Summary
Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.
Security Fix(es):
* libtpms: Libtpms Out-of-Bounds Read Vulnerability (CVE-2025-49133)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 33
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | hivex | 0:1.3.18-23.module+el8.10.0+1835+43f01cbb |
| Rocky Linux · 8 | hivex | 0:1.3.18-23.module+el8.10.0+1590+a67ab969 |
| Rocky Linux · 8 | libguestfs | 1:1.44.0-9.module+el8.10.0+1590+a67ab969.rocky |
| Rocky Linux · 8 | libguestfs | 1:1.44.0-9.module+el8.10.0+1835+43f01cbb.rocky.rocky |
| Rocky Linux · 8 | libguestfs-winsupport | 0:8.10-1.module+el8.10.0+1451+358d0d76 |
| Rocky Linux · 8 | libguestfs-winsupport | 0:8.10-1.module+el8.10.0+1835+43f01cbb |
| Rocky Linux · 8 | libiscsi | 0:1.18.0-8.module+el8.10.0+1835+43f01cbb |
| Rocky Linux · 8 | libiscsi | 0:1.18.0-8.module+el8.10.0+1590+a67ab969 |
| Rocky Linux · 8 | libnbd | 0:1.6.0-6.module+el8.10.0+1870+0a714c9f |
| Rocky Linux · 8 | libtpms | 0:0.9.1-3.20211126git1ff6fe1f43.module+el8.10.0+2014+5ad6bca0 |
| Rocky Linux · 8 | libvirt | 0:8.0.0-23.4.module+el8.10.0+2015+baffef50 |
| Rocky Linux · 8 | libvirt-dbus | 0:1.3.0-2.module+el8.10.0+1590+a67ab969 |
| Rocky Linux · 8 | libvirt-dbus | 0:1.3.0-2.module+el8.10.0+1835+43f01cbb |
| Rocky Linux · 8 | libvirt-python | 0:8.0.0-2.module+el8.10.0+1835+43f01cbb |
| Rocky Linux · 8 | libvirt-python | 0:8.0.0-2.module+el8.10.0+1590+a67ab969 |
| Rocky Linux · 8 | nbdkit | 0:1.24.0-5.module+el8.10.0+1835+43f01cbb |
| Rocky Linux · 8 | nbdkit | 0:1.24.0-5.module+el8.10.0+1590+a67ab969 |
| Rocky Linux · 8 | netcf | 0:0.2.8-12.module+el8.10.0+1835+43f01cbb |
| Rocky Linux · 8 | netcf | 0:0.2.8-12.module+el8.10.0+1590+a67ab969 |
| Rocky Linux · 8 | perl-Sys-Virt | 0:8.0.0-1.module+el8.10.0+1835+43f01cbb |
| Rocky Linux · 8 | perl-Sys-Virt | 0:8.0.0-1.module+el8.10.0+1590+a67ab969 |
| Rocky Linux · 8 | qemu-kvm | 5:6.2.0-53.module+el8.10.0+1882+0c885e98.2 |
| Rocky Linux · 8 | qemu-kvm | 5:6.2.0-53.module+el8.10.0+1870+0a714c9f |
| Rocky Linux · 8 | qemu-kvm | 5:6.2.0-53.module+el8.10.0+2055+8eb7870b.4 |
| Rocky Linux · 8 | seabios | 0:1.16.0-4.module+el8.9.0+1408+7b966129 |
| Rocky Linux · 8 | sgabios | 1:0.20170427git-3.module+el8.10.0+1590+a67ab969 |
| Rocky Linux · 8 | sgabios | 1:0.20170427git-3.module+el8.10.0+1835+43f01cbb |
| Rocky Linux · 8 | supermin | 0:5.2.1-2.module+el8.10.0+1590+a67ab969 |
| Rocky Linux · 8 | supermin | 0:5.2.1-2.module+el8.10.0+1835+43f01cbb |
| Rocky Linux · 8 | swtpm | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+1590+a67ab969 |
| Rocky Linux · 8 | swtpm | 0:0.7.0-4.20211109gitb79fd91.module+el8.10.0+1835+43f01cbb |
| Rocky Linux · 8 | virt-v2v | 1:1.42.0-22.module+el8.10.0+1590+a67ab969 |
| Rocky Linux · 8 | virt-v2v | 1:1.42.0-22.module+el8.10.0+1835+43f01cbb |
Vulnerabilities 1
-
Medium 5.9
Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue
Libtpms is a library that targets the integration of TPM functionality into hypervisors, primarily into Qemu. Libtpms, which is derived from the TPM 2.0 reference implementation code published by the Trusted Computing Group, is prone to a potential out of bou…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2371585