(RHSA-2021:1125) Low: virt:8.3 and virt-devel:8.3 security and bug fix update

2021-04-0707:37:40

access.redhat.com

0.0004 Low

EPSS

Percentile

14.2%

JSON

The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Red Hat products.

Security Fix(es):

qemu: out-of-bound heap buffer access via an interrupt ID field (CVE-2021-20221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Libvirt shouldn’t set the MTU of an unmanaged tap/macvtap device, it should just pass the mtu to the guest (BZ#1924681)
libvirtd crashes in virEventThreadWorker (BZ#1942010)

OSVersionArchitecturePackageVersionFilename
RedHatanys390xqemu-kvm-block-iscsi-debuginfo< 5.1.0-21.module+el8.3.1+10464+8ad18d1aqemu-kvm-block-iscsi-debuginfo-5.1.0-21.module+el8.3.1+10464+8ad18d1a.s390x.rpm
RedHatanyaarch64netcf-devel< 0.2.8-12.module+el8.3.0+6124+819ee737netcf-devel-0.2.8-12.module+el8.3.0+6124+819ee737.aarch64.rpm
RedHatanyppc64lenbdkit-server-debuginfo< 1.22.0-2.module+el8.3.0+8203+18ecf00enbdkit-server-debuginfo-1.22.0-2.module+el8.3.0+8203+18ecf00e.ppc64le.rpm
RedHatanyx86_64nbdkit-xz-filter< 1.22.0-2.module+el8.3.0+8203+18ecf00enbdkit-xz-filter-1.22.0-2.module+el8.3.0+8203+18ecf00e.x86_64.rpm
RedHatanys390xlibvirt-daemon-config-network< 6.6.0-13.2.module+el8.3.1+10483+85317cf0libvirt-daemon-config-network-6.6.0-13.2.module+el8.3.1+10483+85317cf0.s390x.rpm
RedHatanys390xlibguestfs-java-debuginfo< 1.42.0-2.module+el8.3.0+6798+ad6e66belibguestfs-java-debuginfo-1.42.0-2.module+el8.3.0+6798+ad6e66be.s390x.rpm
RedHatanyx86_64nbdfuse< 1.4.0-2.module+el8.3.0+7998+6ff5e5abnbdfuse-1.4.0-2.module+el8.3.0+7998+6ff5e5ab.x86_64.rpm
RedHatanyaarch64qemu-kvm-tests-debuginfo< 5.1.0-21.module+el8.3.1+10464+8ad18d1aqemu-kvm-tests-debuginfo-5.1.0-21.module+el8.3.1+10464+8ad18d1a.aarch64.rpm
RedHatanyppc64leruby-libguestfs-debuginfo< 1.42.0-2.module+el8.3.0+6798+ad6e66beruby-libguestfs-debuginfo-1.42.0-2.module+el8.3.0+6798+ad6e66be.ppc64le.rpm
RedHatanyppc64lelibguestfs-tools-c< 1.42.0-2.module+el8.3.0+6798+ad6e66belibguestfs-tools-c-1.42.0-2.module+el8.3.0+6798+ad6e66be.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	s390x	qemu-kvm-block-iscsi-debuginfo	< 5.1.0-21.module+el8.3.1+10464+8ad18d1a	qemu-kvm-block-iscsi-debuginfo-5.1.0-21.module+el8.3.1+10464+8ad18d1a.s390x.rpm
RedHat	any	aarch64	netcf-devel	< 0.2.8-12.module+el8.3.0+6124+819ee737	netcf-devel-0.2.8-12.module+el8.3.0+6124+819ee737.aarch64.rpm
RedHat	any	ppc64le	nbdkit-server-debuginfo	< 1.22.0-2.module+el8.3.0+8203+18ecf00e	nbdkit-server-debuginfo-1.22.0-2.module+el8.3.0+8203+18ecf00e.ppc64le.rpm
RedHat	any	x86_64	nbdkit-xz-filter	< 1.22.0-2.module+el8.3.0+8203+18ecf00e	nbdkit-xz-filter-1.22.0-2.module+el8.3.0+8203+18ecf00e.x86_64.rpm
RedHat	any	s390x	libvirt-daemon-config-network	< 6.6.0-13.2.module+el8.3.1+10483+85317cf0	libvirt-daemon-config-network-6.6.0-13.2.module+el8.3.1+10483+85317cf0.s390x.rpm
RedHat	any	s390x	libguestfs-java-debuginfo	< 1.42.0-2.module+el8.3.0+6798+ad6e66be	libguestfs-java-debuginfo-1.42.0-2.module+el8.3.0+6798+ad6e66be.s390x.rpm
RedHat	any	x86_64	nbdfuse	< 1.4.0-2.module+el8.3.0+7998+6ff5e5ab	nbdfuse-1.4.0-2.module+el8.3.0+7998+6ff5e5ab.x86_64.rpm
RedHat	any	aarch64	qemu-kvm-tests-debuginfo	< 5.1.0-21.module+el8.3.1+10464+8ad18d1a	qemu-kvm-tests-debuginfo-5.1.0-21.module+el8.3.1+10464+8ad18d1a.aarch64.rpm
RedHat	any	ppc64le	ruby-libguestfs-debuginfo	< 1.42.0-2.module+el8.3.0+6798+ad6e66be	ruby-libguestfs-debuginfo-1.42.0-2.module+el8.3.0+6798+ad6e66be.ppc64le.rpm
RedHat	any	ppc64le	libguestfs-tools-c	< 1.42.0-2.module+el8.3.0+6798+ad6e66be	libguestfs-tools-c-1.42.0-2.module+el8.3.0+6798+ad6e66be.ppc64le.rpm