Skip to content
OpenAdvisories
Medium RLSA-2021:4191 7 CVEs

Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Published Nov 9, 2021 · Updated Feb 5, 2026

Ecosystem: Rocky Linux

Summary

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: net: e1000e: use-after-free while sending packets (CVE-2020-15859)

* QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) (CVE-2021-3592)

* QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) (CVE-2021-3593)

* QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) (CVE-2021-3594)

* QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) (CVE-2021-3595)

* libvirt: Insecure sVirt label generation (CVE-2021-3631)

* libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API (CVE-2021-3667)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

Fixed packages 24

ReleasePackageFixed in
Rocky Linux · 8 hivex 0:1.3.18-21.module+el8.4.0+642+7e26f5e1
Rocky Linux · 8 hivex 0:1.3.18-21.module+el8.5.0+670+c4aa478c
Rocky Linux · 8 libguestfs 1:1.40.2-28.module+el8.5.0+670+c4aa478c
Rocky Linux · 8 libguestfs-winsupport 0:8.2-1.module+el8.4.0+534+4680a14e
Rocky Linux · 8 libiscsi 0:1.18.0-8.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 libiscsi 0:1.18.0-8.module+el8.4.0+534+4680a14e
Rocky Linux · 8 libiscsi 0:1.18.0-8.module+el8.6.0+847+b490afdd
Rocky Linux · 8 libnbd 0:1.2.2-1.module+el8.4.0+534+4680a14e
Rocky Linux · 8 libvirt 0:6.0.0-37.module+el8.5.0+670+c4aa478c
Rocky Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.4.0+534+4680a14e
Rocky Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.6.0+847+b490afdd
Rocky Linux · 8 libvirt-python 0:6.0.0-1.module+el8.4.0+534+4680a14e
Rocky Linux · 8 nbdkit 0:1.16.2-4.module+el8.4.0+534+4680a14e
Rocky Linux · 8 netcf 0:0.2.8-12.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 netcf 0:0.2.8-12.module+el8.4.0+534+4680a14e
Rocky Linux · 8 netcf 0:0.2.8-12.module+el8.6.0+847+b490afdd
Rocky Linux · 8 perl-Sys-Virt 0:6.0.0-1.module+el8.4.0+534+4680a14e
Rocky Linux · 8 qemu-kvm 5:4.2.0-59.module+el8.5.0+670+c4aa478c
Rocky Linux · 8 seabios 0:1.13.0-2.module+el8.4.0+534+4680a14e
Rocky Linux · 8 sgabios 1:0.20170427git-3.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 sgabios 1:0.20170427git-3.module+el8.4.0+534+4680a14e
Rocky Linux · 8 sgabios 1:0.20170427git-3.module+el8.6.0+847+b490afdd
Rocky Linux · 8 supermin 0:5.1.19-10.module+el8.4.0+534+4680a14e

Vulnerabilities 7

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1855250
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1859168
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1929357
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1932823
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1933640
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1934509
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1939418
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1942805
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1961562
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1967329
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1967496
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1967716
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1967914
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1969848
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1970484
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1970487
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1970489
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1970491
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1977726
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1982134
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1986094
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1994041