Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update
An update for cockpit-ovirt, imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-14364US | medium5.0 | Exploit | ||
An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevi… | ||||
| CVE-2020-10713US | high8.2 | Exploit | ||
A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw also allows the bypass of Secure… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2020:4172self
- https://access.redhat.com/security/updates/classification/#importantexternal
- https://access.redhat.com/security/vulnerabilities/grub2bootloaderexternal
- 1805589external
- 1825243external
- 1847547external
- 1852721external
- 1859876external
Behebungen (24)
- Behobenredhat-virtualization-host-0:4.4.2-20200930.0.el8_2.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4172 - Behobenredhat-virtualization-host-0:4.4.2-20200930.0.el8_2.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4172 - Behobenredhat-virtualization-host-image-update-0:4.4.2-20200930.0.el8_2.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4172 - Behobenredhat-virtualization-host-image-update-0:4.4.2-20200930.0.el8_2.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2020:4172 - Workaroundcockpit-ovirt-0:0.14.11-1.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
There is no mitigation for the flaw.
- Workaroundcockpit-ovirt-0:0.14.11-1.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundcockpit-ovirt-dashboard-0:0.14.11-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
There is no mitigation for the flaw.
- Workaroundcockpit-ovirt-dashboard-0:0.14.11-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundimgbased-0:1.2.12-0.1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
There is no mitigation for the flaw.
- Workaroundimgbased-0:1.2.12-0.1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundimgbased-0:1.2.12-0.1.el8ev.src as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
There is no mitigation for the flaw.
- Workaroundimgbased-0:1.2.12-0.1.el8ev.src as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundpython3-imgbased-0:1.2.12-0.1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
There is no mitigation for the flaw.
- Workaroundpython3-imgbased-0:1.2.12-0.1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundredhat-release-virtualization-host-0:4.4.2-1.el8ev.src as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
There is no mitigation for the flaw.
- Workaroundredhat-release-virtualization-host-0:4.4.2-1.el8ev.src as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundredhat-release-virtualization-host-0:4.4.2-1.el8ev.x86_64 as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
There is no mitigation for the flaw.
- Workaroundredhat-release-virtualization-host-0:4.4.2-1.el8ev.x86_64 as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundredhat-virtualization-host-0:4.4.2-20200930.0.el8_2.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8
There is no mitigation for the flaw.
- Workaroundredhat-virtualization-host-0:4.4.2-20200930.0.el8_2.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundredhat-virtualization-host-image-update-0:4.4.2-20200930.0.el8_2.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8
There is no mitigation for the flaw.
- Workaroundredhat-virtualization-host-image-update-0:4.4.2-20200930.0.el8_2.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
- Workaroundredhat-virtualization-host-image-update-placeholder-0:4.4.2-1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
There is no mitigation for the flaw.
- Workaroundredhat-virtualization-host-image-update-placeholder-0:4.4.2-1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
Using Libvirt management interface to manage guest VMs significantly reduces impact of this issue. Libvirt starts each guest process with an unprivileged system user(ex. qemu) privileges and further confines the process with strict sVirt and SELinux policies. * https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/virtualization_security_guide/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan