Skip to content
OpenAdvisories
Medium ALSA-2023:2757 7 CVEs

Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Published May 16, 2023 · Updated Nov 2, 2026

Summary

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* ntfs-3g: heap-based buffer overflow in ntfsck (CVE-2021-46790)
* QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion (CVE-2022-3165)
* ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value (CVE-2022-30784)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate (CVE-2022-30786)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc (CVE-2022-30788)
* ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array (CVE-2022-30789)
* tpm2: TCG TPM2.0 implementations vulnerable to memory corruption (CVE-2023-1018)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 151

ReleasePackageFixed in
AlmaLinux · 8 hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 hivex 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 hivex-devel 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 hivex-devel 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libguestfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-appliance 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-bash-completion 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-devel 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-gfs2 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-gobject 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-gobject-devel 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-inspect-icons 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-java 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-java-devel 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-javadoc 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-man-pages-ja 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-man-pages-uk 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-rescue 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-rsync 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-tools 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-tools-c 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libguestfs-winsupport 8.8-1.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 libguestfs-xfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 libiscsi 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi 1.18.0-8.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 libiscsi-devel 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi-devel 1.18.0-8.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 libiscsi-utils 1.18.0-8.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libiscsi-utils 1.18.0-8.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 libnbd 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libnbd 1.6.0-5.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 libnbd-bash-completion 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libnbd-devel 1.6.0-5.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 libnbd-devel 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libtpms 0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libtpms-devel 0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-client 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-config-network 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-config-nwfilter 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-interface 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-network 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-nodedev 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-nwfilter 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-qemu 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-secret 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-storage 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-storage-core 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-storage-disk 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-storage-gluster 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-storage-iscsi 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-storage-iscsi-direct 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-storage-logical 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-storage-mpath 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-storage-rbd 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-driver-storage-scsi 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-daemon-kvm 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-dbus 1.3.0-2.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 libvirt-dbus 1.3.0-2.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 libvirt-devel 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-docs 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-libs 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-lock-sanlock 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-nss 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 libvirt-wireshark 8.0.0-19.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 lua-guestfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 nbdfuse 1.6.0-5.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 nbdfuse 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 nbdkit 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-bash-completion 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-basic-filters 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-basic-plugins 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-curl-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-devel 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-example-plugins 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-gzip-filter 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-gzip-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-linuxdisk-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-nbd-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-python-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-server 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-ssh-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-tar-filter 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-tar-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-tmpdisk-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-vddk-plugin 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 nbdkit-xz-filter 1.24.0-5.module_el8.8.0+3485+7cffc4a3
AlmaLinux · 8 netcf 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf 0.2.8-12.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 netcf-devel 0.2.8-12.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 netcf-devel 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf-libs 0.2.8-12.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 netcf-libs 0.2.8-12.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 ocaml-hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ocaml-hivex 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 ocaml-hivex-devel 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ocaml-hivex-devel 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 ocaml-libguestfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 ocaml-libguestfs-devel 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 ocaml-libnbd 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ocaml-libnbd 1.6.0-5.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 ocaml-libnbd-devel 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ocaml-libnbd-devel 1.6.0-5.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 perl-hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 perl-hivex 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 perl-Sys-Guestfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 perl-Sys-Virt 8.0.0-1.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 perl-Sys-Virt 8.0.0-1.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 python3-hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 python3-hivex 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 python3-libguestfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 python3-libnbd 1.6.0-5.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 python3-libnbd 1.6.0-5.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 python3-libvirt 8.0.0-2.module_el8.7.0+3346+68867adb
AlmaLinux · 8 qemu-guest-agent 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-img 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm-block-curl 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm-block-gluster 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm-block-iscsi 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm-block-rbd 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm-block-ssh 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm-common 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm-core 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm-docs 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm-hw-usbredir 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm-tests 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm-ui-opengl 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 qemu-kvm-ui-spice 15:6.2.0-32.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 ruby-hivex 1.3.18-23.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 ruby-hivex 1.3.18-23.module_el8.6.0+3161+a07c0ea5
AlmaLinux · 8 ruby-libguestfs 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 seabios 1.16.0-3.module_el8.7.0+3346+68867adb
AlmaLinux · 8 seabios-bin 1.16.0-3.module_el8.7.0+3346+68867adb
AlmaLinux · 8 seavgabios-bin 1.16.0-3.module_el8.7.0+3346+68867adb
AlmaLinux · 8 sgabios 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 sgabios-bin 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 SLOF 20210217-1.module_el8.6.0+2880+7d9e3703
AlmaLinux · 8 supermin 5.2.1-2.module_el8.7.0+3346+68867adb
AlmaLinux · 8 supermin-devel 5.2.1-2.module_el8.7.0+3346+68867adb
AlmaLinux · 8 swtpm 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb
AlmaLinux · 8 swtpm-devel 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb
AlmaLinux · 8 swtpm-libs 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb
AlmaLinux · 8 swtpm-tools 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb
AlmaLinux · 8 swtpm-tools-pkcs11 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb
AlmaLinux · 8 virt-dib 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma
AlmaLinux · 8 virt-v2v 1:1.42.0-22.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 virt-v2v-bash-completion 1:1.42.0-22.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 virt-v2v-man-pages-ja 1:1.42.0-22.module_el8.8.0+3553+bd08596b
AlmaLinux · 8 virt-v2v-man-pages-uk 1:1.42.0-22.module_el8.8.0+3553+bd08596b

