Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:0322-1

Опубликовано: 31 янв. 2018
Источник: suse-cvrf

Описание

Security update for libvirt

This update for libvirt provides several fixes.

This security issue was fixed:

  • CVE-2018-5748: Prevent resource exhaustion via qemuMonitorIORead() method which allowed to cause DoS (bsc#1076500).

These security issues were fixed:

  • Add a qemu hook script providing functionality similar to Xen's block-dmmd script. (fate#324177)
  • schema: Make disk driver name attribute optional. (bsc#1073973)
  • virt-create-rootfs: Handle all SLE 12 versions. (bsc#1072887)
  • libvirt-guests: Fix the 'stop' operation when action is 'suspend'. (bsc#1070130)
  • s390: Fix missing host cpu model info. (bsc#1065766)
  • cpu: Add new EPYC CPU model. (bsc#1052825, fate#324038)
  • pci: Fix the detection of the link's maximum speed. (bsc#1064947)
  • nodedev: Increase the netlink socket buffer size. (bsc#1035442)
  • storage: Fix a race between the volume creation and the pool refresh. (bsc#1062571)
  • daemon: Drop the minsize directive from hypervisor logrotate files. (bsc#1062760)

This update was imported from the SUSE:SLE-12-SP3:Update update project.

Список пакетов

openSUSE Leap 42.3
libvirt-3.3.0-12.1
libvirt-admin-3.3.0-12.1
libvirt-client-3.3.0-12.1
libvirt-daemon-3.3.0-12.1
libvirt-daemon-config-network-3.3.0-12.1
libvirt-daemon-config-nwfilter-3.3.0-12.1
libvirt-daemon-driver-interface-3.3.0-12.1
libvirt-daemon-driver-libxl-3.3.0-12.1
libvirt-daemon-driver-lxc-3.3.0-12.1
libvirt-daemon-driver-network-3.3.0-12.1
libvirt-daemon-driver-nodedev-3.3.0-12.1
libvirt-daemon-driver-nwfilter-3.3.0-12.1
libvirt-daemon-driver-qemu-3.3.0-12.1
libvirt-daemon-driver-secret-3.3.0-12.1
libvirt-daemon-driver-storage-3.3.0-12.1
libvirt-daemon-driver-storage-core-3.3.0-12.1
libvirt-daemon-driver-storage-disk-3.3.0-12.1
libvirt-daemon-driver-storage-iscsi-3.3.0-12.1
libvirt-daemon-driver-storage-logical-3.3.0-12.1
libvirt-daemon-driver-storage-mpath-3.3.0-12.1
libvirt-daemon-driver-storage-rbd-3.3.0-12.1
libvirt-daemon-driver-storage-scsi-3.3.0-12.1
libvirt-daemon-driver-uml-3.3.0-12.1
libvirt-daemon-driver-vbox-3.3.0-12.1
libvirt-daemon-hooks-3.3.0-12.1
libvirt-daemon-lxc-3.3.0-12.1
libvirt-daemon-qemu-3.3.0-12.1
libvirt-daemon-uml-3.3.0-12.1
libvirt-daemon-vbox-3.3.0-12.1
libvirt-daemon-xen-3.3.0-12.1
libvirt-devel-3.3.0-12.1
libvirt-devel-32bit-3.3.0-12.1
libvirt-doc-3.3.0-12.1
libvirt-libs-3.3.0-12.1
libvirt-lock-sanlock-3.3.0-12.1
libvirt-nss-3.3.0-12.1

Ссылки

Описание

qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.

Затронутые продукты
openSUSE Leap 42.3:libvirt-3.3.0-12.1
openSUSE Leap 42.3:libvirt-admin-3.3.0-12.1
openSUSE Leap 42.3:libvirt-client-3.3.0-12.1
openSUSE Leap 42.3:libvirt-daemon-3.3.0-12.1
Ссылки
Уязвимость openSUSE-SU-2018:0322-1