-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2020.3992
                    libvirt security and bug fix update
                             11 November 2020

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           libvirt
Publisher:         Red Hat
Operating System:  Red Hat Enterprise Linux Server 7
                   Red Hat Enterprise Linux WS/Desktop 7
Impact/Access:     Increased Privileges -- Existing Account
                   Denial of Service    -- Existing Account
Resolution:        Patch/Upgrade
CVE Names:         CVE-2020-25637  

Reference:         ESB-2020.3836
                   ESB-2020.3759
                   ESB-2020.3715
                   ESB-2020.3696
                   ESB-2020.3434

Original Bulletin: 
   https://access.redhat.com/errata/RHSA-2020:5040

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Moderate: libvirt security and bug fix update
Advisory ID:       RHSA-2020:5040-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2020:5040
Issue date:        2020-11-10
CVE Names:         CVE-2020-25637 
=====================================================================

1. Summary:

An update for libvirt is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Client (v. 7) - x86_64
Red Hat Enterprise Linux Client Optional (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64
Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Workstation (v. 7) - x86_64
Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64

3. Description:

The libvirt library contains a C API for managing and interacting with the
virtualization capabilities of Linux and other operating systems. In
addition, libvirt provides tools for remote management of virtualized
systems.

Security Fix(es):

* libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c
(CVE-2020-25637)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Bug Fix(es):

* libvirt destroying macvtap device of running VM after a failed incoming
migration of another VM with same macvtap "target device" (BZ#1868549)

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, libvirtd will be restarted
automatically.

5. Bugs fixed (https://bugzilla.redhat.com/):

1881037 - CVE-2020-25637 libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c

6. Package List:

Red Hat Enterprise Linux Client (v. 7):

Source:
libvirt-4.5.0-36.el7_9.3.src.rpm

x86_64:
libvirt-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-bash-completion-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-client-4.5.0-36.el7_9.3.i686.rpm
libvirt-client-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-config-network-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-config-nwfilter-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-interface-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-lxc-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-network-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-nodedev-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-nwfilter-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-qemu-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-secret-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-core-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-disk-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-gluster-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-logical-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-rbd-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-kvm-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.i686.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-libs-4.5.0-36.el7_9.3.i686.rpm
libvirt-libs-4.5.0-36.el7_9.3.x86_64.rpm

Red Hat Enterprise Linux Client Optional (v. 7):

x86_64:
libvirt-admin-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-lxc-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.i686.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-devel-4.5.0-36.el7_9.3.i686.rpm
libvirt-devel-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-docs-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-lock-sanlock-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-login-shell-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-nss-4.5.0-36.el7_9.3.i686.rpm
libvirt-nss-4.5.0-36.el7_9.3.x86_64.rpm

Red Hat Enterprise Linux ComputeNode (v. 7):

Source:
libvirt-4.5.0-36.el7_9.3.src.rpm

x86_64:
libvirt-bash-completion-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-client-4.5.0-36.el7_9.3.i686.rpm
libvirt-client-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.i686.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-libs-4.5.0-36.el7_9.3.i686.rpm
libvirt-libs-4.5.0-36.el7_9.3.x86_64.rpm

Red Hat Enterprise Linux ComputeNode Optional (v. 7):

x86_64:
libvirt-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-admin-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-config-network-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-config-nwfilter-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-interface-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-lxc-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-network-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-nodedev-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-nwfilter-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-qemu-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-secret-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-core-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-disk-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-gluster-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-logical-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-rbd-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-kvm-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-lxc-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.i686.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-devel-4.5.0-36.el7_9.3.i686.rpm
libvirt-devel-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-docs-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-lock-sanlock-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-login-shell-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-nss-4.5.0-36.el7_9.3.i686.rpm
libvirt-nss-4.5.0-36.el7_9.3.x86_64.rpm

Red Hat Enterprise Linux Server (v. 7):

Source:
libvirt-4.5.0-36.el7_9.3.src.rpm

ppc64:
libvirt-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-bash-completion-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-client-4.5.0-36.el7_9.3.ppc.rpm
libvirt-client-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-config-network-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-config-nwfilter-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-interface-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-lxc-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-network-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-nodedev-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-nwfilter-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-qemu-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-secret-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-storage-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-storage-core-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-storage-disk-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-storage-logical-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.ppc.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-devel-4.5.0-36.el7_9.3.ppc.rpm
libvirt-devel-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-docs-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-libs-4.5.0-36.el7_9.3.ppc.rpm
libvirt-libs-4.5.0-36.el7_9.3.ppc64.rpm

