RHSA-2021:2737: Important: RHV-H security update (redhat-virtualization-host) 4.3.17
The redhat-virtualization-host packages provide the Red Hat Virtualization Host.<br>These packages include redhat-release-virtualization-host. Red Hat<br>Virtualization Hosts (RHVH) are installed using a special build of Red Hat<br>Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and<br>performing administrative tasks.<br>Security Fix(es):<br><li> kernel: sizet-to-int conversion vulnerability in the filesystem layer (CVE-2021-33909)</li> <li> kernel: use-after-free in net/bluetooth/hcievent.c when destroying an hcichan (CVE-2021-33034)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:2737?
The severity of RHSA-2021:2737 is classified as important.
How do I fix RHSA-2021:2737?
To fix RHSA-2021:2737, you need to update the affected packages to their latest recommended versions.
Which packages are affected by RHSA-2021:2737?
The affected packages for RHSA-2021:2737 include redhat-release-virtualization-host and redhat-virtualization-host among others.
What does RHSA-2021:2737 address?
RHSA-2021:2737 addresses vulnerabilities in the Red Hat Virtualization Host.
Is there a workaround for RHSA-2021:2737?
There are no documented workarounds for RHSA-2021:2737; updating to the fixed versions is recommended.