Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:1285-1

Опубликовано: 17 мая 2019
Источник: suse-cvrf

Описание

Security update for libvirt

This update for libvirt fixes the following issues:

Security issue fixed:

  • CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15
libvirt-libs-4.0.0-9.19.4
SUSE Linux Enterprise Module for Server Applications 15
libvirt-4.0.0-9.19.4
libvirt-admin-4.0.0-9.19.4
libvirt-client-4.0.0-9.19.4
libvirt-daemon-4.0.0-9.19.4
libvirt-daemon-config-network-4.0.0-9.19.4
libvirt-daemon-config-nwfilter-4.0.0-9.19.4
libvirt-daemon-driver-interface-4.0.0-9.19.4
libvirt-daemon-driver-libxl-4.0.0-9.19.4
libvirt-daemon-driver-lxc-4.0.0-9.19.4
libvirt-daemon-driver-network-4.0.0-9.19.4
libvirt-daemon-driver-nodedev-4.0.0-9.19.4
libvirt-daemon-driver-nwfilter-4.0.0-9.19.4
libvirt-daemon-driver-qemu-4.0.0-9.19.4
libvirt-daemon-driver-secret-4.0.0-9.19.4
libvirt-daemon-driver-storage-4.0.0-9.19.4
libvirt-daemon-driver-storage-core-4.0.0-9.19.4
libvirt-daemon-driver-storage-disk-4.0.0-9.19.4
libvirt-daemon-driver-storage-iscsi-4.0.0-9.19.4
libvirt-daemon-driver-storage-logical-4.0.0-9.19.4
libvirt-daemon-driver-storage-mpath-4.0.0-9.19.4
libvirt-daemon-driver-storage-rbd-4.0.0-9.19.4
libvirt-daemon-driver-storage-scsi-4.0.0-9.19.4
libvirt-daemon-hooks-4.0.0-9.19.4
libvirt-daemon-lxc-4.0.0-9.19.4
libvirt-daemon-qemu-4.0.0-9.19.4
libvirt-daemon-xen-4.0.0-9.19.4
libvirt-devel-4.0.0-9.19.4
libvirt-doc-4.0.0-9.19.4
libvirt-lock-sanlock-4.0.0-9.19.4
libvirt-nss-4.0.0-9.19.4

Ссылки

Описание

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15:libvirt-libs-4.0.0-9.19.4
SUSE Linux Enterprise Module for Server Applications 15:libvirt-4.0.0-9.19.4
SUSE Linux Enterprise Module for Server Applications 15:libvirt-admin-4.0.0-9.19.4
SUSE Linux Enterprise Module for Server Applications 15:libvirt-client-4.0.0-9.19.4
Ссылки