Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:2306-1

Опубликовано: 13 авг. 2018
Источник: suse-cvrf

Описание

Security update for libvirt

This update for libvirt fixes the following issues:

Security issue fixed:

  • CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd' CPUID feature bits to address V4 Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1092885).

Bug fixes:

  • bsc#1094325: Enable virsh blockresize for XEN guests (FATE#325467).
  • bsc#1095556: Fix qemu VM creating with --boot uefi due to missing AppArmor profile.
  • bsc#1094725: Fix virsh blockresize to work with Xen qdisks.
  • bsc#1094480: Fix virsh list to list domains with xl list.
  • bsc#1087416: Fix missing video device within guest with default installation by virt-mamanger.
  • bsc#1079150: Fix libvirt-guests start dependency.
  • bsc#1076861: Fix locking of lockspace resource '/devcfs/disks/uatidmsvn1-xvda'.
  • bsc#1074014: Fix KVM live migration when shutting down cluster node.
  • bsc#959329: Fix wrong state of VMs in virtual manager.

This update was imported from the SUSE:SLE-12-SP3:Update update project.

Список пакетов

openSUSE Leap 42.3
libvirt-3.3.0-18.1
libvirt-admin-3.3.0-18.1
libvirt-client-3.3.0-18.1
libvirt-daemon-3.3.0-18.1
libvirt-daemon-config-network-3.3.0-18.1
libvirt-daemon-config-nwfilter-3.3.0-18.1
libvirt-daemon-driver-interface-3.3.0-18.1
libvirt-daemon-driver-libxl-3.3.0-18.1
libvirt-daemon-driver-lxc-3.3.0-18.1
libvirt-daemon-driver-network-3.3.0-18.1
libvirt-daemon-driver-nodedev-3.3.0-18.1
libvirt-daemon-driver-nwfilter-3.3.0-18.1
libvirt-daemon-driver-qemu-3.3.0-18.1
libvirt-daemon-driver-secret-3.3.0-18.1
libvirt-daemon-driver-storage-3.3.0-18.1
libvirt-daemon-driver-storage-core-3.3.0-18.1
libvirt-daemon-driver-storage-disk-3.3.0-18.1
libvirt-daemon-driver-storage-iscsi-3.3.0-18.1
libvirt-daemon-driver-storage-logical-3.3.0-18.1
libvirt-daemon-driver-storage-mpath-3.3.0-18.1
libvirt-daemon-driver-storage-rbd-3.3.0-18.1
libvirt-daemon-driver-storage-scsi-3.3.0-18.1
libvirt-daemon-driver-uml-3.3.0-18.1
libvirt-daemon-driver-vbox-3.3.0-18.1
libvirt-daemon-hooks-3.3.0-18.1
libvirt-daemon-lxc-3.3.0-18.1
libvirt-daemon-qemu-3.3.0-18.1
libvirt-daemon-uml-3.3.0-18.1
libvirt-daemon-vbox-3.3.0-18.1
libvirt-daemon-xen-3.3.0-18.1
libvirt-devel-3.3.0-18.1
libvirt-devel-32bit-3.3.0-18.1
libvirt-doc-3.3.0-18.1
libvirt-libs-3.3.0-18.1
libvirt-lock-sanlock-3.3.0-18.1
libvirt-nss-3.3.0-18.1

Ссылки

Описание

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

Затронутые продукты
openSUSE Leap 42.3:libvirt-3.3.0-18.1
openSUSE Leap 42.3:libvirt-admin-3.3.0-18.1
openSUSE Leap 42.3:libvirt-client-3.3.0-18.1
openSUSE Leap 42.3:libvirt-daemon-3.3.0-18.1
Ссылки