Red Hat Security AdvisoryRHSA-2020:3586
virt:8.2 and virt-devel:8.2 security and bug fix update
Released 2020-09-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Advanced Virtualization CodeReady Builder for RHEL 8.2.1 SLOF-20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.src::virt-devel:8.2, hivex-1.3.18-20.module+el8.2.0+5588+63a201c3.i686::virt-devel:8.2, hivex-devel-1.3.18-20.module+el8.2.0+5588+63a201c3.i686::virt-devel:8.2 +47
- Advanced Virtualization for RHEL 8.2.1 SLOF-20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.noarch::virt:8.2, SLOF-20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.src::virt:8.2, hivex-1.3.18-20.module+el8.2.0+5588+63a201c3.aarch64::virt:8.2 +47
Fixes 2 records
Priority LOW 38
A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00421 · Published 2020-12-03 · Partial fix CWE-772
Priority LOW 29
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.0051 · Published 2020-07-09 · Partial fix · 4.3.1 CWE-125