ppc64le:
libvirt-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-bash-completion-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-client-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-config-network-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-config-nwfilter-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-interface-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-lxc-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-network-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-nodedev-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-nwfilter-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-qemu-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-secret-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-storage-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-storage-core-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-storage-disk-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-storage-logical-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-kvm-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-devel-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-docs-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-libs-4.5.0-36.el7_9.3.ppc64le.rpm

s390x:
libvirt-4.5.0-36.el7_9.3.s390x.rpm
libvirt-bash-completion-4.5.0-36.el7_9.3.s390x.rpm
libvirt-client-4.5.0-36.el7_9.3.s390.rpm
libvirt-client-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-config-network-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-config-nwfilter-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-interface-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-lxc-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-network-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-nodedev-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-nwfilter-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-qemu-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-secret-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-storage-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-storage-core-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-storage-disk-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-storage-logical-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-kvm-4.5.0-36.el7_9.3.s390x.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.s390.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.s390x.rpm
libvirt-devel-4.5.0-36.el7_9.3.s390.rpm
libvirt-devel-4.5.0-36.el7_9.3.s390x.rpm
libvirt-docs-4.5.0-36.el7_9.3.s390x.rpm
libvirt-libs-4.5.0-36.el7_9.3.s390.rpm
libvirt-libs-4.5.0-36.el7_9.3.s390x.rpm

x86_64:
libvirt-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-bash-completion-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-client-4.5.0-36.el7_9.3.i686.rpm
libvirt-client-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-config-network-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-config-nwfilter-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-interface-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-lxc-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-network-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-nodedev-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-nwfilter-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-qemu-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-secret-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-core-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-disk-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-gluster-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-logical-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-rbd-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-kvm-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.i686.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-devel-4.5.0-36.el7_9.3.i686.rpm
libvirt-devel-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-docs-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-libs-4.5.0-36.el7_9.3.i686.rpm
libvirt-libs-4.5.0-36.el7_9.3.x86_64.rpm

Red Hat Enterprise Linux Server Optional (v. 7):

ppc64:
libvirt-admin-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-daemon-lxc-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.ppc.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-lock-sanlock-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-login-shell-4.5.0-36.el7_9.3.ppc64.rpm
libvirt-nss-4.5.0-36.el7_9.3.ppc.rpm
libvirt-nss-4.5.0-36.el7_9.3.ppc64.rpm

ppc64le:
libvirt-admin-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-daemon-lxc-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-lock-sanlock-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-login-shell-4.5.0-36.el7_9.3.ppc64le.rpm
libvirt-nss-4.5.0-36.el7_9.3.ppc64le.rpm

s390x:
libvirt-admin-4.5.0-36.el7_9.3.s390x.rpm
libvirt-daemon-lxc-4.5.0-36.el7_9.3.s390x.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.s390.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.s390x.rpm
libvirt-lock-sanlock-4.5.0-36.el7_9.3.s390x.rpm
libvirt-login-shell-4.5.0-36.el7_9.3.s390x.rpm
libvirt-nss-4.5.0-36.el7_9.3.s390.rpm
libvirt-nss-4.5.0-36.el7_9.3.s390x.rpm

x86_64:
libvirt-admin-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-lxc-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.i686.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-lock-sanlock-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-login-shell-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-nss-4.5.0-36.el7_9.3.i686.rpm
libvirt-nss-4.5.0-36.el7_9.3.x86_64.rpm

Red Hat Enterprise Linux Workstation (v. 7):

Source:
libvirt-4.5.0-36.el7_9.3.src.rpm

x86_64:
libvirt-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-bash-completion-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-client-4.5.0-36.el7_9.3.i686.rpm
libvirt-client-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-config-network-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-config-nwfilter-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-interface-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-lxc-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-network-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-nodedev-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-nwfilter-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-qemu-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-secret-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-core-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-disk-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-gluster-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-logical-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-rbd-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-kvm-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.i686.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-devel-4.5.0-36.el7_9.3.i686.rpm
libvirt-devel-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-libs-4.5.0-36.el7_9.3.i686.rpm
libvirt-libs-4.5.0-36.el7_9.3.x86_64.rpm

Red Hat Enterprise Linux Workstation Optional (v. 7):

x86_64:
libvirt-admin-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-daemon-lxc-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.i686.rpm
libvirt-debuginfo-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-docs-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-lock-sanlock-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-login-shell-4.5.0-36.el7_9.3.x86_64.rpm
libvirt-nss-4.5.0-36.el7_9.3.i686.rpm
libvirt-nss-4.5.0-36.el7_9.3.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2020-25637
https://access.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2020 Red Hat, Inc.
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=fzS3
- -----END PGP SIGNATURE-----

- --
RHSA-announce mailing list
RHSA-announce@redhat.com
https://www.redhat.com/mailman/listinfo/rhsa-announce

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=Bxze
-----END PGP SIGNATURE-----