RHBA-2023:2451

csafUSredhat_csaf

Red Hat Bug Fix Advisory: virtio-win bug fix and enhancement update

view advisory published 2023-05-09

An update for virtio-win is now available for Red Hat Enterprise Linux 9.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-0664UShigh7.8—
A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • Fixedvirtio-win-0:1.9.33-0.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2023:2451
  • Fixedvirtio-win-0:1.9.33-0.el9_2.src as a component of Red Hat Enterprise Linux AppStream (v. 9)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2023:2451
  • Workaroundvirtio-win-0:1.9.33-0.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

  • Workaroundvirtio-win-0:1.9.33-0.el9_2.src as a component of Red Hat Enterprise Linux AppStream (v. 9)

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan