RHSA-2020:5040: Moderate: libvirt security and bug fix update

Published Nov 10, 2020
·
Updated

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.Security Fix(es): libvirt: double free in qemuAgentGetInterfaces() in qemuagent.c (CVE-2020-25637) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Bug Fix(es): libvirt destroying macvtap device of running VM after a failed incoming migration of another VM with same macvtap "target device" (BZ#1868549)

Affected Software

92 affected componentsFixes available
redhat/libvirt<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-admin<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-bash-completion<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-client<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-client<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-config-network<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-config-nwfilter<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-interface<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-lxc<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-network<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-nodedev<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-nwfilter<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-qemu<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-secret<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-core<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-disk<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-gluster<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-iscsi<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-logical<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-mpath<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-rbd<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-scsi<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-kvm<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-lxc<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-debuginfo<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-debuginfo<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-devel<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-devel<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-docs<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-libs<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-libs<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-lock-sanlock<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-login-shell<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-nss<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-nss<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-admin<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-bash-completion<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-config-network<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-config-nwfilter<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-interface<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-lxc<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-network<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-nodedev<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-nwfilter<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-qemu<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-secret<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-core<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-disk<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-iscsi<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-logical<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-mpath<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-scsi<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-kvm<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-lxc<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-docs<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-lock-sanlock<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-login-shell<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-admin<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-lock-sanlock<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-bash-completion<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-client<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-config-network<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-config-nwfilter<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-interface<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-lxc<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-network<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-nodedev<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-nwfilter<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-qemu<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-secret<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-core<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-disk<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-iscsi<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-logical<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-mpath<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-driver-storage-scsi<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-kvm<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-daemon-lxc<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-debuginfo<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-devel<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-docs<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-libs<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-login-shell<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3
redhat/libvirt-nss<4.5.0-36.el7_9.3
4.5.0-36.el7_9.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/libvirt to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  2. Upgrade

    Upgrade redhat/libvirt-admin to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  3. Upgrade

    Upgrade redhat/libvirt-bash-completion to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  4. Upgrade

    Upgrade redhat/libvirt-client to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  5. Upgrade

    Upgrade redhat/libvirt-daemon to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  6. Upgrade

    Upgrade redhat/libvirt-daemon-config-network to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  7. Upgrade

    Upgrade redhat/libvirt-daemon-config-nwfilter to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  8. Upgrade

    Upgrade redhat/libvirt-daemon-driver-interface to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  9. Upgrade

    Upgrade redhat/libvirt-daemon-driver-lxc to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  10. Upgrade

    Upgrade redhat/libvirt-daemon-driver-network to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  11. Upgrade

    Upgrade redhat/libvirt-daemon-driver-nodedev to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  12. Upgrade

    Upgrade redhat/libvirt-daemon-driver-nwfilter to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  13. Upgrade

    Upgrade redhat/libvirt-daemon-driver-qemu to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  14. Upgrade

    Upgrade redhat/libvirt-daemon-driver-secret to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  15. Upgrade

    Upgrade redhat/libvirt-daemon-driver-storage to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  16. Upgrade

    Upgrade redhat/libvirt-daemon-driver-storage-core to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  17. Upgrade

    Upgrade redhat/libvirt-daemon-driver-storage-disk to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  18. Upgrade

    Upgrade redhat/libvirt-daemon-driver-storage-gluster to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  19. Upgrade

    Upgrade redhat/libvirt-daemon-driver-storage-iscsi to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  20. Upgrade

    Upgrade redhat/libvirt-daemon-driver-storage-logical to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  21. Upgrade

    Upgrade redhat/libvirt-daemon-driver-storage-mpath to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  22. Upgrade

    Upgrade redhat/libvirt-daemon-driver-storage-rbd to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  23. Upgrade

    Upgrade redhat/libvirt-daemon-driver-storage-scsi to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  24. Upgrade

    Upgrade redhat/libvirt-daemon-kvm to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  25. Upgrade

    Upgrade redhat/libvirt-daemon-lxc to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  26. Upgrade

    Upgrade redhat/libvirt-debuginfo to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  27. Upgrade

    Upgrade redhat/libvirt-devel to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  28. Upgrade

    Upgrade redhat/libvirt-docs to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  29. Upgrade

    Upgrade redhat/libvirt-libs to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  30. Upgrade

    Upgrade redhat/libvirt-lock-sanlock to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  31. Upgrade

    Upgrade redhat/libvirt-login-shell to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3
  32. Upgrade

    Upgrade redhat/libvirt-nss to a version that resolves this vulnerability.

    Fixed in 4.5.0-36.el7_9.3

Event History

Jun 16, 2026
Advisory Published
via Red Hat·03:54 PM
Data Sourced
via Red Hat·03:54 PM
RemedyDescriptionAffected Software

Frequently Asked Questions

1

What is the severity of RHSA-2020:5040?

The severity of RHSA-2020:5040 is classified as moderate.

2

How do I fix RHSA-2020:5040?

To fix RHSA-2020:5040, update the affected libvirt package to version 4.5.0-36.el7_9.3 or higher.

3

Which versions are affected by RHSA-2020:5040?

RHSA-2020:5040 affects libvirt versions prior to 4.5.0-36.el7_9.3.

4

What vulnerability does RHSA-2020:5040 address?

RHSA-2020:5040 addresses a double free vulnerability in the libvirt library.

5

Is there any workaround for RHSA-2020:5040?

No specific workaround is provided for RHSA-2020:5040, and it is recommended to apply the necessary updates.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203