Уведомление безопасности SUSE-SU-2019:0948-1

Средняя (4.8)

(AV:A/AC:L/Au:N/C:P/I:N/A:P)

SUSE

libvirt (any) libvirt-admin (any) libvirt-admin-debuginfo (any) libvirt-client (any) libvirt-client-debuginfo (any) libvirt-daemon (any) libvirt-daemon-config-network (any) libvirt-daemon-config-nwfilter (any) libvirt-daemon-debuginfo (any) libvirt-daemon-driver-interface (any) libvirt-daemon-driver-interface-debuginfo (any) libvirt-daemon-driver-libxl (any) libvirt-daemon-driver-libxl-debuginfo (any) libvirt-daemon-driver-lxc (any) libvirt-daemon-driver-lxc-debuginfo (any) libvirt-daemon-driver-network (any) libvirt-daemon-driver-network-debuginfo (any) libvirt-daemon-driver-nodedev (any) libvirt-daemon-driver-nodedev-debuginfo (any) libvirt-daemon-driver-nwfilter (any) libvirt-daemon-driver-nwfilter-debuginfo (any) libvirt-daemon-driver-qemu (any) libvirt-daemon-driver-qemu-debuginfo (any) libvirt-daemon-driver-secret (any) libvirt-daemon-driver-secret-debuginfo (any) libvirt-daemon-driver-storage (any) libvirt-daemon-driver-storage-core (any) libvirt-daemon-driver-storage-core-debuginfo (any) libvirt-daemon-driver-storage-disk (any) libvirt-daemon-driver-storage-disk-debuginfo (any) libvirt-daemon-driver-storage-iscsi (any) libvirt-daemon-driver-storage-iscsi-debuginfo (any) libvirt-daemon-driver-storage-logical (any) libvirt-daemon-driver-storage-logical-debuginfo (any) libvirt-daemon-driver-storage-mpath (any) libvirt-daemon-driver-storage-mpath-debuginfo (any) libvirt-daemon-driver-storage-rbd (any) libvirt-daemon-driver-storage-rbd-debuginfo (any) libvirt-daemon-driver-storage-scsi (any) libvirt-daemon-driver-storage-scsi-debuginfo (any) libvirt-daemon-hooks (any) libvirt-daemon-lxc (any) libvirt-daemon-qemu (any) libvirt-daemon-xen (any) libvirt-debugsource (any) libvirt-doc (any) libvirt-libs (any) libvirt-libs-debuginfo (any) libvirt-lock-sanlock (any) libvirt-lock-sanlock-debuginfo (any) libvirt-nss (any) libvirt-nss-debuginfo (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Desktop 12-SP4, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP4

