Rocky Linux: CVE-2021-20295: virt-rhel-and-virt-devel-rhel (RLSA-2021-1064)
Description
It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for the qemu-kvm component issue CVE-2020-10756, which was previously corrected in virt:rhel/qemu-kvm via erratum RHSA-2020:4059 (https://access.redhat.com/errata/RHSA-2020:4059). CVE-2021-20295 was assigned to that Red Hat specific security regression. For more details about the original security issue CVE-2020-10756, refer to bug 1835986 or the CVE page: https://access.redhat.com/security/cve/CVE-2020-10756.
Solution(s)
- rocky-upgrade-hivex
- rocky-upgrade-hivex-debuginfo
- rocky-upgrade-hivex-debugsource
- rocky-upgrade-hivex-devel
- rocky-upgrade-libguestfs-winsupport
- rocky-upgrade-libiscsi
- rocky-upgrade-libiscsi-debuginfo
- rocky-upgrade-libiscsi-debugsource
- rocky-upgrade-libiscsi-devel
- rocky-upgrade-libiscsi-utils
- rocky-upgrade-libiscsi-utils-debuginfo
- rocky-upgrade-libnbd
- rocky-upgrade-libnbd-debuginfo
- rocky-upgrade-libnbd-debugsource
- rocky-upgrade-libnbd-devel
- rocky-upgrade-libvirt-dbus
- rocky-upgrade-libvirt-dbus-debuginfo
- rocky-upgrade-libvirt-dbus-debugsource
- rocky-upgrade-libvirt-python-debugsource
- rocky-upgrade-nbdfuse
- rocky-upgrade-nbdfuse-debuginfo
- rocky-upgrade-nbdkit
- rocky-upgrade-nbdkit-basic-filters
- rocky-upgrade-nbdkit-basic-filters-debuginfo
- rocky-upgrade-nbdkit-basic-plugins
- rocky-upgrade-nbdkit-basic-plugins-debuginfo
- rocky-upgrade-nbdkit-curl-plugin
- rocky-upgrade-nbdkit-curl-plugin-debuginfo
- rocky-upgrade-nbdkit-debuginfo
- rocky-upgrade-nbdkit-debugsource
- rocky-upgrade-nbdkit-devel
- rocky-upgrade-nbdkit-example-plugins
- rocky-upgrade-nbdkit-example-plugins-debuginfo
- rocky-upgrade-nbdkit-gzip-plugin
- rocky-upgrade-nbdkit-gzip-plugin-debuginfo
- rocky-upgrade-nbdkit-linuxdisk-plugin
- rocky-upgrade-nbdkit-linuxdisk-plugin-debuginfo
- rocky-upgrade-nbdkit-python-plugin
- rocky-upgrade-nbdkit-python-plugin-debuginfo
- rocky-upgrade-nbdkit-server
- rocky-upgrade-nbdkit-server-debuginfo
- rocky-upgrade-nbdkit-ssh-plugin
- rocky-upgrade-nbdkit-ssh-plugin-debuginfo
- rocky-upgrade-nbdkit-vddk-plugin
- rocky-upgrade-nbdkit-vddk-plugin-debuginfo
- rocky-upgrade-nbdkit-xz-filter
- rocky-upgrade-nbdkit-xz-filter-debuginfo
- rocky-upgrade-netcf
- rocky-upgrade-netcf-debuginfo
- rocky-upgrade-netcf-debugsource
- rocky-upgrade-netcf-devel
- rocky-upgrade-netcf-libs
- rocky-upgrade-netcf-libs-debuginfo
- rocky-upgrade-ocaml-hivex
- rocky-upgrade-ocaml-hivex-debuginfo
- rocky-upgrade-ocaml-hivex-devel
- rocky-upgrade-ocaml-libnbd
- rocky-upgrade-ocaml-libnbd-debuginfo
- rocky-upgrade-ocaml-libnbd-devel
- rocky-upgrade-perl-Sys-Virt
- rocky-upgrade-perl-Sys-Virt-debuginfo
- rocky-upgrade-perl-Sys-Virt-debugsource
- rocky-upgrade-perl-hivex
- rocky-upgrade-perl-hivex-debuginfo
- rocky-upgrade-python3-hivex
- rocky-upgrade-python3-hivex-debuginfo
- rocky-upgrade-python3-libnbd
- rocky-upgrade-python3-libnbd-debuginfo
- rocky-upgrade-python3-libvirt
- rocky-upgrade-python3-libvirt-debuginfo
- rocky-upgrade-ruby-hivex
- rocky-upgrade-ruby-hivex-debuginfo
- rocky-upgrade-seabios
- rocky-upgrade-sgabios
- rocky-upgrade-supermin
- rocky-upgrade-supermin-debuginfo
- rocky-upgrade-supermin-debugsource
- rocky-upgrade-supermin-devel
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center