SUSE-SU-2022:0128-1

Опубликовано: 19 янв. 2022

Источник: suse-cvrf

Описание

Security update for libvirt

This update for libvirt fixes the following issues:

CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041)
CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876)

Список пакетов

Image SLES15-SP1-SAP-Azure

libvirt-client-5.1.0-17.1

libvirt-libs-5.1.0-17.1

Image SLES15-SP1-SAP-Azure-BYOS

libvirt-client-5.1.0-17.1

libvirt-libs-5.1.0-17.1

Image SLES15-SP1-SAP-EC2-HVM

libvirt-client-5.1.0-17.1

libvirt-libs-5.1.0-17.1

Image SLES15-SP1-SAP-EC2-HVM-BYOS

libvirt-client-5.1.0-17.1

libvirt-libs-5.1.0-17.1

Image SLES15-SP1-SAP-GCE

libvirt-client-5.1.0-17.1

libvirt-libs-5.1.0-17.1

Image SLES15-SP1-SAP-GCE-BYOS

libvirt-client-5.1.0-17.1

libvirt-libs-5.1.0-17.1

SUSE Enterprise Storage 6

libvirt-5.1.0-17.1

libvirt-admin-5.1.0-17.1

libvirt-bash-completion-5.1.0-17.1

libvirt-client-5.1.0-17.1

libvirt-daemon-5.1.0-17.1

libvirt-daemon-config-network-5.1.0-17.1

libvirt-daemon-config-nwfilter-5.1.0-17.1

libvirt-daemon-driver-interface-5.1.0-17.1

libvirt-daemon-driver-libxl-5.1.0-17.1

libvirt-daemon-driver-lxc-5.1.0-17.1

libvirt-daemon-driver-network-5.1.0-17.1

libvirt-daemon-driver-nodedev-5.1.0-17.1

libvirt-daemon-driver-nwfilter-5.1.0-17.1

libvirt-daemon-driver-qemu-5.1.0-17.1

libvirt-daemon-driver-secret-5.1.0-17.1

libvirt-daemon-driver-storage-5.1.0-17.1

libvirt-daemon-driver-storage-core-5.1.0-17.1

libvirt-daemon-driver-storage-disk-5.1.0-17.1

libvirt-daemon-driver-storage-iscsi-5.1.0-17.1

libvirt-daemon-driver-storage-logical-5.1.0-17.1

libvirt-daemon-driver-storage-mpath-5.1.0-17.1

libvirt-daemon-driver-storage-rbd-5.1.0-17.1

libvirt-daemon-driver-storage-scsi-5.1.0-17.1

libvirt-daemon-hooks-5.1.0-17.1

libvirt-daemon-lxc-5.1.0-17.1

libvirt-daemon-qemu-5.1.0-17.1

libvirt-daemon-xen-5.1.0-17.1

libvirt-devel-5.1.0-17.1

libvirt-doc-5.1.0-17.1

libvirt-libs-5.1.0-17.1

libvirt-lock-sanlock-5.1.0-17.1

libvirt-nss-5.1.0-17.1

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

libvirt-5.1.0-17.1

libvirt-admin-5.1.0-17.1

libvirt-bash-completion-5.1.0-17.1

libvirt-client-5.1.0-17.1

libvirt-daemon-5.1.0-17.1

libvirt-daemon-config-network-5.1.0-17.1

libvirt-daemon-config-nwfilter-5.1.0-17.1

libvirt-daemon-driver-interface-5.1.0-17.1

libvirt-daemon-driver-libxl-5.1.0-17.1

libvirt-daemon-driver-lxc-5.1.0-17.1

libvirt-daemon-driver-network-5.1.0-17.1

libvirt-daemon-driver-nodedev-5.1.0-17.1

libvirt-daemon-driver-nwfilter-5.1.0-17.1

libvirt-daemon-driver-qemu-5.1.0-17.1

libvirt-daemon-driver-secret-5.1.0-17.1

libvirt-daemon-driver-storage-5.1.0-17.1

libvirt-daemon-driver-storage-core-5.1.0-17.1

libvirt-daemon-driver-storage-disk-5.1.0-17.1

libvirt-daemon-driver-storage-iscsi-5.1.0-17.1

libvirt-daemon-driver-storage-logical-5.1.0-17.1

libvirt-daemon-driver-storage-mpath-5.1.0-17.1

libvirt-daemon-driver-storage-rbd-5.1.0-17.1

libvirt-daemon-driver-storage-scsi-5.1.0-17.1

libvirt-daemon-hooks-5.1.0-17.1

libvirt-daemon-lxc-5.1.0-17.1

libvirt-daemon-qemu-5.1.0-17.1

libvirt-daemon-xen-5.1.0-17.1

libvirt-devel-5.1.0-17.1

libvirt-doc-5.1.0-17.1

libvirt-libs-5.1.0-17.1

libvirt-lock-sanlock-5.1.0-17.1

libvirt-nss-5.1.0-17.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

libvirt-5.1.0-17.1

libvirt-admin-5.1.0-17.1

libvirt-bash-completion-5.1.0-17.1

libvirt-client-5.1.0-17.1

libvirt-daemon-5.1.0-17.1

libvirt-daemon-config-network-5.1.0-17.1

libvirt-daemon-config-nwfilter-5.1.0-17.1

libvirt-daemon-driver-interface-5.1.0-17.1

libvirt-daemon-driver-libxl-5.1.0-17.1

libvirt-daemon-driver-lxc-5.1.0-17.1

libvirt-daemon-driver-network-5.1.0-17.1

libvirt-daemon-driver-nodedev-5.1.0-17.1

libvirt-daemon-driver-nwfilter-5.1.0-17.1

libvirt-daemon-driver-qemu-5.1.0-17.1

libvirt-daemon-driver-secret-5.1.0-17.1

libvirt-daemon-driver-storage-5.1.0-17.1

libvirt-daemon-driver-storage-core-5.1.0-17.1

libvirt-daemon-driver-storage-disk-5.1.0-17.1

libvirt-daemon-driver-storage-iscsi-5.1.0-17.1

libvirt-daemon-driver-storage-logical-5.1.0-17.1

libvirt-daemon-driver-storage-mpath-5.1.0-17.1

libvirt-daemon-driver-storage-rbd-5.1.0-17.1

libvirt-daemon-driver-storage-scsi-5.1.0-17.1

libvirt-daemon-hooks-5.1.0-17.1

libvirt-daemon-lxc-5.1.0-17.1

libvirt-daemon-qemu-5.1.0-17.1

libvirt-daemon-xen-5.1.0-17.1

libvirt-devel-5.1.0-17.1

libvirt-doc-5.1.0-17.1

libvirt-libs-5.1.0-17.1

libvirt-lock-sanlock-5.1.0-17.1

libvirt-nss-5.1.0-17.1

SUSE Linux Enterprise Server 15 SP1-BCL

libvirt-5.1.0-17.1

libvirt-admin-5.1.0-17.1

libvirt-bash-completion-5.1.0-17.1

libvirt-client-5.1.0-17.1

libvirt-daemon-5.1.0-17.1

libvirt-daemon-config-network-5.1.0-17.1

libvirt-daemon-config-nwfilter-5.1.0-17.1

libvirt-daemon-driver-interface-5.1.0-17.1

libvirt-daemon-driver-libxl-5.1.0-17.1

libvirt-daemon-driver-lxc-5.1.0-17.1

libvirt-daemon-driver-network-5.1.0-17.1

libvirt-daemon-driver-nodedev-5.1.0-17.1

libvirt-daemon-driver-nwfilter-5.1.0-17.1

libvirt-daemon-driver-qemu-5.1.0-17.1

libvirt-daemon-driver-secret-5.1.0-17.1

libvirt-daemon-driver-storage-5.1.0-17.1

libvirt-daemon-driver-storage-core-5.1.0-17.1

libvirt-daemon-driver-storage-disk-5.1.0-17.1

libvirt-daemon-driver-storage-iscsi-5.1.0-17.1

libvirt-daemon-driver-storage-logical-5.1.0-17.1

libvirt-daemon-driver-storage-mpath-5.1.0-17.1

libvirt-daemon-driver-storage-rbd-5.1.0-17.1

libvirt-daemon-driver-storage-scsi-5.1.0-17.1

libvirt-daemon-hooks-5.1.0-17.1

libvirt-daemon-lxc-5.1.0-17.1

libvirt-daemon-qemu-5.1.0-17.1

libvirt-daemon-xen-5.1.0-17.1

libvirt-devel-5.1.0-17.1

libvirt-doc-5.1.0-17.1

libvirt-libs-5.1.0-17.1

libvirt-lock-sanlock-5.1.0-17.1

libvirt-nss-5.1.0-17.1

SUSE Linux Enterprise Server 15 SP1-LTSS

libvirt-5.1.0-17.1

libvirt-admin-5.1.0-17.1

libvirt-bash-completion-5.1.0-17.1

libvirt-client-5.1.0-17.1

libvirt-daemon-5.1.0-17.1

libvirt-daemon-config-network-5.1.0-17.1

libvirt-daemon-config-nwfilter-5.1.0-17.1

libvirt-daemon-driver-interface-5.1.0-17.1

libvirt-daemon-driver-libxl-5.1.0-17.1

libvirt-daemon-driver-lxc-5.1.0-17.1

libvirt-daemon-driver-network-5.1.0-17.1

libvirt-daemon-driver-nodedev-5.1.0-17.1

libvirt-daemon-driver-nwfilter-5.1.0-17.1

libvirt-daemon-driver-qemu-5.1.0-17.1

libvirt-daemon-driver-secret-5.1.0-17.1

libvirt-daemon-driver-storage-5.1.0-17.1

libvirt-daemon-driver-storage-core-5.1.0-17.1

libvirt-daemon-driver-storage-disk-5.1.0-17.1

libvirt-daemon-driver-storage-iscsi-5.1.0-17.1

libvirt-daemon-driver-storage-logical-5.1.0-17.1

libvirt-daemon-driver-storage-mpath-5.1.0-17.1

libvirt-daemon-driver-storage-rbd-5.1.0-17.1

libvirt-daemon-driver-storage-scsi-5.1.0-17.1

libvirt-daemon-hooks-5.1.0-17.1

libvirt-daemon-lxc-5.1.0-17.1

libvirt-daemon-qemu-5.1.0-17.1

libvirt-daemon-xen-5.1.0-17.1

libvirt-devel-5.1.0-17.1

libvirt-doc-5.1.0-17.1

libvirt-libs-5.1.0-17.1

libvirt-lock-sanlock-5.1.0-17.1

libvirt-nss-5.1.0-17.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

libvirt-5.1.0-17.1

libvirt-admin-5.1.0-17.1

libvirt-bash-completion-5.1.0-17.1

libvirt-client-5.1.0-17.1

libvirt-daemon-5.1.0-17.1

libvirt-daemon-config-network-5.1.0-17.1

libvirt-daemon-config-nwfilter-5.1.0-17.1

libvirt-daemon-driver-interface-5.1.0-17.1

libvirt-daemon-driver-libxl-5.1.0-17.1

libvirt-daemon-driver-lxc-5.1.0-17.1

libvirt-daemon-driver-network-5.1.0-17.1

libvirt-daemon-driver-nodedev-5.1.0-17.1

libvirt-daemon-driver-nwfilter-5.1.0-17.1

libvirt-daemon-driver-qemu-5.1.0-17.1

libvirt-daemon-driver-secret-5.1.0-17.1

libvirt-daemon-driver-storage-5.1.0-17.1

libvirt-daemon-driver-storage-core-5.1.0-17.1

libvirt-daemon-driver-storage-disk-5.1.0-17.1

libvirt-daemon-driver-storage-iscsi-5.1.0-17.1

libvirt-daemon-driver-storage-logical-5.1.0-17.1

libvirt-daemon-driver-storage-mpath-5.1.0-17.1

libvirt-daemon-driver-storage-rbd-5.1.0-17.1

libvirt-daemon-driver-storage-scsi-5.1.0-17.1

libvirt-daemon-hooks-5.1.0-17.1

libvirt-daemon-lxc-5.1.0-17.1

libvirt-daemon-qemu-5.1.0-17.1

libvirt-daemon-xen-5.1.0-17.1

libvirt-devel-5.1.0-17.1

libvirt-doc-5.1.0-17.1

libvirt-libs-5.1.0-17.1

libvirt-lock-sanlock-5.1.0-17.1

libvirt-nss-5.1.0-17.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20220128-1/
Link for SUSE-SU-2022:0128-1
https://lists.suse.com/pipermail/sle-security-updates/2022-January/010027.html
E-Mail link for SUSE-SU-2022:0128-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1191668
SUSE Bug 1191668
https://bugzilla.suse.com/1192017
SUSE Bug 1192017
https://bugzilla.suse.com/1192876
SUSE Bug 1192876
https://bugzilla.suse.com/1193981
SUSE Bug 1193981
https://bugzilla.suse.com/1194041
SUSE Bug 1194041
https://www.suse.com/security/cve/CVE-2021-3975/
SUSE CVE CVE-2021-3975 page
https://www.suse.com/security/cve/CVE-2021-4147/
SUSE CVE CVE-2021-4147 page

Описание

A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.

Затронутые продукты

Image SLES15-SP1-SAP-Azure-BYOS:libvirt-client-5.1.0-17.1

Image SLES15-SP1-SAP-Azure-BYOS:libvirt-libs-5.1.0-17.1

Image SLES15-SP1-SAP-Azure:libvirt-client-5.1.0-17.1

Image SLES15-SP1-SAP-Azure:libvirt-libs-5.1.0-17.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-3975.html
CVE-2021-3975
https://bugzilla.suse.com/1192876
SUSE Bug 1192876

Описание

A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.

Затронутые продукты

Image SLES15-SP1-SAP-Azure-BYOS:libvirt-client-5.1.0-17.1

Image SLES15-SP1-SAP-Azure-BYOS:libvirt-libs-5.1.0-17.1

Image SLES15-SP1-SAP-Azure:libvirt-client-5.1.0-17.1

Image SLES15-SP1-SAP-Azure:libvirt-libs-5.1.0-17.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-4147.html
CVE-2021-4147
https://bugzilla.suse.com/1194041
SUSE Bug 1194041
https://bugzilla.suse.com/1194313
SUSE Bug 1194313

SUSE-SU-2022:0128-1

Описание

Список пакетов

Image SLES15-SP1-SAP-Azure

Image SLES15-SP1-SAP-Azure-BYOS

Image SLES15-SP1-SAP-EC2-HVM

Image SLES15-SP1-SAP-EC2-HVM-BYOS

Image SLES15-SP1-SAP-GCE

Image SLES15-SP1-SAP-GCE-BYOS

SUSE Enterprise Storage 6

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

SUSE Linux Enterprise Server 15 SP1-BCL

SUSE Linux Enterprise Server 15 SP1-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP1

Ссылки

Уязвимость: CVE-2021-3975

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2021-4147

Описание

Затронутые продукты

Ссылки