Red Hat Security Advisory

RHSA-2021:1125

virt:8.3 and virt-devel:8.3 security and bug fix update

Released 2021-04-08 · Red Hat rating Low · View on Red Hat →

Fixed in

Advanced Virtualization CodeReady Builder for RHEL 8.3.1 SLOF-20200717-1.gite18ddad8.module+el8.3.0+7638+07cf13d2.src::virt-devel:8.3, hivex-1.3.18-20.module+el8.3.0+6124+819ee737.i686::virt-devel:8.3, hivex-devel-1.3.18-20.module+el8.3.0+6124+819ee737.i686::virt-devel:8.3 +47
Advanced Virtualization for RHEL 8.3.1 SLOF-20200717-1.gite18ddad8.module+el8.3.0+7638+07cf13d2.noarch::virt:8.3, SLOF-20200717-1.gite18ddad8.module+el8.3.0+7638+07cf13d2.src::virt:8.3, hivex-1.3.18-20.module+el8.3.0+6124+819ee737.aarch64::virt:8.3 +47

Fixes 1 record

TI-2021-03517 CVE-2021-20221 · GHSA-3f6w-864h-4prm

Out-of-bounds read in qemu

LOW 27

An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00326 Published 2021-05-13 Partial fix CWE-125