Red Hat Security Advisory: redhat-release-virtualization-host and redhat-virtualization-host security update

Fixed packages 2

Vulnerabilities 2

• Unscored —
  CVE-2020-10713 Public exploit

  A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB ver…

  grub2 grub2-signed grub2-unsigned grub2 Debian Ubuntu Azure Linux Alpine
  Jul 30, 2020
• Unscored —
  CVE-2020-14364 Public exploit

  An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue …

  qemu qemu xen qemu Virtualization Debian Ubuntu Alpine
  Aug 31, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/security/vulnerabilities/grub2bootloader
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1825243
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1845590
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1868307
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1869201
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4115.json
• report
  https://access.redhat.com/security/cve/CVE-2020-10713
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-10713
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-10713
• article
  https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html
• article
  https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/
• article
  https://www.openwall.com/lists/oss-security/2020/07/29/3
• report
  https://access.redhat.com/security/cve/CVE-2020-14364
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-14364
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-14364
• article
  https://www.openwall.com/lists/oss-security/2020/08/24/2
• article
  https://www.openwall.com/lists/oss-security/2020/08/24/3