RedHatRHSA-2023:5587

HistoryOct 10, 2023 - 1:59 p.m.

(RHSA-2023:5587) Important: virt:rhel security update

2023-10-1013:59:54

access.redhat.com

rhsa-2023

virt:rhel

kernel-based virtual machine

security update

qemu

vnc

ntfs-3g

denial of service

buffer overflow

cve-2023-3354

cve-2022-40284

cvss score

0.001 Low

EPSS

Percentile

21.2%

JSON

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for
Linux on numerous hardware platforms. The virt:rhel module contains packages
which provide user-space components used to run virtual machines using KVM. The
packages also provide APIs for managing and interacting with the virtualized
systems.

Security Fix(es):

QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service (CVE-2023-3354)
NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image (CVE-2022-40284)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64lenbdkit-basic-plugins-debuginfo< 1.4.2-5.module+el8.1.0+4066+0f1aadabnbdkit-basic-plugins-debuginfo-1.4.2-5.module+el8.1.0+4066+0f1aadab.ppc64le.rpm
RedHatanyppc64lesupermin-debuginfo< 5.1.19-9.module+el8.1.0+4066+0f1aadabsupermin-debuginfo-5.1.19-9.module+el8.1.0+4066+0f1aadab.ppc64le.rpm
RedHatanyx86_64libvirt-client< 4.5.0-42.1.module+el8.2.0+14235+7beeb3f6libvirt-client-4.5.0-42.1.module+el8.2.0+14235+7beeb3f6.x86_64.rpm
RedHatanyx86_64libguestfs-rescue< 1.38.4-15.module+el8.2.0+5297+222a20aflibguestfs-rescue-1.38.4-15.module+el8.2.0+5297+222a20af.x86_64.rpm
RedHatanyppc64lelibvirt-daemon-driver-storage-logical< 4.5.0-42.1.module+el8.2.0+14235+7beeb3f6libvirt-daemon-driver-storage-logical-4.5.0-42.1.module+el8.2.0+14235+7beeb3f6.ppc64le.rpm
RedHatanyx86_64libvirt-daemon-config-nwfilter< 4.5.0-42.1.module+el8.2.0+14235+7beeb3f6libvirt-daemon-config-nwfilter-4.5.0-42.1.module+el8.2.0+14235+7beeb3f6.x86_64.rpm
RedHatanyx86_64netcf-debugsource< 0.2.8-12.module+el8.1.0+4066+0f1aadabnetcf-debugsource-0.2.8-12.module+el8.1.0+4066+0f1aadab.x86_64.rpm
RedHatanyx86_64perl-sys-virt-debugsource< 4.5.0-5.module+el8.1.0+4066+0f1aadabperl-Sys-Virt-debugsource-4.5.0-5.module+el8.1.0+4066+0f1aadab.x86_64.rpm
RedHatanyx86_64lua-guestfs-debuginfo< 1.38.4-15.module+el8.2.0+5297+222a20aflua-guestfs-debuginfo-1.38.4-15.module+el8.2.0+5297+222a20af.x86_64.rpm
RedHatanyx86_64nbdkit-plugin-gzip-debuginfo< 1.4.2-5.module+el8.1.0+4066+0f1aadabnbdkit-plugin-gzip-debuginfo-1.4.2-5.module+el8.1.0+4066+0f1aadab.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	nbdkit-basic-plugins-debuginfo	< 1.4.2-5.module+el8.1.0+4066+0f1aadab	nbdkit-basic-plugins-debuginfo-1.4.2-5.module+el8.1.0+4066+0f1aadab.ppc64le.rpm
RedHat	any	ppc64le	supermin-debuginfo	< 5.1.19-9.module+el8.1.0+4066+0f1aadab	supermin-debuginfo-5.1.19-9.module+el8.1.0+4066+0f1aadab.ppc64le.rpm
RedHat	any	x86_64	libvirt-client	< 4.5.0-42.1.module+el8.2.0+14235+7beeb3f6	libvirt-client-4.5.0-42.1.module+el8.2.0+14235+7beeb3f6.x86_64.rpm
RedHat	any	x86_64	libguestfs-rescue	< 1.38.4-15.module+el8.2.0+5297+222a20af	libguestfs-rescue-1.38.4-15.module+el8.2.0+5297+222a20af.x86_64.rpm
RedHat	any	ppc64le	libvirt-daemon-driver-storage-logical	< 4.5.0-42.1.module+el8.2.0+14235+7beeb3f6	libvirt-daemon-driver-storage-logical-4.5.0-42.1.module+el8.2.0+14235+7beeb3f6.ppc64le.rpm
RedHat	any	x86_64	libvirt-daemon-config-nwfilter	< 4.5.0-42.1.module+el8.2.0+14235+7beeb3f6	libvirt-daemon-config-nwfilter-4.5.0-42.1.module+el8.2.0+14235+7beeb3f6.x86_64.rpm
RedHat	any	x86_64	netcf-debugsource	< 0.2.8-12.module+el8.1.0+4066+0f1aadab	netcf-debugsource-0.2.8-12.module+el8.1.0+4066+0f1aadab.x86_64.rpm
RedHat	any	x86_64	perl-sys-virt-debugsource	< 4.5.0-5.module+el8.1.0+4066+0f1aadab	perl-Sys-Virt-debugsource-4.5.0-5.module+el8.1.0+4066+0f1aadab.x86_64.rpm
RedHat	any	x86_64	lua-guestfs-debuginfo	< 1.38.4-15.module+el8.2.0+5297+222a20af	lua-guestfs-debuginfo-1.38.4-15.module+el8.2.0+5297+222a20af.x86_64.rpm
RedHat	any	x86_64	nbdkit-plugin-gzip-debuginfo	< 1.4.2-5.module+el8.1.0+4066+0f1aadab	nbdkit-plugin-gzip-debuginfo-1.4.2-5.module+el8.1.0+4066+0f1aadab.x86_64.rpm

Rows per page:

1-10 of 3131

(RHSA-2023:5587) Important: virt:rhel security update

Related