virt:ol and virt-devel:rhel security update

2021-03-0500:00:00

linux.oracle.com

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

JSON

qemu-kvm
[4.2.0-34.el8_3.4]

kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1919109]
kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1919109]
kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1919109]
Resolves: bz#1919109
(CVE-2020-35517 virt:rhel/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest [rhel-8.3.0.z])

OSVersionArchitecturePackageVersionFilename
oracle linux8srchivex< 1.3.18-20.modulehivex-1.3.18-20.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux8srclibguestfs< 1.40.2-25.0.1.modulelibguestfs-1.40.2-25.0.1.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux8srclibguestfs-winsupport< 8.2-1.modulelibguestfs-winsupport-8.2-1.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux8srclibiscsi< 1.18.0-8.modulelibiscsi-1.18.0-8.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux8srclibnbd< 1.2.2-1.modulelibnbd-1.2.2-1.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux8srclibvirt< 6.0.0-28.0.1.modulelibvirt-6.0.0-28.0.1.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux8srclibvirt-dbus< 1.3.0-2.modulelibvirt-dbus-1.3.0-2.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux8srclibvirt-python< 6.0.0-1.modulelibvirt-python-6.0.0-1.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux8srcnbdkit< 1.16.2-4.0.1.modulenbdkit-1.16.2-4.0.1.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux8srcnetcf< 0.2.8-12.modulenetcf-0.2.8-12.module+el8.3.0+7860+a7792d29.src.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	hivex	< 1.3.18-20.module	hivex-1.3.18-20.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux	8	src	libguestfs	< 1.40.2-25.0.1.module	libguestfs-1.40.2-25.0.1.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux	8	src	libguestfs-winsupport	< 8.2-1.module	libguestfs-winsupport-8.2-1.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux	8	src	libiscsi	< 1.18.0-8.module	libiscsi-1.18.0-8.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux	8	src	libnbd	< 1.2.2-1.module	libnbd-1.2.2-1.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux	8	src	libvirt	< 6.0.0-28.0.1.module	libvirt-6.0.0-28.0.1.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux	8	src	libvirt-dbus	< 1.3.0-2.module	libvirt-dbus-1.3.0-2.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux	8	src	libvirt-python	< 6.0.0-1.module	libvirt-python-6.0.0-1.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux	8	src	nbdkit	< 1.16.2-4.0.1.module	nbdkit-1.16.2-4.0.1.module+el8.3.0+7860+a7792d29.src.rpm
oracle linux	8	src	netcf	< 0.2.8-12.module	netcf-0.2.8-12.module+el8.3.0+7860+a7792d29.src.rpm