Skip to content
OpenAdvisories
Low RLSA-2022:7472 4 CVEs

Low: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Published Nov 8, 2022 · Updated Feb 5, 2026

Ecosystem: Rocky Linux

Summary

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

The following packages have been upgraded to a later upstream version: qemu-kvm (6.2.0). (BZ#2066828)

Security Fix(es):

* QEMU: fdc: heap buffer overflow in DMA read data transfers (CVE-2021-3507)

* libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service (CVE-2022-0897)

* libguestfs: Buffer overflow in get_keys leads to DoS (CVE-2022-2211)

* swtpm: Unchecked header size indicator against expected size (CVE-2022-23645)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.

Fixed packages 30

ReleasePackageFixed in
Rocky Linux · 8 hivex 0:1.3.18-23.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 hivex 0:1.3.18-23.module+el8.6.0+847+b490afdd
Rocky Linux · 8 libguestfs 1:1.44.0-9.module+el8.7.0+1084+97b81f61.rocky
Rocky Linux · 8 libguestfs-winsupport 0:8.6-1.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 libguestfs-winsupport 0:8.6-1.module+el8.6.0+847+b490afdd
Rocky Linux · 8 libiscsi 0:1.18.0-8.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 libiscsi 0:1.18.0-8.module+el8.4.0+534+4680a14e
Rocky Linux · 8 libiscsi 0:1.18.0-8.module+el8.6.0+847+b490afdd
Rocky Linux · 8 libnbd 0:1.6.0-5.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 libnbd 0:1.6.0-5.module+el8.6.0+847+b490afdd
Rocky Linux · 8 libtpms 0:0.9.1-1.20211126git1ff6fe1f43.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 libvirt 0:8.0.0-10.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.4.0+534+4680a14e
Rocky Linux · 8 libvirt-dbus 0:1.3.0-2.module+el8.6.0+847+b490afdd
Rocky Linux · 8 libvirt-python 0:8.0.0-2.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 nbdkit 0:1.24.0-4.module+el8.6.0+847+b490afdd
Rocky Linux · 8 netcf 0:0.2.8-12.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 netcf 0:0.2.8-12.module+el8.4.0+534+4680a14e
Rocky Linux · 8 netcf 0:0.2.8-12.module+el8.6.0+847+b490afdd
Rocky Linux · 8 perl-Sys-Virt 0:8.0.0-1.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 perl-Sys-Virt 0:8.0.0-1.module+el8.6.0+847+b490afdd
Rocky Linux · 8 qemu-kvm 5:6.2.0-20.module+el8.7.0+1084+97b81f61.2
Rocky Linux · 8 seabios 0:1.16.0-3.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 sgabios 1:0.20170427git-3.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 sgabios 1:0.20170427git-3.module+el8.4.0+534+4680a14e
Rocky Linux · 8 sgabios 1:0.20170427git-3.module+el8.6.0+847+b490afdd
Rocky Linux · 8 supermin 0:5.2.1-2.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 swtpm 0:0.7.0-4.20211109gitb79fd91.module+el8.7.0+1084+97b81f61
Rocky Linux · 8 virt-v2v 1:1.42.0-21.module+el8.7.0+1084+97b81f61

Vulnerabilities 4

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1519071
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1851227
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1951118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1985827
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2028823
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2029980
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2051332
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2056491
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2060843
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2062610
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2062611
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2063883
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2066828
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2067118
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2067126
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2069946
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2070417
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2071070
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2072049
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2072377
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2072932
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2073012
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2075424
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2079582
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2083884
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2084566
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2089433
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2089623
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2091597
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2092756
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2095758
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2097209
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2097652
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2097947
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2100508
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2100862
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2101575
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2101787
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2107954