Vulnerabilities 7

References

  • report
    https://access.redhat.com/security/cve/CVE-2021-46790
  • report
    https://access.redhat.com/security/cve/CVE-2022-30784
  • report
    https://access.redhat.com/security/cve/CVE-2022-30786
  • report
    https://access.redhat.com/security/cve/CVE-2022-30788
  • report
    https://access.redhat.com/security/cve/CVE-2022-30789
  • report
    https://access.redhat.com/security/cve/CVE-2022-3165
  • report
    https://access.redhat.com/security/cve/CVE-2023-1018
  • report
    https://bugzilla.redhat.com/2018885
  • report
    https://bugzilla.redhat.com/2074205
  • report
    https://bugzilla.redhat.com/2090990
  • report
    https://bugzilla.redhat.com/2093314
  • report
    https://bugzilla.redhat.com/2093326
  • report
    https://bugzilla.redhat.com/2093340
  • report
    https://bugzilla.redhat.com/2093348
  • report
    https://bugzilla.redhat.com/2093358
  • report
    https://bugzilla.redhat.com/2117149
  • report
    https://bugzilla.redhat.com/2123196
  • report
    https://bugzilla.redhat.com/2124757
  • report
    https://bugzilla.redhat.com/2125119
  • report
    https://bugzilla.redhat.com/2128225
  • report
    https://bugzilla.redhat.com/2129739
  • report
    https://bugzilla.redhat.com/2132609
  • report
    https://bugzilla.redhat.com/2136591
  • report
    https://bugzilla.redhat.com/2137740
  • report
    https://bugzilla.redhat.com/2143907
  • report
    https://bugzilla.redhat.com/2147617
  • report
    https://bugzilla.redhat.com/2148578
  • report
    https://bugzilla.redhat.com/2149420
  • report
    https://bugzilla.redhat.com/2149752
  • report
    https://bugzilla.redhat.com/2152188
  • report
    https://bugzilla.redhat.com/2153688
  • report
    https://bugzilla.redhat.com/2161188
  • report
    https://bugzilla.redhat.com/2165011
  • report
    https://bugzilla.redhat.com/2165428
  • report
    https://bugzilla.redhat.com/2166573
  • report
    https://bugzilla.redhat.com/2168116
  • report
    https://bugzilla.redhat.com/2168187
  • report
    https://bugzilla.redhat.com/2172578
  • report
    https://bugzilla.redhat.com/2184183