Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:2850-1

Опубликовано: 25 окт. 2017
Источник: suse-cvrf

Описание

Security update for libvirt

This update for libvirt fixes the following issues:

Security issue fixed:

  • CVE-2017-1000256: Ensure TLS clients always verify the server certificate in the serial/TLS support. (bsc#1062563)

Non security issue fixed:

  • libvirt-daemon-qemu requires libvirt-daemon-driver-storage (bsc#1062620)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP3
libvirt-3.3.0-5.8.1
libvirt-admin-3.3.0-5.8.1
libvirt-client-3.3.0-5.8.1
libvirt-daemon-3.3.0-5.8.1
libvirt-daemon-config-network-3.3.0-5.8.1
libvirt-daemon-config-nwfilter-3.3.0-5.8.1
libvirt-daemon-driver-interface-3.3.0-5.8.1
libvirt-daemon-driver-libxl-3.3.0-5.8.1
libvirt-daemon-driver-lxc-3.3.0-5.8.1
libvirt-daemon-driver-network-3.3.0-5.8.1
libvirt-daemon-driver-nodedev-3.3.0-5.8.1
libvirt-daemon-driver-nwfilter-3.3.0-5.8.1
libvirt-daemon-driver-qemu-3.3.0-5.8.1
libvirt-daemon-driver-secret-3.3.0-5.8.1
libvirt-daemon-driver-storage-3.3.0-5.8.1
libvirt-daemon-driver-storage-core-3.3.0-5.8.1
libvirt-daemon-driver-storage-disk-3.3.0-5.8.1
libvirt-daemon-driver-storage-iscsi-3.3.0-5.8.1
libvirt-daemon-driver-storage-logical-3.3.0-5.8.1
libvirt-daemon-driver-storage-mpath-3.3.0-5.8.1
libvirt-daemon-driver-storage-rbd-3.3.0-5.8.1
libvirt-daemon-driver-storage-scsi-3.3.0-5.8.1
libvirt-daemon-lxc-3.3.0-5.8.1
libvirt-daemon-qemu-3.3.0-5.8.1
libvirt-daemon-xen-3.3.0-5.8.1
libvirt-doc-3.3.0-5.8.1
libvirt-libs-3.3.0-5.8.1
SUSE Linux Enterprise Server 12 SP3
libvirt-3.3.0-5.8.1
libvirt-admin-3.3.0-5.8.1
libvirt-client-3.3.0-5.8.1
libvirt-daemon-3.3.0-5.8.1
libvirt-daemon-config-network-3.3.0-5.8.1
libvirt-daemon-config-nwfilter-3.3.0-5.8.1
libvirt-daemon-driver-interface-3.3.0-5.8.1
libvirt-daemon-driver-libxl-3.3.0-5.8.1
libvirt-daemon-driver-lxc-3.3.0-5.8.1
libvirt-daemon-driver-network-3.3.0-5.8.1
libvirt-daemon-driver-nodedev-3.3.0-5.8.1
libvirt-daemon-driver-nwfilter-3.3.0-5.8.1
libvirt-daemon-driver-qemu-3.3.0-5.8.1
libvirt-daemon-driver-secret-3.3.0-5.8.1
libvirt-daemon-driver-storage-3.3.0-5.8.1
libvirt-daemon-driver-storage-core-3.3.0-5.8.1
libvirt-daemon-driver-storage-disk-3.3.0-5.8.1
libvirt-daemon-driver-storage-iscsi-3.3.0-5.8.1
libvirt-daemon-driver-storage-logical-3.3.0-5.8.1
libvirt-daemon-driver-storage-mpath-3.3.0-5.8.1
libvirt-daemon-driver-storage-rbd-3.3.0-5.8.1
libvirt-daemon-driver-storage-scsi-3.3.0-5.8.1
libvirt-daemon-lxc-3.3.0-5.8.1
libvirt-daemon-qemu-3.3.0-5.8.1
libvirt-daemon-xen-3.3.0-5.8.1
libvirt-doc-3.3.0-5.8.1
libvirt-libs-3.3.0-5.8.1
libvirt-lock-sanlock-3.3.0-5.8.1
libvirt-nss-3.3.0-5.8.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libvirt-3.3.0-5.8.1
libvirt-admin-3.3.0-5.8.1
libvirt-client-3.3.0-5.8.1
libvirt-daemon-3.3.0-5.8.1
libvirt-daemon-config-network-3.3.0-5.8.1
libvirt-daemon-config-nwfilter-3.3.0-5.8.1
libvirt-daemon-driver-interface-3.3.0-5.8.1
libvirt-daemon-driver-libxl-3.3.0-5.8.1
libvirt-daemon-driver-lxc-3.3.0-5.8.1
libvirt-daemon-driver-network-3.3.0-5.8.1
libvirt-daemon-driver-nodedev-3.3.0-5.8.1
libvirt-daemon-driver-nwfilter-3.3.0-5.8.1
libvirt-daemon-driver-qemu-3.3.0-5.8.1
libvirt-daemon-driver-secret-3.3.0-5.8.1
libvirt-daemon-driver-storage-3.3.0-5.8.1
libvirt-daemon-driver-storage-core-3.3.0-5.8.1
libvirt-daemon-driver-storage-disk-3.3.0-5.8.1
libvirt-daemon-driver-storage-iscsi-3.3.0-5.8.1
libvirt-daemon-driver-storage-logical-3.3.0-5.8.1
libvirt-daemon-driver-storage-mpath-3.3.0-5.8.1
libvirt-daemon-driver-storage-rbd-3.3.0-5.8.1
libvirt-daemon-driver-storage-scsi-3.3.0-5.8.1
libvirt-daemon-lxc-3.3.0-5.8.1
libvirt-daemon-qemu-3.3.0-5.8.1
libvirt-daemon-xen-3.3.0-5.8.1
libvirt-doc-3.3.0-5.8.1
libvirt-libs-3.3.0-5.8.1
libvirt-lock-sanlock-3.3.0-5.8.1
libvirt-nss-3.3.0-5.8.1
SUSE Linux Enterprise Software Development Kit 12 SP3
libvirt-devel-3.3.0-5.8.1

Ссылки

Описание

libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvirt resulting in a failure to validate SSL/TLS certificates by default.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:libvirt-3.3.0-5.8.1
SUSE Linux Enterprise Desktop 12 SP3:libvirt-admin-3.3.0-5.8.1
SUSE Linux Enterprise Desktop 12 SP3:libvirt-client-3.3.0-5.8.1
SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-3.3.0-5.8.1
Ссылки
Уязвимость SUSE-SU-2017:2850-1