Off-by-one in QEMU - CVE-2021-3930

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU58812

Off-by-one in QEMU - CVE-2021-3930

Published: December 9, 2021


Vulnerability identifier: #VU58812
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-3930
CWE-ID: CWE-193
Exploitation vector: Adjecent network
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to an off-by-one error in the SCSI device emulation in QEMU. A remote user on the guest OS can can trigger an off-by-one error while processing MODE SELECT commands in mode_sense_page() if the 'page' argument is set to MODE_PAGE_ALLS (0x3f). Successful exploitation of the vulnerability may result in QEMU crash.


Affected software

QEMU
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
Anolis OS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
SUSE Linux Enterprise Server
Ubuntu
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
Red Hat Enterprise Linux Advanced Virtualization
VMware Tanzu Operations Manager
qemu-system-aarch64 (Ubuntu package)
qemu-system-s390x (Ubuntu package)
qemu-system (Ubuntu package)
qemu-system-misc (Ubuntu package)
qemu-system-sparc (Ubuntu package)
qemu-system-x86 (Ubuntu package)
qemu (Ubuntu package)
qemu-system-mips (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu-system-ppc (Ubuntu package)
netcf
netcf-devel
netcf-libs
sgabios-bin
sgabios
qemu-ipxe
libnbd
libnbd-devel
python3-libnbd
nbdfuse
libvirt-dbus
hivex-devel
ocaml-hivex
ocaml-hivex-devel
ruby-hivex
perl-hivex
hivex
python3-hivex
qemu-seabios
qemu-vgabios
seavgabios-bin
seabios-bin
seabios
nbdkit-vddk-plugin
nbdkit-server
nbdkit-ssh-plugin
nbdkit-xz-filter
nbdkit-bash-completion
nbdkit-python-plugin
nbdkit-linuxdisk-plugin
nbdkit-gzip-plugin
nbdkit-example-plugins
nbdkit-devel
nbdkit-curl-plugin
nbdkit-basic-plugins
nbdkit-basic-filters
nbdkit
libguestfs-gobject-devel
libguestfs-gobject
libguestfs
libguestfs-benchmarking
libguestfs-devel
libguestfs-gfs2
libguestfs-xfs
libguestfs-tools-c
libguestfs-rsync
libguestfs-rescue
libguestfs-java-devel
libguestfs-java
ocaml-libguestfs
ocaml-libguestfs-devel
perl-Sys-Guestfs
python3-libguestfs
lua-guestfs
libguestfs-bash-completion
libguestfs-inspect-icons
libguestfs-tools
virt-v2v
libguestfs-javadoc
virt-dib
libguestfs-man-pages-uk
ruby-libguestfs
libguestfs-man-pages-ja
qemu-ui-curses
qemu
qemu-ui-curses-debuginfo
qemu-ui-gtk
qemu-ui-gtk-debuginfo
qemu-ui-sdl
qemu-ui-sdl-debuginfo
qemu-block-rbd
qemu-block-rbd-debuginfo
qemu-kvm
qemu-arm
qemu-arm-debuginfo
qemu-ppc
qemu-ppc-debuginfo
qemu-x86
qemu-s390
qemu-s390-debuginfo
qemu-tools
qemu-audio-alsa
qemu-audio-alsa-debuginfo
qemu-audio-oss
qemu-audio-oss-debuginfo
qemu-tools-debuginfo
qemu-audio-pa
qemu-audio-pa-debuginfo
qemu-audio-sdl
qemu-audio-sdl-debuginfo
qemu-block-curl
qemu-block-curl-debuginfo
qemu-block-iscsi
qemu-block-iscsi-debuginfo
qemu-block-ssh
qemu-block-ssh-debuginfo
qemu-debugsource
qemu-guest-agent
qemu-guest-agent-debuginfo
qemu-lang
qemu-img
qemu-kvm-block-curl
qemu-kvm-block-iscsi
qemu-kvm-block-rbd
qemu-kvm-block-ssh
qemu-kvm-common
qemu-kvm-core
qemu-kvm-tests
qemu-kvm-block-gluster
qemu-system-x86-microvm (Ubuntu package)
qemu-system-x86-xen (Ubuntu package)
supermin-devel
supermin
qemu-ksm
qemu-chardev-baum
qemu-debuginfo
qemu-chardev-baum-debuginfo
qemu-hw-display-virtio-vga-debuginfo
qemu-hw-usb-redirect-debuginfo
qemu-ui-opengl
qemu-ui-opengl-debuginfo
qemu-ui-spice-app
qemu-ui-spice-app-debuginfo
qemu-hw-usb-redirect
qemu-hw-display-virtio-vga
qemu-hw-display-qxl-debuginfo
qemu-hw-display-qxl
qemu-ui-spice-core
qemu-chardev-spice-debuginfo
qemu-chardev-spice
qemu-audio-spice-debuginfo
qemu-audio-spice
qemu-hw-display-virtio-gpu
qemu-s390x-debuginfo
qemu-s390x
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-hw-s390x-virtio-gpu-ccw
qemu-x86-debuginfo
qemu-skiboot
qemu-ui-spice-core-debuginfo
qemu-hw-display-virtio-gpu-debuginfo
qemu-hw-display-virtio-gpu-pci
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-SLOF
python3-libvirt
perl-Sys-Virt
libvirt-daemon-driver-storage-disk
libvirt-lock-sanlock
libvirt
libvirt-admin
libvirt-bash-completion
libvirt-client
libvirt-daemon
libvirt-daemon-config-network
libvirt-daemon-config-nwfilter
libvirt-daemon-driver-interface
libvirt-daemon-driver-network
libvirt-daemon-driver-nodedev
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-qemu
libvirt-daemon-driver-secret
libvirt-daemon-driver-storage-core
libvirt-daemon-driver-storage
libvirt-nss
libvirt-libs
libvirt-docs
libvirt-devel
libvirt-daemon-kvm
libvirt-daemon-driver-storage-scsi
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-storage-mpath
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-storage-iscsi-direct
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-storage-gluster
libguestfs-winsupport
qemu-sgabios

