(RHSA-2023:0099) Moderate: virt:rhel and virt-devel:rhel security and bug fix update

2023-01-1208:25:29

access.redhat.com

kvm full virtualization api

qemu qxl vulnerability

libvirt bug fixes

1g hugepages

vnc hang

0.0004 Low

EPSS

Percentile

14.4%

JSON

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for
Linux on numerous hardware platforms. The virt:rhel module contains packages
which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read (CVE-2022-4144)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

libvirt kills virtual machine on restart when 2M and 1G hugepages are mounted (BZ#2132176)
VMs hung on vnc_clipboard_send (BZ#2148504)

OSVersionArchitecturePackageVersionFilename
RedHatanynoarchlibguestfs-tools< 1.44.0-9.module+el8.7.0+16689+53d59bc2libguestfs-tools-1.44.0-9.module+el8.7.0+16689+53d59bc2.noarch.rpm
RedHatanyppc64leqemu-kvm-debugsource< 6.2.0-21.module+el8.7.0+17573+effbd7e8.2qemu-kvm-debugsource-6.2.0-21.module+el8.7.0+17573+effbd7e8.2.ppc64le.rpm
RedHatanyppc64lenbdkit-gzip-plugin-debuginfo< 1.24.0-4.module+el8.7.0+16689+53d59bc2nbdkit-gzip-plugin-debuginfo-1.24.0-4.module+el8.7.0+16689+53d59bc2.ppc64le.rpm
RedHatanyppc64lelibnbd-debuginfo< 1.6.0-5.module+el8.7.0+16689+53d59bc2libnbd-debuginfo-1.6.0-5.module+el8.7.0+16689+53d59bc2.ppc64le.rpm
RedHatanys390xnbdkit-tar-filter-debuginfo< 1.24.0-4.module+el8.7.0+16689+53d59bc2nbdkit-tar-filter-debuginfo-1.24.0-4.module+el8.7.0+16689+53d59bc2.s390x.rpm
RedHatanyi686netcf-debugsource< 0.2.8-12.module+el8.7.0+16689+53d59bc2netcf-debugsource-0.2.8-12.module+el8.7.0+16689+53d59bc2.i686.rpm
RedHatanys390xperl-sys-virt-debugsource< 8.0.0-1.module+el8.7.0+16689+53d59bc2perl-Sys-Virt-debugsource-8.0.0-1.module+el8.7.0+16689+53d59bc2.s390x.rpm
RedHatanyppc64leqemu-kvm-block-ssh-debuginfo< 6.2.0-21.module+el8.7.0+17573+effbd7e8.2qemu-kvm-block-ssh-debuginfo-6.2.0-21.module+el8.7.0+17573+effbd7e8.2.ppc64le.rpm
RedHatanyi686libvirt-daemon-config-network< 8.0.0-10.1.module+el8.7.0+17192+cbc2449blibvirt-daemon-config-network-8.0.0-10.1.module+el8.7.0+17192+cbc2449b.i686.rpm
RedHatanys390xnbdkit-curl-plugin-debuginfo< 1.24.0-4.module+el8.7.0+16689+53d59bc2nbdkit-curl-plugin-debuginfo-1.24.0-4.module+el8.7.0+16689+53d59bc2.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	noarch	libguestfs-tools	< 1.44.0-9.module+el8.7.0+16689+53d59bc2	libguestfs-tools-1.44.0-9.module+el8.7.0+16689+53d59bc2.noarch.rpm
RedHat	any	ppc64le	qemu-kvm-debugsource	< 6.2.0-21.module+el8.7.0+17573+effbd7e8.2	qemu-kvm-debugsource-6.2.0-21.module+el8.7.0+17573+effbd7e8.2.ppc64le.rpm
RedHat	any	ppc64le	nbdkit-gzip-plugin-debuginfo	< 1.24.0-4.module+el8.7.0+16689+53d59bc2	nbdkit-gzip-plugin-debuginfo-1.24.0-4.module+el8.7.0+16689+53d59bc2.ppc64le.rpm
RedHat	any	ppc64le	libnbd-debuginfo	< 1.6.0-5.module+el8.7.0+16689+53d59bc2	libnbd-debuginfo-1.6.0-5.module+el8.7.0+16689+53d59bc2.ppc64le.rpm
RedHat	any	s390x	nbdkit-tar-filter-debuginfo	< 1.24.0-4.module+el8.7.0+16689+53d59bc2	nbdkit-tar-filter-debuginfo-1.24.0-4.module+el8.7.0+16689+53d59bc2.s390x.rpm
RedHat	any	i686	netcf-debugsource	< 0.2.8-12.module+el8.7.0+16689+53d59bc2	netcf-debugsource-0.2.8-12.module+el8.7.0+16689+53d59bc2.i686.rpm
RedHat	any	s390x	perl-sys-virt-debugsource	< 8.0.0-1.module+el8.7.0+16689+53d59bc2	perl-Sys-Virt-debugsource-8.0.0-1.module+el8.7.0+16689+53d59bc2.s390x.rpm
RedHat	any	ppc64le	qemu-kvm-block-ssh-debuginfo	< 6.2.0-21.module+el8.7.0+17573+effbd7e8.2	qemu-kvm-block-ssh-debuginfo-6.2.0-21.module+el8.7.0+17573+effbd7e8.2.ppc64le.rpm
RedHat	any	i686	libvirt-daemon-config-network	< 8.0.0-10.1.module+el8.7.0+17192+cbc2449b	libvirt-daemon-config-network-8.0.0-10.1.module+el8.7.0+17192+cbc2449b.i686.rpm
RedHat	any	s390x	nbdkit-curl-plugin-debuginfo	< 1.24.0-4.module+el8.7.0+16689+53d59bc2	nbdkit-curl-plugin-debuginfo-1.24.0-4.module+el8.7.0+16689+53d59bc2.s390x.rpm