Red Hat Security AdvisoryRHSA-2020:5040
libvirt security and bug fix update
Released 2020-11-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libvirt-4.5.0-36.el7_9.3, libvirt-bash-completion-4.5.0-36.el7_9.3, libvirt-client-4.5.0-36.el7_9.3 +21
- Red Hat Enterprise Linux Client Optional (v. 7) libvirt-admin-4.5.0-36.el7_9.3, libvirt-daemon-lxc-4.5.0-36.el7_9.3, libvirt-devel-4.5.0-36.el7_9.3 +4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libvirt-4.5.0-36.el7_9.3, libvirt-admin-4.5.0-36.el7_9.3, libvirt-daemon-4.5.0-36.el7_9.3 +25
- Red Hat Enterprise Linux Server (v. 7) libvirt-4.5.0-36.el7_9.3, libvirt-bash-completion-4.5.0-36.el7_9.3, libvirt-client-4.5.0-36.el7_9.3 +26
- Red Hat Enterprise Linux Server Optional (v. 7) libvirt-admin-4.5.0-36.el7_9.3, libvirt-daemon-lxc-4.5.0-36.el7_9.3, libvirt-lock-sanlock-4.5.0-36.el7_9.3 +3
- Red Hat Enterprise Linux Workstation (v. 7) libvirt-4.5.0-36.el7_9.3, libvirt-bash-completion-4.5.0-36.el7_9.3, libvirt-client-4.5.0-36.el7_9.3 +22
- Red Hat Enterprise Linux Workstation Optional (v. 7) libvirt-admin-4.5.0-36.el7_9.3, libvirt-daemon-lxc-4.5.0-36.el7_9.3, libvirt-docs-4.5.0-36.el7_9.3 +3
Fixes 1 record
Priority LOW 30
A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00529 · Published 2020-10-06 · Partial fix CWE-415
