RLSA-2020:4059 Important: virt:rhel security update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting wi...

CVE-2020-17376: Improper Restriction of XML External Entity Reference

An issue was discovered in Guest.migrate in virt/libvirt/guest.py in OpenStack Nova before 19.3.1, 20.x before 20.3.1, and 21.0.0. By performing a soft reboot of an instance that has previously undergone live migration, a user may gain access to destination host devices that share the same paths ...

openSUSE Security Update : xen (openSUSE-2020-1196)

This update for xen fixes the following issues : - bsc1174543 - secure boot related fixes - bsc1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable...

openSUSE Security Update : xen (openSUSE-2020-1190)

This update for xen fixes the following issues : - bsc1174543 - secure boot related fixes - bsc1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable...

Oracle Linux 8 : virt:ol (ELSA-2020-1358)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1358 advisory. - Resolves: bz1791565 CVE-2020-7039 virt:rhel/qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcpemu rhel-8.1.0.z - Resolves:...

PT-2020-21617

Name of the Vulnerable Software and Affected Versions xen affected versions not specified Description The issue concerns secure boot related fixes and the inability to hot-plug NIC via virt-manager, which should be live attached but instead asks to attach on next reboot. Recommendations At the...

PT-2020-21616

Name of the Vulnerable Software and Affected Versions xen affected versions not specified Description The issue concerns secure boot related fixes and problems with hot-plugging NIC via virt-manager, which should be live attached but instead asks to attach on next reboot. Recommendations At the...

SUSE-SU-2020:2166-1 Security update for xen

This update for xen fixes the following issues: - bsc1174543 - secure boot related fixes - bsc1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached...

PT-2020-22738

Name of the Vulnerable Software and Affected Versions xen affected versions not specified Description The issue concerns secure boot related fixes and problems with hot-plugging NIC via virt-manager, which should be live attached but instead asks to attach on next reboot. Recommendations At the...

SUSE-SU-2020:2160-1 Security update for xen

This update for xen fixes the following issues: - bsc1174543 - secure boot related fixes - bsc1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached...

SUSE-SU-2020:2159-1 Security update for xen

This update for xen fixes the following issues: - bsc1174543 - secure boot related fixes - bsc1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached...

SUSE-SU-2020:2158-1 Security update for xen

This update for xen fixes the following issues: - bsc1174543 - secure boot related fixes - bsc1172356 - Not able to hot-plug NIC via virt-manager, asks to attach on next reboot while it should be live attached...

PT-2020-22735

Name of the Vulnerable Software and Affected Versions xen affected versions not specified Description The issue concerns secure boot related fixes and problems with hot-plugging NIC via virt-manager, which should be live attached but instead asks to attach on next reboot. Recommendations At the...

PT-2020-22736

Name of the Vulnerable Software and Affected Versions xen affected versions not specified Description The issue relates to secure boot and hot-plug NIC functionality via virt-manager. Specifically, there are problems with secure boot related fixes and the inability to hot-plug a NIC via...

PT-2020-22737

Name of the Vulnerable Software and Affected Versions xen affected versions not specified Description The issue concerns secure boot related fixes and problems with hot-plugging NIC via virt-manager, which should be live attached but instead asks to attach on next reboot. Recommendations At the...

Important: Red Hat Security Advisory: Container-native Virtualization security, bug fix, and enhancement update

Red Hat OpenShift Virtualization release 2.4.0 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which giv...

openSUSE Security Update : salt (openSUSE-2020-1074)

This update for salt contains the following fixes : - Fix for TypeError in Tornado importer bsc1174165 - Require python3-distro only for TW bsc1173072 - Update to Salt version 3000: See release notes: https://docs.saltstack.com/en/latest/topics/releases/300 0.html - Add docker.logout to docker...

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:1974-1)

This update for salt contains the following fixes : Fix for TypeError in Tornado importer bsc1174165 Require python3-distro only for TW bsc1173072 Update to Salt version 3000: See release notes: https://docs.saltstack.com/en/latest/topics/releases/3000.html Add docker.logout to docker execution...

Important: virt:rhel security update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

PT-2021-2549

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.7 Description: The issue is caused by a buffer overflow in the Kernel-based Virtual Machine KVM subsystem of the Linux kernel, specifically affecting components arch/s390/kvm/kvm-s390.c, include/linux/kvm...