RHBA-2020:3172MediumCVSS 7.5

Red Hat Bug Fix Advisory: Advanced Virtualization bug fix and enhancement update

Published
July 28, 2020
Last Modified
August 6, 2026

🔗 CVE IDs covered (7)

CVE-2020-10702 →CVE-2020-10717 →CVE-2020-10761 →CVE-2020-14301 →CVE-2020-15890 →CVE-2019-15890 →CVE-2020-1983 →

📋 Description

CVE-2019-15890 — QEMU: Slirp: use-after-free during packet reassembly CVE-2020-1983 — QEMU: slirp: use-after-free in ip_reass() function in ip_input.c CVE-2020-10702 — qemu: weak signature generation in Pointer Authentication support for ARM CVE-2020-10717 — QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS CVE-2020-10761 — QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client CVE-2020-14301 — libvirt: leak of sensitive cookie information via dumpxml CVE-2020-15890 — luajit: out-of-bounds read because __gc handler frame traversal is mishandled

🎯 Affected products200

  • Advanced Virtualization CodeReady Builder for RHEL 8.2.1
  • Advanced Virtualization for RHEL 8.2.1
  • SLOF-0:20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.noarch (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • SLOF-0:20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.src (virt-devel:8.2) as a component of Advanced Virtualization CodeReady Builder for RHEL 8.2.1
  • SLOF-0:20191022-3.git899d9883.module+el8.2.0+5449+efc036dd.src (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-0:1.3.18-20.module+el8.2.0+5588+63a201c3.aarch64 (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-0:1.3.18-20.module+el8.2.0+5588+63a201c3.i686 (virt-devel:8.2) as a component of Advanced Virtualization CodeReady Builder for RHEL 8.2.1
  • hivex-0:1.3.18-20.module+el8.2.0+5588+63a201c3.ppc64le (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-0:1.3.18-20.module+el8.2.0+5588+63a201c3.s390x (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-0:1.3.18-20.module+el8.2.0+5588+63a201c3.src (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-0:1.3.18-20.module+el8.2.0+5588+63a201c3.x86_64 (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-debuginfo-0:1.3.18-20.module+el8.2.0+5588+63a201c3.aarch64 (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-debuginfo-0:1.3.18-20.module+el8.2.0+5588+63a201c3.i686 (virt-devel:8.2) as a component of Advanced Virtualization CodeReady Builder for RHEL 8.2.1
  • hivex-debuginfo-0:1.3.18-20.module+el8.2.0+5588+63a201c3.ppc64le (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-debuginfo-0:1.3.18-20.module+el8.2.0+5588+63a201c3.s390x (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-debuginfo-0:1.3.18-20.module+el8.2.0+5588+63a201c3.x86_64 (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-debugsource-0:1.3.18-20.module+el8.2.0+5588+63a201c3.aarch64 (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-debugsource-0:1.3.18-20.module+el8.2.0+5588+63a201c3.i686 (virt-devel:8.2) as a component of Advanced Virtualization CodeReady Builder for RHEL 8.2.1
  • hivex-debugsource-0:1.3.18-20.module+el8.2.0+5588+63a201c3.ppc64le (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-debugsource-0:1.3.18-20.module+el8.2.0+5588+63a201c3.s390x (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-debugsource-0:1.3.18-20.module+el8.2.0+5588+63a201c3.x86_64 (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-devel-0:1.3.18-20.module+el8.2.0+5588+63a201c3.aarch64 (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-devel-0:1.3.18-20.module+el8.2.0+5588+63a201c3.i686 (virt-devel:8.2) as a component of Advanced Virtualization CodeReady Builder for RHEL 8.2.1
  • hivex-devel-0:1.3.18-20.module+el8.2.0+5588+63a201c3.ppc64le (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-devel-0:1.3.18-20.module+el8.2.0+5588+63a201c3.s390x (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • hivex-devel-0:1.3.18-20.module+el8.2.0+5588+63a201c3.x86_64 (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • libguestfs-1:1.40.2-24.module+el8.2.1+7154+47ffd890.aarch64 (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • libguestfs-1:1.40.2-24.module+el8.2.1+7154+47ffd890.ppc64le (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • libguestfs-1:1.40.2-24.module+el8.2.1+7154+47ffd890.s390x (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • libguestfs-1:1.40.2-24.module+el8.2.1+7154+47ffd890.src (virt:8.2) as a component of Advanced Virtualization for RHEL 8.2.1
  • +170 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (39)