How to mitigate CVE-2021-3930

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

qemu-system-aarch64 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
qemu-system-s390x (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.39, 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.24, 1:6.0+dfsg-2expubuntu1.2, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.39, 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.24, 1:6.0+dfsg-2expubuntu1.2, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system-misc (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.39, 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.24, 1:6.0+dfsg-2expubuntu1.2, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system-sparc (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.39, 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.24, 1:6.0+dfsg-2expubuntu1.2, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system-x86 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.39, 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.24, 1:6.0+dfsg-2expubuntu1.2, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6
qemu-system-mips (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.39, 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.24, 1:6.0+dfsg-2expubuntu1.2, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system-arm (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.39, 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.24, 1:6.0+dfsg-2expubuntu1.2, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
qemu-system-ppc (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:2.11+dfsg-1ubuntu7.39, 1:2.11+dfsg-1ubuntu7.41, 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.24, 1:6.0+dfsg-2expubuntu1.2, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
netcf - update to 0.2.8-12
netcf-devel - update to 0.2.8-12
netcf-libs - update to 0.2.8-12
sgabios-bin - update to 0.20170427git-3
sgabios - update to 0.20170427git-3
qemu-ipxe - addressed in versions 1.0.0+-63.4, 1.0.0+-150300.112.4
libnbd - update to 1.2.2-1.0.1
libnbd-devel - update to 1.2.2-1.0.1
python3-libnbd - update to 1.2.2-1.0.1
nbdfuse - update to 1.2.2-1.0.1
libvirt-dbus - update to 1.3.0-2
hivex-devel - update to 1.3.18-21
ocaml-hivex - update to 1.3.18-21
ocaml-hivex-devel - update to 1.3.18-21
ruby-hivex - update to 1.3.18-21
perl-hivex - update to 1.3.18-21
hivex - update to 1.3.18-21
python3-hivex - update to 1.3.18-21
qemu-seabios - addressed in versions 1.12.0_0_ga698c89-63.4, 1.14.0_0_g155821a-150300.112.4
qemu-vgabios - addressed in versions 1.12.0_0_ga698c89-63.4, 1.14.0_0_g155821a-150300.112.4
seavgabios-bin - update to 1.13.0-2
seabios-bin - update to 1.13.0-2
seabios - update to 1.13.0-2
nbdkit-vddk-plugin - update to 1.16.2-4
nbdkit-server - update to 1.16.2-4
nbdkit-ssh-plugin - update to 1.16.2-4
nbdkit-xz-filter - update to 1.16.2-4
nbdkit-bash-completion - update to 1.16.2-4
nbdkit-python-plugin - update to 1.16.2-4
nbdkit-linuxdisk-plugin - update to 1.16.2-4
nbdkit-gzip-plugin - update to 1.16.2-4
nbdkit-example-plugins - update to 1.16.2-4
nbdkit-devel - update to 1.16.2-4
nbdkit-curl-plugin - update to 1.16.2-4
nbdkit-basic-plugins - update to 1.16.2-4
nbdkit-basic-filters - update to 1.16.2-4
nbdkit - update to 1.16.2-4
libguestfs-gobject-devel - update to 1.40.2-28.0.1
libguestfs-gobject - update to 1.40.2-28.0.1
libguestfs - update to 1.40.2-28.0.1
libguestfs-benchmarking - update to 1.40.2-28.0.1
libguestfs-devel - update to 1.40.2-28.0.1
libguestfs-gfs2 - update to 1.40.2-28.0.1
libguestfs-xfs - update to 1.40.2-28.0.1
libguestfs-tools-c - update to 1.40.2-28.0.1
libguestfs-rsync - update to 1.40.2-28.0.1
libguestfs-rescue - update to 1.40.2-28.0.1
libguestfs-java-devel - update to 1.40.2-28.0.1
libguestfs-java - update to 1.40.2-28.0.1
ocaml-libguestfs - update to 1.40.2-28.0.1
ocaml-libguestfs-devel - update to 1.40.2-28.0.1
perl-Sys-Guestfs - update to 1.40.2-28.0.1
python3-libguestfs - update to 1.40.2-28.0.1
lua-guestfs - update to 1.40.2-28.0.1
libguestfs-bash-completion - update to 1.40.2-28.0.1
libguestfs-inspect-icons - update to 1.40.2-28.0.1
libguestfs-tools - update to 1.40.2-28.0.1
virt-v2v - update to 1.40.2-28.0.1
libguestfs-javadoc - update to 1.40.2-28.0.1
virt-dib - update to 1.40.2-28.0.1
libguestfs-man-pages-uk - update to 1.40.2-28.0.1
ruby-libguestfs - update to 1.40.2-28.0.1
libguestfs-man-pages-ja - update to 1.40.2-28.0.1
VMware Tanzu Operations Manager - addressed in versions 2.10.51, 3.0.2
qemu-ui-curses - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-ui-curses-debuginfo - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-ui-gtk - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-ui-gtk-debuginfo - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-ui-sdl - update to 3.1.1.1-63.4
qemu-ui-sdl-debuginfo - update to 3.1.1.1-63.4
qemu-block-rbd - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-block-rbd-debuginfo - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-kvm - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-arm - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-arm-debuginfo - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-ppc - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-ppc-debuginfo - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-x86 - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-s390 - update to 3.1.1.1-63.4
qemu-s390-debuginfo - update to 3.1.1.1-63.4
qemu-tools - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-audio-alsa - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-audio-alsa-debuginfo - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-audio-oss - update to 3.1.1.1-63.4
qemu-audio-oss-debuginfo - update to 3.1.1.1-63.4
qemu-tools-debuginfo - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-audio-pa - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-audio-pa-debuginfo - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-audio-sdl - update to 3.1.1.1-63.4
qemu-audio-sdl-debuginfo - update to 3.1.1.1-63.4
qemu-block-curl - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-block-curl-debuginfo - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-block-iscsi - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-block-iscsi-debuginfo - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-block-ssh - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-block-ssh-debuginfo - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-debugsource - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-guest-agent - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-guest-agent-debuginfo - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-lang - addressed in versions 3.1.1.1-63.4, 5.2.0-150300.112.4
qemu-img - update to 4.2.0-59.0.2
qemu-guest-agent - update to 4.2.0-59.0.2
qemu-kvm - update to 4.2.0-59.0.2
qemu-kvm-block-curl - update to 4.2.0-59.0.2
qemu-kvm-block-iscsi - update to 4.2.0-59.0.2
qemu-kvm-block-rbd - update to 4.2.0-59.0.2
qemu-kvm-block-ssh - update to 4.2.0-59.0.2
qemu-kvm-common - update to 4.2.0-59.0.2
qemu-kvm-core - update to 4.2.0-59.0.2
qemu-kvm-tests - update to 4.2.0-59.0.2
qemu-kvm-block-gluster - update to 4.2.0-59.0.2
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.24, 1:6.0+dfsg-2expubuntu1.2, 1:6.2+dfsg-2ubuntu6.6
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.24, 1:6.0+dfsg-2expubuntu1.2, 1:6.2+dfsg-2ubuntu6.6, 1:7.0+dfsg-7ubuntu2.1
supermin-devel - update to 5.1.19-10
supermin - update to 5.1.19-10
qemu-ksm - update to 5.2.0-150300.112.4
qemu-chardev-baum - update to 5.2.0-150300.112.4
qemu-debuginfo - update to 5.2.0-150300.112.4
qemu-chardev-baum-debuginfo - update to 5.2.0-150300.112.4
qemu-hw-display-virtio-vga-debuginfo - update to 5.2.0-150300.112.4
qemu-hw-usb-redirect-debuginfo - update to 5.2.0-150300.112.4
qemu-ui-opengl - update to 5.2.0-150300.112.4
qemu-ui-opengl-debuginfo - update to 5.2.0-150300.112.4
qemu-ui-spice-app - update to 5.2.0-150300.112.4
qemu-ui-spice-app-debuginfo - update to 5.2.0-150300.112.4
qemu-hw-usb-redirect - update to 5.2.0-150300.112.4
qemu-hw-display-virtio-vga - update to 5.2.0-150300.112.4
qemu-hw-display-qxl-debuginfo - update to 5.2.0-150300.112.4
qemu-hw-display-qxl - update to 5.2.0-150300.112.4
qemu-ui-spice-core - update to 5.2.0-150300.112.4
qemu-chardev-spice-debuginfo - update to 5.2.0-150300.112.4
qemu-chardev-spice - update to 5.2.0-150300.112.4
qemu-audio-spice-debuginfo - update to 5.2.0-150300.112.4
qemu-audio-spice - update to 5.2.0-150300.112.4
qemu-hw-display-virtio-gpu - update to 5.2.0-150300.112.4
qemu-s390x-debuginfo - update to 5.2.0-150300.112.4
qemu-s390x - update to 5.2.0-150300.112.4
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - update to 5.2.0-150300.112.4
qemu-hw-s390x-virtio-gpu-ccw - update to 5.2.0-150300.112.4
qemu-x86-debuginfo - update to 5.2.0-150300.112.4
qemu-skiboot - update to 5.2.0-150300.112.4
qemu-ui-spice-core-debuginfo - update to 5.2.0-150300.112.4
qemu-hw-display-virtio-gpu-debuginfo - update to 5.2.0-150300.112.4
qemu-hw-display-virtio-gpu-pci - update to 5.2.0-150300.112.4
qemu-hw-display-virtio-gpu-pci-debuginfo - update to 5.2.0-150300.112.4
qemu-SLOF - update to 5.2.0-150300.112.4
python3-libvirt - update to 6.0.0-1
perl-Sys-Virt - update to 6.0.0-1
libvirt-daemon-driver-storage-disk - update to 6.0.0-37.1.0.1
libvirt-lock-sanlock - update to 6.0.0-37.1.0.1
libvirt - update to 6.0.0-37.1.0.1
libvirt-admin - update to 6.0.0-37.1.0.1
libvirt-bash-completion - update to 6.0.0-37.1.0.1
libvirt-client - update to 6.0.0-37.1.0.1
libvirt-daemon - update to 6.0.0-37.1.0.1
libvirt-daemon-config-network - update to 6.0.0-37.1.0.1
libvirt-daemon-config-nwfilter - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-interface - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-network - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-nodedev - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-nwfilter - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-qemu - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-secret - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-core - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage - update to 6.0.0-37.1.0.1
libvirt-nss - update to 6.0.0-37.1.0.1
libvirt-libs - update to 6.0.0-37.1.0.1
libvirt-docs - update to 6.0.0-37.1.0.1
libvirt-devel - update to 6.0.0-37.1.0.1
libvirt-daemon-kvm - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-scsi - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-rbd - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-mpath - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-logical - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-iscsi-direct - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-iscsi - update to 6.0.0-37.1.0.1
libvirt-daemon-driver-storage-gluster - update to 6.0.0-37.1.0.1
libguestfs-winsupport - update to 8.2-1
qemu-sgabios - addressed in versions 8-63.4, 8-150300.112.4

External References

Related Security Bulletins