Low: virt:rhel and virt-devel:rhel security and bug fix update

2024-07-0800:00:00

errata.almalinux.org

kvm

linux

security fix

bug fix

virt:rhel

virt-devel:rhel

cve-2024-4418

jira:almalinux-36064

libvirt

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

Percentile

10.6%

JSON

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix:

virt:rhel/libvirt: stack use-after-free in virNetClientIOEventLoop (CVE-2024-4418)

Bug fix:

virsh destroy with --graceful destroyed a paused guest (qemu process paused by SIGSTOP) (JIRA:AlmaLinux-36064)

OSVersionArchitecturePackageVersionFilename
almalinux8i686ocaml-libnbd-devel< 1.6.0-5.module_el8.6.0+2880+7d9e3703ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.i686.rpm
almalinux8i686ocaml-hivex< 1.3.18-23.module_el8.6.0+2880+7d9e3703ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.i686.rpm
almalinux8i686ocaml-hivex-devel< 1.3.18-23.module_el8.6.0+2880+7d9e3703ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.i686.rpm
almalinux8i686ocaml-libnbd< 1.6.0-5.module_el8.6.0+2880+7d9e3703ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.i686.rpm
almalinux8noarchlibnbd-bash-completion< 1.6.0-5.module_el8.6.0+2880+7d9e3703libnbd-bash-completion-1.6.0-5.module_el8.6.0+2880+7d9e3703.noarch.rpm
almalinux8noarchsgabios-bin< 0.20170427git-3.module_el8.6.0+2880+7d9e3703sgabios-bin-0.20170427git-3.module_el8.6.0+2880+7d9e3703.noarch.rpm
almalinux8x86_64ocaml-hivex-devel< 1.3.18-23.module_el8.6.0+2880+7d9e3703ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.x86_64.rpm
almalinux8x86_64ocaml-hivex< 1.3.18-23.module_el8.6.0+2880+7d9e3703ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.x86_64.rpm
almalinux8x86_64ocaml-libguestfs-devel< 1.44.0-9.module_el8.7.0+3493+5ed0bd1c.almaocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.x86_64.rpm
almalinux8x86_64ocaml-libnbd< 1.6.0-5.module_el8.6.0+2880+7d9e3703ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	i686	ocaml-libnbd-devel	< 1.6.0-5.module_el8.6.0+2880+7d9e3703	ocaml-libnbd-devel-1.6.0-5.module_el8.6.0+2880+7d9e3703.i686.rpm
almalinux	8	i686	ocaml-hivex	< 1.3.18-23.module_el8.6.0+2880+7d9e3703	ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.i686.rpm
almalinux	8	i686	ocaml-hivex-devel	< 1.3.18-23.module_el8.6.0+2880+7d9e3703	ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.i686.rpm
almalinux	8	i686	ocaml-libnbd	< 1.6.0-5.module_el8.6.0+2880+7d9e3703	ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.i686.rpm
almalinux	8	noarch	libnbd-bash-completion	< 1.6.0-5.module_el8.6.0+2880+7d9e3703	libnbd-bash-completion-1.6.0-5.module_el8.6.0+2880+7d9e3703.noarch.rpm
almalinux	8	noarch	sgabios-bin	< 0.20170427git-3.module_el8.6.0+2880+7d9e3703	sgabios-bin-0.20170427git-3.module_el8.6.0+2880+7d9e3703.noarch.rpm
almalinux	8	x86_64	ocaml-hivex-devel	< 1.3.18-23.module_el8.6.0+2880+7d9e3703	ocaml-hivex-devel-1.3.18-23.module_el8.6.0+2880+7d9e3703.x86_64.rpm
almalinux	8	x86_64	ocaml-hivex	< 1.3.18-23.module_el8.6.0+2880+7d9e3703	ocaml-hivex-1.3.18-23.module_el8.6.0+2880+7d9e3703.x86_64.rpm
almalinux	8	x86_64	ocaml-libguestfs-devel	< 1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ocaml-libguestfs-devel-1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma.x86_64.rpm
almalinux	8	x86_64	ocaml-libnbd	< 1.6.0-5.module_el8.6.0+2880+7d9e3703	ocaml-libnbd-1.6.0-5.module_el8.6.0+2880+7d9e3703.x86_64.rpm