RLSA-2019:3345

Dashboard / Vulnerabilities / RLSA-2019:3345

RLSA-2019:3345

Summary: Low: virt:rhel security, bug fix, and enhancement update

Details: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems. Security Fix(es): * ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755) * QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824) * QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.

References: https://errata.rockylinux.org/RLSA-2019:3345, https://bugzilla.redhat.com/show_bug.cgi?id=1531543, https://bugzilla.redhat.com/show_bug.cgi?id=1662272, https://bugzilla.redhat.com/show_bug.cgi?id=1664463, https://bugzilla.redhat.com/show_bug.cgi?id=1667249, https://bugzilla.redhat.com/show_bug.cgi?id=1673010, https://bugzilla.redhat.com/show_bug.cgi?id=1673396, https://bugzilla.redhat.com/show_bug.cgi?id=1673401, https://bugzilla.redhat.com/show_bug.cgi?id=1678515, https://bugzilla.redhat.com/show_bug.cgi?id=1678979, https://bugzilla.redhat.com/show_bug.cgi?id=1679483, https://bugzilla.redhat.com/show_bug.cgi?id=1679966, https://bugzilla.redhat.com/show_bug.cgi?id=1680231, https://bugzilla.redhat.com/show_bug.cgi?id=1683681, https://bugzilla.redhat.com/show_bug.cgi?id=1684383, https://bugzilla.redhat.com/show_bug.cgi?id=1685151, https://bugzilla.redhat.com/show_bug.cgi?id=1686895, https://bugzilla.redhat.com/show_bug.cgi?id=1687541, https://bugzilla.redhat.com/show_bug.cgi?id=1687596, https://bugzilla.redhat.com/show_bug.cgi?id=1688062, https://bugzilla.redhat.com/show_bug.cgi?id=1689297, https://bugzilla.redhat.com/show_bug.cgi?id=1691356, https://bugzilla.redhat.com/show_bug.cgi?id=1691624, https://bugzilla.redhat.com/show_bug.cgi?id=1693299, https://bugzilla.redhat.com/show_bug.cgi?id=1693433, https://bugzilla.redhat.com/show_bug.cgi?id=1694148, https://bugzilla.redhat.com/show_bug.cgi?id=1697627, https://bugzilla.redhat.com/show_bug.cgi?id=1698133, https://bugzilla.redhat.com/show_bug.cgi?id=1707192, https://bugzilla.redhat.com/show_bug.cgi?id=1707598, https://bugzilla.redhat.com/show_bug.cgi?id=1707706, https://bugzilla.redhat.com/show_bug.cgi?id=1710575, https://bugzilla.redhat.com/show_bug.cgi?id=1712670, https://bugzilla.redhat.com/show_bug.cgi?id=1712810, https://bugzilla.redhat.com/show_bug.cgi?id=1712946, https://bugzilla.redhat.com/show_bug.cgi?id=1714933, https://bugzilla.redhat.com/show_bug.cgi?id=1716347, https://bugzilla.redhat.com/show_bug.cgi?id=1716907, https://bugzilla.redhat.com/show_bug.cgi?id=1716908, https://bugzilla.redhat.com/show_bug.cgi?id=1717088, https://bugzilla.redhat.com/show_bug.cgi?id=1719578, https://bugzilla.redhat.com/show_bug.cgi?id=1721434, https://bugzilla.redhat.com/show_bug.cgi?id=1721983, https://bugzilla.redhat.com/show_bug.cgi?id=1722668, https://bugzilla.redhat.com/show_bug.cgi?id=1722735, https://bugzilla.redhat.com/show_bug.cgi?id=1727821, https://bugzilla.redhat.com/show_bug.cgi?id=1728530, https://bugzilla.redhat.com/show_bug.cgi?id=1728657, https://bugzilla.redhat.com/show_bug.cgi?id=1728958, https://bugzilla.redhat.com/show_bug.cgi?id=1729675, https://bugzilla.redhat.com/show_bug.cgi?id=1732642, https://bugzilla.redhat.com/show_bug.cgi?id=1737790, https://bugzilla.redhat.com/show_bug.cgi?id=1738839, https://bugzilla.redhat.com/show_bug.cgi?id=1738886, https://bugzilla.redhat.com/show_bug.cgi?id=1740797, https://bugzilla.redhat.com/show_bug.cgi?id=1741825, https://bugzilla.redhat.com/show_bug.cgi?id=1741837, https://bugzilla.redhat.com/show_bug.cgi?id=1742819, https://bugzilla.redhat.com/show_bug.cgi?id=1744415, https://bugzilla.redhat.com/show_bug.cgi?id=1747185, https://bugzilla.redhat.com/show_bug.cgi?id=1747440, https://bugzilla.redhat.com/show_bug.cgi?id=1749227