Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0923-1

Опубликовано: 31 мар. 2016
Источник: suse-cvrf

Описание

Security update for libvirt

This update to libvirt 1.2.18.2 fixes the following minor security issue:

  • CVE-2015-5313: Directory traversal allowed privilege escalation (bsc#953110)

The following bugs were fixed:

  • bsc#952849: Don't add apparmor deny rw rule for 9P readonly mounts.
  • bsc#960305: libxl: support parsing and formatting vif bandwidth
  • bsc#954872: libxl: Add support for block-{dmmd,drbd,npiv} scripts
  • bsc#964465: Remove 'Wants=xencommons.service' from libvirtd service file

Список пакетов

SUSE Linux Enterprise Desktop 12 SP1
libvirt-1.2.18.2-8.1
libvirt-client-1.2.18.2-8.1
libvirt-client-32bit-1.2.18.2-8.1
libvirt-daemon-1.2.18.2-8.1
libvirt-daemon-config-network-1.2.18.2-8.1
libvirt-daemon-config-nwfilter-1.2.18.2-8.1
libvirt-daemon-driver-interface-1.2.18.2-8.1
libvirt-daemon-driver-libxl-1.2.18.2-8.1
libvirt-daemon-driver-lxc-1.2.18.2-8.1
libvirt-daemon-driver-network-1.2.18.2-8.1
libvirt-daemon-driver-nodedev-1.2.18.2-8.1
libvirt-daemon-driver-nwfilter-1.2.18.2-8.1
libvirt-daemon-driver-qemu-1.2.18.2-8.1
libvirt-daemon-driver-secret-1.2.18.2-8.1
libvirt-daemon-driver-storage-1.2.18.2-8.1
libvirt-daemon-lxc-1.2.18.2-8.1
libvirt-daemon-qemu-1.2.18.2-8.1
libvirt-daemon-xen-1.2.18.2-8.1
libvirt-doc-1.2.18.2-8.1
SUSE Linux Enterprise Server 12 SP1
libvirt-1.2.18.2-8.1
libvirt-client-1.2.18.2-8.1
libvirt-daemon-1.2.18.2-8.1
libvirt-daemon-config-network-1.2.18.2-8.1
libvirt-daemon-config-nwfilter-1.2.18.2-8.1
libvirt-daemon-driver-interface-1.2.18.2-8.1
libvirt-daemon-driver-libxl-1.2.18.2-8.1
libvirt-daemon-driver-lxc-1.2.18.2-8.1
libvirt-daemon-driver-network-1.2.18.2-8.1
libvirt-daemon-driver-nodedev-1.2.18.2-8.1
libvirt-daemon-driver-nwfilter-1.2.18.2-8.1
libvirt-daemon-driver-qemu-1.2.18.2-8.1
libvirt-daemon-driver-secret-1.2.18.2-8.1
libvirt-daemon-driver-storage-1.2.18.2-8.1
libvirt-daemon-lxc-1.2.18.2-8.1
libvirt-daemon-qemu-1.2.18.2-8.1
libvirt-daemon-xen-1.2.18.2-8.1
libvirt-doc-1.2.18.2-8.1
libvirt-lock-sanlock-1.2.18.2-8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libvirt-1.2.18.2-8.1
libvirt-client-1.2.18.2-8.1
libvirt-daemon-1.2.18.2-8.1
libvirt-daemon-config-network-1.2.18.2-8.1
libvirt-daemon-config-nwfilter-1.2.18.2-8.1
libvirt-daemon-driver-interface-1.2.18.2-8.1
libvirt-daemon-driver-libxl-1.2.18.2-8.1
libvirt-daemon-driver-lxc-1.2.18.2-8.1
libvirt-daemon-driver-network-1.2.18.2-8.1
libvirt-daemon-driver-nodedev-1.2.18.2-8.1
libvirt-daemon-driver-nwfilter-1.2.18.2-8.1
libvirt-daemon-driver-qemu-1.2.18.2-8.1
libvirt-daemon-driver-secret-1.2.18.2-8.1
libvirt-daemon-driver-storage-1.2.18.2-8.1
libvirt-daemon-lxc-1.2.18.2-8.1
libvirt-daemon-qemu-1.2.18.2-8.1
libvirt-daemon-xen-1.2.18.2-8.1
libvirt-doc-1.2.18.2-8.1
libvirt-lock-sanlock-1.2.18.2-8.1
SUSE Linux Enterprise Software Development Kit 12 SP1
libvirt-devel-1.2.18.2-8.1
SUSE Linux Enterprise Workstation Extension 12 SP1
libvirt-client-32bit-1.2.18.2-8.1

Ссылки

Описание

Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libvirt-1.2.18.2-8.1
SUSE Linux Enterprise Desktop 12 SP1:libvirt-client-1.2.18.2-8.1
SUSE Linux Enterprise Desktop 12 SP1:libvirt-client-32bit-1.2.18.2-8.1
SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-1.2.18.2-8.1
Ссылки