Skip to content
OpenAdvisories
Medium ALSA-2020:4676 6 CVEs

Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Published Nov 3, 2020 · Updated Nov 5, 2026

Ecosystem: AlmaLinux

Summary

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

The following packages have been upgraded to a later upstream version: hivex (1.3.18), libguestfs (1.40.2), libguestfs-winsupport (8.2), libvirt (6.0.0), libvirt-dbus (1.3.0), libvirt-python (6.0.0), nbdkit (1.16.2), perl-Sys-Virt (6.0.0), qemu-kvm (4.2.0), seabios (1.13.0), SLOF (20191022). (BZ#1810193, BZ#1844296)

Security Fix(es):

* libvirt: leak of /dev/mapper/control into QEMU guests (CVE-2020-14339)

* QEMU: Slirp: use-after-free during packet reassembly (CVE-2019-15890)

* libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent (CVE-2019-20485)

* QEMU: slirp: use-after-free in ip_reass() function in ip_input.c (CVE-2020-1983)

* libvirt: Potential denial of service via active pool without target path (CVE-2020-10703)

* libvirt: leak of sensitive cookie information via dumpxml (CVE-2020-14301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 94

ReleasePackageFixed in
AlmaLinux · 8 hivex 1.3.18-20.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 hivex-devel 1.3.18-20.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libguestfs-winsupport 8.2-1.module_el8.5.0+2608+72063365
AlmaLinux · 8 libguestfs-winsupport 8.2-1.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libiscsi 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi 1.18.0-8.module_el8.5.0+2608+72063365
AlmaLinux · 8 libiscsi 1.18.0-8.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libiscsi-devel 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi-devel 1.18.0-8.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libiscsi-devel 1.18.0-8.module_el8.5.0+2608+72063365
AlmaLinux · 8 libiscsi-utils 1.18.0-8.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libiscsi-utils 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi-utils 1.18.0-8.module_el8.5.0+2608+72063365
AlmaLinux · 8 libnbd 1.2.2-1.module_el8.5.0+2608+72063365
AlmaLinux · 8 libnbd 1.2.2-1.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libnbd-devel 1.2.2-1.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libnbd-devel 1.2.2-1.module_el8.5.0+2608+72063365
AlmaLinux · 8 libvirt 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-admin 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-bash-completion 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-client 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-config-network 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-config-nwfilter 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-interface 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-network 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-nodedev 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-nwfilter 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-secret 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-storage 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-storage-core 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-storage-disk 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-storage-iscsi 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-storage-iscsi-direct 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-storage-logical 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-storage-mpath 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-storage-rbd 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-daemon-driver-storage-scsi 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-dbus 1.3.0-2.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-dbus 1.3.0-2.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-dbus 1.3.0-2.module_el8.5.0+2608+72063365
AlmaLinux · 8 libvirt-devel 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-docs 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-libs 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 libvirt-nss 6.0.0-28.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 nbdfuse 1.2.2-1.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 nbdfuse 1.2.2-1.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-bash-completion 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-basic-filters 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-basic-plugins 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-curl-plugin 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-devel 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-example-plugins 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-gzip-plugin 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-linuxdisk-plugin 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-python-plugin 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-server 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-ssh-plugin 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-vddk-plugin 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 nbdkit-xz-filter 1.16.2-4.module_el8.5.0+2608+72063365
AlmaLinux · 8 netcf 0.2.8-12.module_el8.5.0+2608+72063365
AlmaLinux · 8 netcf 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf 0.2.8-12.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 netcf-devel 0.2.8-12.module_el8.5.0+2608+72063365
AlmaLinux · 8 netcf-devel 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf-devel 0.2.8-12.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 netcf-libs 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf-libs 0.2.8-12.module_el8.5.0+2608+72063365
AlmaLinux · 8 netcf-libs 0.2.8-12.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 ocaml-hivex 1.3.18-20.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 ocaml-hivex-devel 1.3.18-20.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 ocaml-libguestfs 1:1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma
AlmaLinux · 8 ocaml-libguestfs-devel 1:1.40.2-25.module_el8.3.0+2048+e7a0a3ea.alma
AlmaLinux · 8 ocaml-libnbd 1.2.2-1.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 ocaml-libnbd-devel 1.2.2-1.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 perl-hivex 1.3.18-20.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 perl-Sys-Virt 6.0.0-1.module_el8.5.0+2608+72063365
AlmaLinux · 8 perl-Sys-Virt 6.0.0-1.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 python3-hivex 1.3.18-20.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 python3-libnbd 1.2.2-1.module_el8.5.0+2608+72063365
AlmaLinux · 8 python3-libnbd 1.2.2-1.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 python3-libvirt 6.0.0-1.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 python3-libvirt 6.0.0-1.module_el8.5.0+2608+72063365
AlmaLinux · 8 ruby-hivex 1.3.18-20.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 seabios 1.13.0-2.module_el8.5.0+2608+72063365
AlmaLinux · 8 seabios-bin 1.13.0-2.module_el8.5.0+2608+72063365
AlmaLinux · 8 seavgabios-bin 1.13.0-2.module_el8.5.0+2608+72063365
AlmaLinux · 8 sgabios 1:0.20170427git-3.module_el8.5.0+2608+72063365
AlmaLinux · 8 sgabios 1:0.20170427git-3.module_el8.3.0+2048+e7a0a3ea
AlmaLinux · 8 sgabios-bin 1:0.20170427git-3.module_el8.5.0+2608+72063365
AlmaLinux · 8 sgabios-bin 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 supermin 5.1.19-10.module_el8.5.0+2608+72063365
AlmaLinux · 8 supermin-devel 5.1.19-10.module_el8.5.0+2608+72063365

Vulnerabilities 6

References

  • report
    https://bugzilla.redhat.com/1518042
  • report
    https://bugzilla.redhat.com/1664324
  • report
    https://bugzilla.redhat.com/1715039
  • report
    https://bugzilla.redhat.com/1717394
  • report
    https://bugzilla.redhat.com/1727865
  • report
    https://bugzilla.redhat.com/1749716
  • report
    https://bugzilla.redhat.com/1756946
  • report
    https://bugzilla.redhat.com/1759849
  • report
    https://bugzilla.redhat.com/1763191
  • report
    https://bugzilla.redhat.com/1790189
  • report
    https://bugzilla.redhat.com/1805998
  • report
    https://bugzilla.redhat.com/1807057
  • report
    https://bugzilla.redhat.com/1809740
  • report
    https://bugzilla.redhat.com/1810193
  • report
    https://bugzilla.redhat.com/1811539
  • report
    https://bugzilla.redhat.com/1816650
  • report
    https://bugzilla.redhat.com/1828681
  • report
    https://bugzilla.redhat.com/1829825
  • report
    https://bugzilla.redhat.com/1844296
  • report
    https://bugzilla.redhat.com/1845459
  • report
    https://bugzilla.redhat.com/1848640
  • report
    https://bugzilla.redhat.com/1849997
  • report
    https://bugzilla.redhat.com/1854380
  • report
    https://bugzilla.redhat.com/1857779
  • report
    https://bugzilla.redhat.com/1860069
  • report
    https://bugzilla.redhat.com/1867847
  • advisory
    https://errata.almalinux.org/8/ALSA-2020-4676.html
  • report
    https://vulners.com/cve/CVE-2019-15890
  • report
    https://vulners.com/cve/CVE-2019-20485
  • report
    https://vulners.com/cve/CVE-2020-10703
  • report
    https://vulners.com/cve/CVE-2020-14301
  • report
    https://vulners.com/cve/CVE-2020-14339
  • report
    https://vulners.com/cve/CVE-2020-1983