Oval Definition:oval:com.redhat.rhsa:def:20225263
Revision Date:2022-07-01Version:635
Title:RHSA-2022:5263: qemu-kvm security and bug fix update (Moderate)
Description:Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

Security Fix(es):

  • QEMU: virtio-net: map leaking on error during receive (CVE-2022-26353)

  • QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak (CVE-2022-26354)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

  • RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 (BZ#2071102)
  • Family:unixClass:patch
    Status:Reference(s):CVE-2022-26353
    CVE-2022-26354
    RHSA-2022:5263
    Platform(s):Red Hat Enterprise Linux 9
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 9 is installed
  • AND
  • qemu-guest-agent is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-guest-agent is signed with Red Hat redhatrelease2 key
  • qemu-img is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-img is signed with Red Hat redhatrelease2 key
  • qemu-kvm is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm is signed with Red Hat redhatrelease2 key
  • qemu-kvm-audio-pa is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-audio-pa is signed with Red Hat redhatrelease2 key
  • qemu-kvm-block-curl is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-block-curl is signed with Red Hat redhatrelease2 key
  • qemu-kvm-block-rbd is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-block-rbd is signed with Red Hat redhatrelease2 key
  • qemu-kvm-common is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-common is signed with Red Hat redhatrelease2 key
  • qemu-kvm-core is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-core is signed with Red Hat redhatrelease2 key
  • qemu-kvm-device-display-virtio-gpu is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-device-display-virtio-gpu is signed with Red Hat redhatrelease2 key
  • qemu-kvm-device-display-virtio-gpu-ccw is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-device-display-virtio-gpu-ccw is signed with Red Hat redhatrelease2 key
  • qemu-kvm-device-display-virtio-gpu-gl is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-device-display-virtio-gpu-gl is signed with Red Hat redhatrelease2 key
  • qemu-kvm-device-display-virtio-gpu-pci is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-device-display-virtio-gpu-pci is signed with Red Hat redhatrelease2 key
  • qemu-kvm-device-display-virtio-gpu-pci-gl is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-device-display-virtio-gpu-pci-gl is signed with Red Hat redhatrelease2 key
  • qemu-kvm-device-display-virtio-vga is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-device-display-virtio-vga is signed with Red Hat redhatrelease2 key
  • qemu-kvm-device-display-virtio-vga-gl is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-device-display-virtio-vga-gl is signed with Red Hat redhatrelease2 key
  • qemu-kvm-device-usb-host is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-device-usb-host is signed with Red Hat redhatrelease2 key
  • qemu-kvm-device-usb-redirect is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-device-usb-redirect is signed with Red Hat redhatrelease2 key
  • qemu-kvm-docs is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-docs is signed with Red Hat redhatrelease2 key
  • qemu-kvm-tools is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-tools is signed with Red Hat redhatrelease2 key
  • qemu-kvm-ui-egl-headless is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-ui-egl-headless is signed with Red Hat redhatrelease2 key
  • qemu-kvm-ui-opengl is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-kvm-ui-opengl is signed with Red Hat redhatrelease2 key
  • qemu-pr-helper is earlier than 17:6.2.0-11.el9_0.3
  • AND qemu-pr-helper is signed with Red Hat redhatrelease2 key
  • BACK