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Desktop 12-SP4:
x86_64:
libvirt-daemon-driver-storage-iscsi - 4.0.0-8.9.1
libvirt-daemon-driver-storage-core - 4.0.0-8.9.1
libvirt-daemon-driver-libxl - 4.0.0-8.9.1
libvirt-daemon-driver-lxc-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-nwfilter - 4.0.0-8.9.1
libvirt-daemon-driver-nodedev-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-network - 4.0.0-8.9.1
libvirt-daemon-driver-libxl-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-secret-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-storage-rbd - 4.0.0-8.9.1
libvirt-daemon-driver-storage-logical - 4.0.0-8.9.1
libvirt-client - 4.0.0-8.9.1
libvirt-admin-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-storage-mpath-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-storage - 4.0.0-8.9.1
libvirt-debugsource - 4.0.0-8.9.1
libvirt-daemon-debuginfo - 4.0.0-8.9.1
libvirt-daemon-qemu - 4.0.0-8.9.1
libvirt-daemon-driver-storage-scsi-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-nodedev - 4.0.0-8.9.1
libvirt-doc - 4.0.0-8.9.1
libvirt-daemon-driver-network-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-storage-logical-debuginfo - 4.0.0-8.9.1
libvirt-daemon-xen - 4.0.0-8.9.1
libvirt-daemon-driver-storage-disk - 4.0.0-8.9.1
libvirt-libs - 4.0.0-8.9.1
libvirt-client-debuginfo - 4.0.0-8.9.1
libvirt-daemon-lxc - 4.0.0-8.9.1
libvirt-daemon-driver-storage-core-debuginfo - 4.0.0-8.9.1
libvirt-daemon - 4.0.0-8.9.1
libvirt-daemon-driver-qemu - 4.0.0-8.9.1
libvirt-daemon-driver-interface-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-qemu-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-storage-disk-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-lxc - 4.0.0-8.9.1
libvirt-daemon-driver-storage-rbd-debuginfo - 4.0.0-8.9.1
libvirt-libs-debuginfo - 4.0.0-8.9.1
libvirt-admin - 4.0.0-8.9.1
libvirt-daemon-driver-storage-mpath - 4.0.0-8.9.1
libvirt-daemon-config-nwfilter - 4.0.0-8.9.1
libvirt-daemon-driver-interface - 4.0.0-8.9.1
libvirt - 4.0.0-8.9.1
libvirt-daemon-driver-nwfilter-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-secret - 4.0.0-8.9.1
libvirt-daemon-driver-storage-scsi - 4.0.0-8.9.1
libvirt-daemon-config-network - 4.0.0-8.9.1
libvirt-daemon-driver-storage-iscsi-debuginfo - 4.0.0-8.9.1
SUSE Linux Enterprise Server 12-SP4:
aarch64, ppc64le, s390x, x86_64:
libvirt-daemon-driver-storage-iscsi - 4.0.0-8.9.1
libvirt-daemon-driver-storage-core - 4.0.0-8.9.1
libvirt-daemon-driver-lxc-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-nwfilter - 4.0.0-8.9.1
libvirt-daemon-driver-nodedev-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-network - 4.0.0-8.9.1
libvirt-nss - 4.0.0-8.9.1
libvirt-daemon-driver-secret-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-storage-logical - 4.0.0-8.9.1
libvirt-client - 4.0.0-8.9.1
libvirt-daemon-driver-qemu-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-storage-mpath-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-storage - 4.0.0-8.9.1
libvirt-debugsource - 4.0.0-8.9.1
libvirt-daemon-debuginfo - 4.0.0-8.9.1
libvirt-daemon-qemu - 4.0.0-8.9.1
libvirt-daemon-driver-storage-scsi-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-nodedev - 4.0.0-8.9.1
libvirt-lock-sanlock-debuginfo - 4.0.0-8.9.1
libvirt-doc - 4.0.0-8.9.1
libvirt-daemon-driver-network-debuginfo - 4.0.0-8.9.1
libvirt-nss-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-storage-logical-debuginfo - 4.0.0-8.9.1
libvirt-admin-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-storage-disk - 4.0.0-8.9.1
libvirt-libs - 4.0.0-8.9.1
libvirt-lock-sanlock - 4.0.0-8.9.1
libvirt-client-debuginfo - 4.0.0-8.9.1
libvirt-daemon-lxc - 4.0.0-8.9.1
libvirt-daemon-driver-storage-core-debuginfo - 4.0.0-8.9.1
libvirt-daemon - 4.0.0-8.9.1
libvirt-daemon-driver-qemu - 4.0.0-8.9.1
libvirt-daemon-driver-interface-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-storage-disk-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-lxc - 4.0.0-8.9.1
libvirt-libs-debuginfo - 4.0.0-8.9.1
libvirt-daemon-hooks - 4.0.0-8.9.1
libvirt-admin - 4.0.0-8.9.1
libvirt-daemon-driver-storage-mpath - 4.0.0-8.9.1
libvirt-daemon-config-nwfilter - 4.0.0-8.9.1
libvirt-daemon-driver-interface - 4.0.0-8.9.1
libvirt - 4.0.0-8.9.1
libvirt-daemon-driver-nwfilter-debuginfo - 4.0.0-8.9.1
libvirt-daemon-driver-secret - 4.0.0-8.9.1
libvirt-daemon-driver-storage-scsi - 4.0.0-8.9.1
libvirt-daemon-config-network - 4.0.0-8.9.1
libvirt-daemon-driver-storage-iscsi-debuginfo - 4.0.0-8.9.1
SUSE Linux Enterprise Server 12-SP4:
x86_64:
libvirt-daemon-driver-libxl - 4.0.0-8.9.1
libvirt-daemon-driver-libxl-debuginfo - 4.0.0-8.9.1
libvirt-daemon-xen - 4.0.0-8.9.1
SUSE Linux Enterprise Server 12-SP4:
aarch64, x86_64:
libvirt-daemon-driver-storage-rbd - 4.0.0-8.9.1
libvirt-daemon-driver-storage-rbd-debuginfo - 4.0.0-8.9.1
SUSE Linux Enterprise Software Development Kit 12-SP4:
aarch64, ppc64le, s390x, x86_64:
libvirt-devel - 4.0.0-8.9.1
libvirt-debugsource - 4.0.0-8.9.1

http://lists.suse.com/pipermail/sle-security-updates/2019-April/005338.html
https://bugzilla.suse.com/1081516
https://bugzilla.suse.com/1102604
https://bugzilla.suse.com/1112182
https://bugzilla.suse.com/1120813
https://bugzilla.suse.com/1125665
https://bugzilla.suse.com/1126325
https://bugzilla.suse.com/1127458
https://bugzilla.suse.com/1131595

Источник: CVE
Наименование: CVE-2019-3886
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3886

Источник: CVE
Наименование: CVE-2019-3840
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3840