Red Hat Security Advisory

RHSA-2022:0397

virt:av and virt-devel:av security and bug fix update

Released 2022-02-02 · Red Hat rating Low · View on Red Hat →

Fixed in

Advanced Virtualization for RHEL 8.5.0.Z SLOF-20210217-1.module+el8.5.0+10946+35bb3930.noarch::virt:av, SLOF-20210217-1.module+el8.5.0+10946+35bb3930.src::virt-devel:av, SLOF-20210217-1.module+el8.5.0+10946+35bb3930.src::virt:av +47

TI-2021-03494 CVE-2021-20196 · GHSA-ggpp-fxg5-wp87

LOW 29

A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00479 Published 2021-05-26 Partial fix CWE-476

TI-2021-02650 CVE-2021-3716 · GHSA-3vpg-mwgf-4jvj

LOW 16

A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00582 Published 2022-03-02 Partial fix CWE-924