Skip to content
OpenAdvisories
Low RLSA-2019:3345 3 CVEs

Low: virt:rhel security, bug fix, and enhancement update

Published Nov 5, 2019 · Updated Feb 5, 2026

Ecosystem: Rocky Linux

Summary

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)

* QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)

* QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.

Fixed packages 9

ReleasePackageFixed in
Rocky Linux · 8 libiscsi 0:1.18.0-8.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 libiscsi 0:1.18.0-8.module+el8.4.0+534+4680a14e
Rocky Linux · 8 libiscsi 0:1.18.0-8.module+el8.6.0+847+b490afdd
Rocky Linux · 8 netcf 0:0.2.8-12.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 netcf 0:0.2.8-12.module+el8.4.0+534+4680a14e
Rocky Linux · 8 netcf 0:0.2.8-12.module+el8.6.0+847+b490afdd
Rocky Linux · 8 sgabios 1:0.20170427git-3.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 sgabios 1:0.20170427git-3.module+el8.4.0+534+4680a14e
Rocky Linux · 8 sgabios 1:0.20170427git-3.module+el8.6.0+847+b490afdd

Vulnerabilities 3

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1531543
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1662272
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1664463
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1667249
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1673010
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1673396
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1673401
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1678515
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1678979
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1679483
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1679966
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1680231
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1683681
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1684383
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1685151
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1686895
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1687541
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1687596
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1688062
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1689297
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1691356
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1691624
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1693299
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1693433
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1694148
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1697627
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1698133
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1707192
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1707598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1707706
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1710575
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1712670
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1712810
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1712946
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1714933
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1716347
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1716907
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1716908
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1717088