Red Hat Security Advisory

RHSA-2021:2522

Red Hat Virtualization Host security update [ovirt-4.4.6]

Released 2021-06-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.4.6-20210615.0.el8_4, redhat-virtualization-host-image-update-4.4.6-20210615.0.el8_4

Fixes 4 records

TI-2021-02511 CVE-2021-3560 · GHSA-7c49-j253-wq5r

Incorrect authorization in polkit

CRITICAL 93KEV

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.22193 Published 2022-02-16 Fixed CWE-863

TI-2020-15004 CVE-2020-24489 · GHSA-v4xf-4525-wqq9

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to…

MEDIUM 40

Incomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00352 Published 2021-06-09 Fixed CWE-459

TI-2021-08762 CVE-2021-27219 · GHSA-2wvj-9m7h-43j3

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3.

LOW 38

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03063 Published 2021-02-15 Fixed CWE-681

TI-2021-02460 CVE-2021-3501 · GHSA-hvwc-6fg8-r6p5

Out-of-bounds write in Linux kernel

LOW 31

A flaw was found in the Linux kernel in versions before 5.12.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00377 Published 2021-05-05 Fixed in 5.10.32, 5.11.16 CWE-787