ALSA-2023:5264
Dashboard / Vulnerabilities / ALSA-2023:5264
Summary: Important: virt:rhel and virt-devel:rhel security and bug fix update
Details: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service (CVE-2023-3354) * NTFS-3G: buffer overflow issue in NTFS-3G can cause code execution via crafted metadata in an NTFS image (CVE-2022-40284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * "No bootable device" with OS boot disk interface VirtIO-SCSI and with more than 9 VirtIO disks. (BZ#2228485)
References: https://access.redhat.com/errata/RHSA-2023:5264, https://access.redhat.com/security/cve/CVE-2022-40284, https://access.redhat.com/security/cve/CVE-2023-3354, https://bugzilla.redhat.com/2216478, https://bugzilla.redhat.com/2236130, https://errata.almalinux.org/8/ALSA-2023-5264.html
Affected packages
Package
Name: SLOF
Purl: pkg:rpm/almalinux/SLOF
Affected ranges
Type: ECOSYSTEM
Events:
