel 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi-devel 1.18.0-8.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libiscsi-devel 1.18.0-8.module_el8.5.0+2608+72063365
AlmaLinux · 8 libiscsi-utils 1.18.0-8.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libiscsi-utils 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi-utils 1.18.0-8.module_el8.5.0+2608+72063365
AlmaLinux · 8 netcf 0.2.8-12.module_el8.5.0+2608+72063365
AlmaLinux · 8 netcf 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf 0.2.8-12.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 netcf-devel 0.2.8-12.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 netcf-devel 0.2.8-12.module_el8.5.0+2608+72063365
AlmaLinux · 8 netcf-devel 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf-libs 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf-libs 0.2.8-12.module_el8.5.0+2608+72063365
AlmaLinux · 8 netcf-libs 0.2.8-12.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 sgabios 1:0.20170427git-3.module_el8.5.0+2608+72063365
AlmaLinux · 8 sgabios 1:0.20170427git-3.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 sgabios-bin 1:0.20170427git-3.module_el8.5.0+2608+72063365
AlmaLinux · 8 sgabios-bin 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703

Vulnerabilities 3

References

  • report
    https://bugzilla.redhat.com/1531543
  • report
    https://bugzilla.redhat.com/1662272
  • report
    https://bugzilla.redhat.com/1664463
  • report
    https://bugzilla.redhat.com/1667249
  • report
    https://bugzilla.redhat.com/1673010
  • report
    https://bugzilla.redhat.com/1673396
  • report
    https://bugzilla.redhat.com/1673401
  • report
    https://bugzilla.redhat.com/1678515
  • report
    https://bugzilla.redhat.com/1678979
  • report
    https://bugzilla.redhat.com/1679483
  • report
    https://bugzilla.redhat.com/1679966
  • report
    https://bugzilla.redhat.com/1680231
  • report
    https://bugzilla.redhat.com/1683681
  • report
    https://bugzilla.redhat.com/1684383
  • report
    https://bugzilla.redhat.com/1685151
  • report
    https://bugzilla.redhat.com/1686895
  • report
    https://bugzilla.redhat.com/1687541
  • report
    https://bugzilla.redhat.com/1687596
  • report
    https://bugzilla.redhat.com/1688062
  • report
    https://bugzilla.redhat.com/1689297
  • report
    https://bugzilla.redhat.com/1691356
  • report
    https://bugzilla.redhat.com/1691624
  • report
    https://bugzilla.redhat.com/1693299
  • report
    https://bugzilla.redhat.com/1693433
  • report
    https://bugzilla.redhat.com/1694148
  • report
    https://bugzilla.redhat.com/1697627
  • report
    https://bugzilla.redhat.com/1698133
  • report
    https://bugzilla.redhat.com/1707192
  • report
    https://bugzilla.redhat.com/1707598
  • report
    https://bugzilla.redhat.com/1707706
  • report
    https://bugzilla.redhat.com/1710575
  • report
    https://bugzilla.redhat.com/1712670
  • report
    https://bugzilla.redhat.com/1712810
  • report
    https://bugzilla.redhat.com/1712946
  • report
    https://bugzilla.redhat.com/1714933
  • report
    https://bugzilla.redhat.com/1716347
  • report
    https://bugzilla.redhat.com/1716907
  • report
    https://bugzilla.redhat.com/1716908
  • report
    https://bugzilla.redhat.com/1717088