SUSE-SU-2021:3540-1

Опубликовано: 27 окт. 2021

Источник: suse-cvrf

Описание

Security update for libvirt

This update for libvirt fixes the following issues:

Security issue fixed:

CVE-2021-3667: Fixed a DoS vulnerability in the libvirt virStoragePoolLookupByTargetPath API. (bsc#1188843)

Non-security issues fixed:

resolved hangs/crashes on libvirtd shutdown (bsc#1182783)
qemu: Normalize MAC address in device conf on netdev hotplug (bsc#1184772)
libxl: Fix driver reload (bsc#1190420)
libxl: Add support for 'e820_host' settings (bsc#1185081)
libxl: Fix domain shutdown (bsc#1184152)

Список пакетов

Image SLES15-SP1-SAP-Azure

libvirt-client-5.1.0-8.29.1

libvirt-libs-5.1.0-8.29.1

Image SLES15-SP1-SAP-Azure-BYOS

libvirt-client-5.1.0-8.29.1

libvirt-libs-5.1.0-8.29.1

Image SLES15-SP1-SAP-EC2-HVM

libvirt-client-5.1.0-8.29.1

libvirt-libs-5.1.0-8.29.1

Image SLES15-SP1-SAP-EC2-HVM-BYOS

libvirt-client-5.1.0-8.29.1

libvirt-libs-5.1.0-8.29.1

Image SLES15-SP1-SAP-GCE

libvirt-client-5.1.0-8.29.1

libvirt-libs-5.1.0-8.29.1

Image SLES15-SP1-SAP-GCE-BYOS

libvirt-client-5.1.0-8.29.1

libvirt-libs-5.1.0-8.29.1

SUSE Enterprise Storage 6

libvirt-5.1.0-8.29.1

libvirt-admin-5.1.0-8.29.1

libvirt-bash-completion-5.1.0-8.29.1

libvirt-client-5.1.0-8.29.1

libvirt-daemon-5.1.0-8.29.1

libvirt-daemon-config-network-5.1.0-8.29.1

libvirt-daemon-config-nwfilter-5.1.0-8.29.1

libvirt-daemon-driver-interface-5.1.0-8.29.1

libvirt-daemon-driver-libxl-5.1.0-8.29.1

libvirt-daemon-driver-lxc-5.1.0-8.29.1

libvirt-daemon-driver-network-5.1.0-8.29.1

libvirt-daemon-driver-nodedev-5.1.0-8.29.1

libvirt-daemon-driver-nwfilter-5.1.0-8.29.1

libvirt-daemon-driver-qemu-5.1.0-8.29.1

libvirt-daemon-driver-secret-5.1.0-8.29.1

libvirt-daemon-driver-storage-5.1.0-8.29.1

libvirt-daemon-driver-storage-core-5.1.0-8.29.1

libvirt-daemon-driver-storage-disk-5.1.0-8.29.1

libvirt-daemon-driver-storage-iscsi-5.1.0-8.29.1

libvirt-daemon-driver-storage-logical-5.1.0-8.29.1

libvirt-daemon-driver-storage-mpath-5.1.0-8.29.1

libvirt-daemon-driver-storage-rbd-5.1.0-8.29.1

libvirt-daemon-driver-storage-scsi-5.1.0-8.29.1

libvirt-daemon-hooks-5.1.0-8.29.1

libvirt-daemon-lxc-5.1.0-8.29.1

libvirt-daemon-qemu-5.1.0-8.29.1

libvirt-daemon-xen-5.1.0-8.29.1

libvirt-devel-5.1.0-8.29.1

libvirt-doc-5.1.0-8.29.1

libvirt-libs-5.1.0-8.29.1

libvirt-lock-sanlock-5.1.0-8.29.1

libvirt-nss-5.1.0-8.29.1

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

libvirt-5.1.0-8.29.1

libvirt-admin-5.1.0-8.29.1

libvirt-bash-completion-5.1.0-8.29.1

libvirt-client-5.1.0-8.29.1

libvirt-daemon-5.1.0-8.29.1

libvirt-daemon-config-network-5.1.0-8.29.1

libvirt-daemon-config-nwfilter-5.1.0-8.29.1

libvirt-daemon-driver-interface-5.1.0-8.29.1

libvirt-daemon-driver-libxl-5.1.0-8.29.1

libvirt-daemon-driver-lxc-5.1.0-8.29.1

libvirt-daemon-driver-network-5.1.0-8.29.1

libvirt-daemon-driver-nodedev-5.1.0-8.29.1

libvirt-daemon-driver-nwfilter-5.1.0-8.29.1

libvirt-daemon-driver-qemu-5.1.0-8.29.1

libvirt-daemon-driver-secret-5.1.0-8.29.1

libvirt-daemon-driver-storage-5.1.0-8.29.1

libvirt-daemon-driver-storage-core-5.1.0-8.29.1

libvirt-daemon-driver-storage-disk-5.1.0-8.29.1

libvirt-daemon-driver-storage-iscsi-5.1.0-8.29.1

libvirt-daemon-driver-storage-logical-5.1.0-8.29.1

libvirt-daemon-driver-storage-mpath-5.1.0-8.29.1

libvirt-daemon-driver-storage-rbd-5.1.0-8.29.1

libvirt-daemon-driver-storage-scsi-5.1.0-8.29.1

libvirt-daemon-hooks-5.1.0-8.29.1

libvirt-daemon-lxc-5.1.0-8.29.1

libvirt-daemon-qemu-5.1.0-8.29.1

libvirt-daemon-xen-5.1.0-8.29.1

libvirt-devel-5.1.0-8.29.1

libvirt-doc-5.1.0-8.29.1

libvirt-libs-5.1.0-8.29.1

libvirt-lock-sanlock-5.1.0-8.29.1

libvirt-nss-5.1.0-8.29.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

libvirt-5.1.0-8.29.1

libvirt-admin-5.1.0-8.29.1

libvirt-bash-completion-5.1.0-8.29.1

libvirt-client-5.1.0-8.29.1

libvirt-daemon-5.1.0-8.29.1

libvirt-daemon-config-network-5.1.0-8.29.1

libvirt-daemon-config-nwfilter-5.1.0-8.29.1

libvirt-daemon-driver-interface-5.1.0-8.29.1

libvirt-daemon-driver-libxl-5.1.0-8.29.1

libvirt-daemon-driver-lxc-5.1.0-8.29.1

libvirt-daemon-driver-network-5.1.0-8.29.1

libvirt-daemon-driver-nodedev-5.1.0-8.29.1

libvirt-daemon-driver-nwfilter-5.1.0-8.29.1

libvirt-daemon-driver-qemu-5.1.0-8.29.1

libvirt-daemon-driver-secret-5.1.0-8.29.1

libvirt-daemon-driver-storage-5.1.0-8.29.1

libvirt-daemon-driver-storage-core-5.1.0-8.29.1

libvirt-daemon-driver-storage-disk-5.1.0-8.29.1

libvirt-daemon-driver-storage-iscsi-5.1.0-8.29.1

libvirt-daemon-driver-storage-logical-5.1.0-8.29.1

libvirt-daemon-driver-storage-mpath-5.1.0-8.29.1

libvirt-daemon-driver-storage-rbd-5.1.0-8.29.1

libvirt-daemon-driver-storage-scsi-5.1.0-8.29.1

libvirt-daemon-hooks-5.1.0-8.29.1

libvirt-daemon-lxc-5.1.0-8.29.1

libvirt-daemon-qemu-5.1.0-8.29.1

libvirt-daemon-xen-5.1.0-8.29.1

libvirt-devel-5.1.0-8.29.1

libvirt-doc-5.1.0-8.29.1

libvirt-libs-5.1.0-8.29.1

libvirt-lock-sanlock-5.1.0-8.29.1

libvirt-nss-5.1.0-8.29.1

SUSE Linux Enterprise Server 15 SP1-BCL

libvirt-5.1.0-8.29.1

libvirt-admin-5.1.0-8.29.1

libvirt-bash-completion-5.1.0-8.29.1

libvirt-client-5.1.0-8.29.1

libvirt-daemon-5.1.0-8.29.1

libvirt-daemon-config-network-5.1.0-8.29.1

libvirt-daemon-config-nwfilter-5.1.0-8.29.1

libvirt-daemon-driver-interface-5.1.0-8.29.1

libvirt-daemon-driver-libxl-5.1.0-8.29.1

libvirt-daemon-driver-lxc-5.1.0-8.29.1

libvirt-daemon-driver-network-5.1.0-8.29.1

libvirt-daemon-driver-nodedev-5.1.0-8.29.1

libvirt-daemon-driver-nwfilter-5.1.0-8.29.1

libvirt-daemon-driver-qemu-5.1.0-8.29.1

libvirt-daemon-driver-secret-5.1.0-8.29.1

libvirt-daemon-driver-storage-5.1.0-8.29.1

libvirt-daemon-driver-storage-core-5.1.0-8.29.1

libvirt-daemon-driver-storage-disk-5.1.0-8.29.1

libvirt-daemon-driver-storage-iscsi-5.1.0-8.29.1

libvirt-daemon-driver-storage-logical-5.1.0-8.29.1

libvirt-daemon-driver-storage-mpath-5.1.0-8.29.1

libvirt-daemon-driver-storage-rbd-5.1.0-8.29.1

libvirt-daemon-driver-storage-scsi-5.1.0-8.29.1

libvirt-daemon-hooks-5.1.0-8.29.1

libvirt-daemon-lxc-5.1.0-8.29.1

libvirt-daemon-qemu-5.1.0-8.29.1

libvirt-daemon-xen-5.1.0-8.29.1

libvirt-devel-5.1.0-8.29.1

libvirt-doc-5.1.0-8.29.1

libvirt-libs-5.1.0-8.29.1

libvirt-lock-sanlock-5.1.0-8.29.1

libvirt-nss-5.1.0-8.29.1

SUSE Linux Enterprise Server 15 SP1-LTSS

libvirt-5.1.0-8.29.1

libvirt-admin-5.1.0-8.29.1

libvirt-bash-completion-5.1.0-8.29.1

libvirt-client-5.1.0-8.29.1

libvirt-daemon-5.1.0-8.29.1

libvirt-daemon-config-network-5.1.0-8.29.1

libvirt-daemon-config-nwfilter-5.1.0-8.29.1

libvirt-daemon-driver-interface-5.1.0-8.29.1

libvirt-daemon-driver-libxl-5.1.0-8.29.1

libvirt-daemon-driver-lxc-5.1.0-8.29.1

libvirt-daemon-driver-network-5.1.0-8.29.1

libvirt-daemon-driver-nodedev-5.1.0-8.29.1

libvirt-daemon-driver-nwfilter-5.1.0-8.29.1

libvirt-daemon-driver-qemu-5.1.0-8.29.1

libvirt-daemon-driver-secret-5.1.0-8.29.1

libvirt-daemon-driver-storage-5.1.0-8.29.1

libvirt-daemon-driver-storage-core-5.1.0-8.29.1

libvirt-daemon-driver-storage-disk-5.1.0-8.29.1

libvirt-daemon-driver-storage-iscsi-5.1.0-8.29.1

libvirt-daemon-driver-storage-logical-5.1.0-8.29.1

libvirt-daemon-driver-storage-mpath-5.1.0-8.29.1

libvirt-daemon-driver-storage-rbd-5.1.0-8.29.1

libvirt-daemon-driver-storage-scsi-5.1.0-8.29.1

libvirt-daemon-hooks-5.1.0-8.29.1

libvirt-daemon-lxc-5.1.0-8.29.1

libvirt-daemon-qemu-5.1.0-8.29.1

libvirt-daemon-xen-5.1.0-8.29.1

libvirt-devel-5.1.0-8.29.1

libvirt-doc-5.1.0-8.29.1

libvirt-libs-5.1.0-8.29.1

libvirt-lock-sanlock-5.1.0-8.29.1

libvirt-nss-5.1.0-8.29.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

libvirt-5.1.0-8.29.1

libvirt-admin-5.1.0-8.29.1

libvirt-bash-completion-5.1.0-8.29.1

libvirt-client-5.1.0-8.29.1

libvirt-daemon-5.1.0-8.29.1

libvirt-daemon-config-network-5.1.0-8.29.1

libvirt-daemon-config-nwfilter-5.1.0-8.29.1

libvirt-daemon-driver-interface-5.1.0-8.29.1

libvirt-daemon-driver-libxl-5.1.0-8.29.1

libvirt-daemon-driver-lxc-5.1.0-8.29.1

libvirt-daemon-driver-network-5.1.0-8.29.1

libvirt-daemon-driver-nodedev-5.1.0-8.29.1

libvirt-daemon-driver-nwfilter-5.1.0-8.29.1

libvirt-daemon-driver-qemu-5.1.0-8.29.1

libvirt-daemon-driver-secret-5.1.0-8.29.1

libvirt-daemon-driver-storage-5.1.0-8.29.1

libvirt-daemon-driver-storage-core-5.1.0-8.29.1

libvirt-daemon-driver-storage-disk-5.1.0-8.29.1

libvirt-daemon-driver-storage-iscsi-5.1.0-8.29.1

libvirt-daemon-driver-storage-logical-5.1.0-8.29.1

libvirt-daemon-driver-storage-mpath-5.1.0-8.29.1

libvirt-daemon-driver-storage-rbd-5.1.0-8.29.1

libvirt-daemon-driver-storage-scsi-5.1.0-8.29.1

libvirt-daemon-hooks-5.1.0-8.29.1

libvirt-daemon-lxc-5.1.0-8.29.1

libvirt-daemon-qemu-5.1.0-8.29.1

libvirt-daemon-xen-5.1.0-8.29.1

libvirt-devel-5.1.0-8.29.1

libvirt-doc-5.1.0-8.29.1

libvirt-libs-5.1.0-8.29.1

libvirt-lock-sanlock-5.1.0-8.29.1

libvirt-nss-5.1.0-8.29.1

Ссылки

https://www.suse.com/support/update/announcement/2021/suse-su-20213540-1/
Link for SUSE-SU-2021:3540-1
https://lists.suse.com/pipermail/sle-security-updates/2021-October/009661.html
E-Mail link for SUSE-SU-2021:3540-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1182783
SUSE Bug 1182783
https://bugzilla.suse.com/1184152
SUSE Bug 1184152
https://bugzilla.suse.com/1184772
SUSE Bug 1184772
https://bugzilla.suse.com/1185081
SUSE Bug 1185081
https://bugzilla.suse.com/1188843
SUSE Bug 1188843
https://bugzilla.suse.com/1190420
SUSE Bug 1190420
https://www.suse.com/security/cve/CVE-2021-3667/
SUSE CVE CVE-2021-3667 page

Описание

An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited ACL permissions could use this flaw to acquire the lock and prevent other users from accessing storage pool/volume APIs, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability.

Затронутые продукты

Image SLES15-SP1-SAP-Azure-BYOS:libvirt-client-5.1.0-8.29.1

Image SLES15-SP1-SAP-Azure-BYOS:libvirt-libs-5.1.0-8.29.1

Image SLES15-SP1-SAP-Azure:libvirt-client-5.1.0-8.29.1

Image SLES15-SP1-SAP-Azure:libvirt-libs-5.1.0-8.29.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-3667.html
CVE-2021-3667
https://bugzilla.suse.com/1188843
SUSE Bug 1188843

SUSE-SU-2021:3540-1

Описание

Список пакетов

Image SLES15-SP1-SAP-Azure

Image SLES15-SP1-SAP-Azure-BYOS

Image SLES15-SP1-SAP-EC2-HVM

Image SLES15-SP1-SAP-EC2-HVM-BYOS

Image SLES15-SP1-SAP-GCE

Image SLES15-SP1-SAP-GCE-BYOS

SUSE Enterprise Storage 6

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

SUSE Linux Enterprise Server 15 SP1-BCL

SUSE Linux Enterprise Server 15 SP1-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP1

Ссылки

Уязвимость: CVE-2021-3667

Описание

Затронутые продукты

Ссылки