Summary
Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.
Security Fix(es):
* QEMU: usb: out-of-bounds r/w access issue while processing usb packets (CVE-2020-14364)
* QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | libiscsi | 0:1.18.0-8.module+el8.7.0+1084+97b81f61 |
| Rocky Linux · 8 | libiscsi | 0:1.18.0-8.module+el8.4.0+534+4680a14e |
| Rocky Linux · 8 | libiscsi | 0:1.18.0-8.module+el8.6.0+847+b490afdd |
| Rocky Linux · 8 | netcf | 0:0.2.8-12.module+el8.7.0+1084+97b81f61 |
| Rocky Linux · 8 | netcf | 0:0.2.8-12.module+el8.4.0+534+4680a14e |
| Rocky Linux · 8 | netcf | 0:0.2.8-12.module+el8.6.0+847+b490afdd |
| Rocky Linux · 8 | sgabios | 1:0.20170427git-3.module+el8.7.0+1084+97b81f61 |
| Rocky Linux · 8 | sgabios | 1:0.20170427git-3.module+el8.4.0+534+4680a14e |
| Rocky Linux · 8 | sgabios | 1:0.20170427git-3.module+el8.6.0+847+b490afdd |
Vulnerabilities 2
-
Unscored —
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw oc…
-
Unscored —CVE-2020-14364 Public exploit
An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue …