SUSE-SU-2024:1962-1

Опубликовано: 10 июн. 2024

Источник: suse-cvrf

Описание

Security update for libvirt

This update for libvirt fixes the following issues:

CVE-2024-4418: Fixed a stack use-after-free by ensuring temporary GSource is removed from client event loop. (bsc#1223849)

Список пакетов

Container suse/manager/5.0/x86_64/server:latest

libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-BYOS

libvirt-client-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-BYOS-Azure

libvirt-client-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-BYOS-EC2

libvirt-client-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-BYOS-GCE

libvirt-client-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-Hardened

libvirt-client-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-Hardened-Azure

libvirt-client-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-Hardened-BYOS

libvirt-client-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libvirt-client-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libvirt-client-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libvirt-client-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-Hardened-EC2

libvirt-client-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-Hardened-GCE

libvirt-client-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

libvirt-libs-10.0.0-150600.8.3.1

SUSE Linux Enterprise Module for Server Applications 15 SP6

libvirt-10.0.0-150600.8.3.1

libvirt-client-10.0.0-150600.8.3.1

libvirt-client-qemu-10.0.0-150600.8.3.1

libvirt-daemon-10.0.0-150600.8.3.1

libvirt-daemon-common-10.0.0-150600.8.3.1

libvirt-daemon-config-network-10.0.0-150600.8.3.1

libvirt-daemon-config-nwfilter-10.0.0-150600.8.3.1

libvirt-daemon-driver-interface-10.0.0-150600.8.3.1

libvirt-daemon-driver-libxl-10.0.0-150600.8.3.1

libvirt-daemon-driver-network-10.0.0-150600.8.3.1

libvirt-daemon-driver-nodedev-10.0.0-150600.8.3.1

libvirt-daemon-driver-nwfilter-10.0.0-150600.8.3.1

libvirt-daemon-driver-qemu-10.0.0-150600.8.3.1

libvirt-daemon-driver-secret-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-core-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-disk-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-iscsi-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-iscsi-direct-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-logical-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-mpath-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-rbd-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-scsi-10.0.0-150600.8.3.1

libvirt-daemon-hooks-10.0.0-150600.8.3.1

libvirt-daemon-lock-10.0.0-150600.8.3.1

libvirt-daemon-log-10.0.0-150600.8.3.1

libvirt-daemon-plugin-lockd-10.0.0-150600.8.3.1

libvirt-daemon-plugin-sanlock-10.0.0-150600.8.3.1

libvirt-daemon-proxy-10.0.0-150600.8.3.1

libvirt-daemon-qemu-10.0.0-150600.8.3.1

libvirt-daemon-xen-10.0.0-150600.8.3.1

libvirt-devel-10.0.0-150600.8.3.1

libvirt-doc-10.0.0-150600.8.3.1

libvirt-nss-10.0.0-150600.8.3.1

openSUSE Leap 15.6

libvirt-10.0.0-150600.8.3.1

libvirt-client-10.0.0-150600.8.3.1

libvirt-client-qemu-10.0.0-150600.8.3.1

libvirt-daemon-10.0.0-150600.8.3.1

libvirt-daemon-common-10.0.0-150600.8.3.1

libvirt-daemon-config-network-10.0.0-150600.8.3.1

libvirt-daemon-config-nwfilter-10.0.0-150600.8.3.1

libvirt-daemon-driver-interface-10.0.0-150600.8.3.1

libvirt-daemon-driver-libxl-10.0.0-150600.8.3.1

libvirt-daemon-driver-lxc-10.0.0-150600.8.3.1

libvirt-daemon-driver-network-10.0.0-150600.8.3.1

libvirt-daemon-driver-nodedev-10.0.0-150600.8.3.1

libvirt-daemon-driver-nwfilter-10.0.0-150600.8.3.1

libvirt-daemon-driver-qemu-10.0.0-150600.8.3.1

libvirt-daemon-driver-secret-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-core-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-disk-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-gluster-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-iscsi-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-iscsi-direct-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-logical-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-mpath-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-rbd-10.0.0-150600.8.3.1

libvirt-daemon-driver-storage-scsi-10.0.0-150600.8.3.1

libvirt-daemon-hooks-10.0.0-150600.8.3.1

libvirt-daemon-lock-10.0.0-150600.8.3.1

libvirt-daemon-log-10.0.0-150600.8.3.1

libvirt-daemon-lxc-10.0.0-150600.8.3.1

libvirt-daemon-plugin-lockd-10.0.0-150600.8.3.1

libvirt-daemon-plugin-sanlock-10.0.0-150600.8.3.1

libvirt-daemon-proxy-10.0.0-150600.8.3.1

libvirt-daemon-qemu-10.0.0-150600.8.3.1

libvirt-daemon-xen-10.0.0-150600.8.3.1

libvirt-devel-10.0.0-150600.8.3.1

libvirt-devel-32bit-10.0.0-150600.8.3.1

libvirt-doc-10.0.0-150600.8.3.1

libvirt-libs-10.0.0-150600.8.3.1

libvirt-nss-10.0.0-150600.8.3.1

wireshark-plugin-libvirt-10.0.0-150600.8.3.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20241962-1/
Link for SUSE-SU-2024:1962-1
https://lists.suse.com/pipermail/sle-updates/2024-June/035508.html
E-Mail link for SUSE-SU-2024:1962-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1222584
SUSE Bug 1222584
https://bugzilla.suse.com/1223849
SUSE Bug 1223849
https://www.suse.com/security/cve/CVE-2024-4418/
SUSE CVE CVE-2024-4418 page

Описание

A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop() method, the `data` pointer to a stack-allocated virNetClientIOEventData structure ended up being used in the virNetClientIOEventFD callback while the data pointer's stack frame was concurrently being "freed" when returning from virNetClientIOEventLoop(). The 'virtproxyd' daemon can be used to trigger requests. If libvirt is configured with fine-grained access control, this issue, in theory, allows a user to escape their otherwise limited access. This flaw allows a local, unprivileged user to access virtproxyd without authenticating. Remote users would need to authenticate before they could access it.

Затронутые продукты

Container suse/manager/5.0/x86_64/server:latest:libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-BYOS-Azure:libvirt-client-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-BYOS-Azure:libvirt-libs-10.0.0-150600.8.3.1

Image SLES15-SP6-SAP-BYOS-EC2:libvirt-client-10.0.0-150600.8.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-4418.html
CVE-2024-4418
https://bugzilla.suse.com/1223849
SUSE Bug 1223849

SUSE-SU-2024:1962-1

Описание

Список пакетов

Container suse/manager/5.0/x86_64/server:latest

Image SLES15-SP6-SAP-BYOS

Image SLES15-SP6-SAP-BYOS-Azure

Image SLES15-SP6-SAP-BYOS-EC2

Image SLES15-SP6-SAP-BYOS-GCE

Image SLES15-SP6-SAP-Hardened

Image SLES15-SP6-SAP-Hardened-Azure

Image SLES15-SP6-SAP-Hardened-BYOS

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

Image SLES15-SP6-SAP-Hardened-EC2

Image SLES15-SP6-SAP-Hardened-GCE

SUSE Linux Enterprise Module for Basesystem 15 SP6

SUSE Linux Enterprise Module for Server Applications 15 SP6

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2024-4418

Описание

Затронутые продукты

Ссылки