Security update for libvirt SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2018:0322-1 Final 1 1 2018-01-31T18:40:39Z current 2018-01-31T18:40:39Z 2018-01-31T18:40:39Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libvirt This update for libvirt provides several fixes. This security issue was fixed: - CVE-2018-5748: Prevent resource exhaustion via qemuMonitorIORead() method which allowed to cause DoS (bsc#1076500). These security issues were fixed: - Add a qemu hook script providing functionality similar to Xen's block-dmmd script. (fate#324177) - schema: Make disk driver name attribute optional. (bsc#1073973) - virt-create-rootfs: Handle all SLE 12 versions. (bsc#1072887) - libvirt-guests: Fix the 'stop' operation when action is 'suspend'. (bsc#1070130) - s390: Fix missing host cpu model info. (bsc#1065766) - cpu: Add new EPYC CPU model. (bsc#1052825, fate#324038) - pci: Fix the detection of the link's maximum speed. (bsc#1064947) - nodedev: Increase the netlink socket buffer size. (bsc#1035442) - storage: Fix a race between the volume creation and the pool refresh. (bsc#1062571) - daemon: Drop the minsize directive from hypervisor logrotate files. (bsc#1062760) This update was imported from the SUSE:SLE-12-SP3:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/opensuse-updates/2018-01/msg00120.html E-Mail link for openSUSE-SU-2018:0322-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Leap 42.3 libvirt-3.3.0-12.1 libvirt-admin-3.3.0-12.1 libvirt-client-3.3.0-12.1 libvirt-daemon-3.3.0-12.1 libvirt-daemon-config-network-3.3.0-12.1 libvirt-daemon-config-nwfilter-3.3.0-12.1 libvirt-daemon-driver-interface-3.3.0-12.1 libvirt-daemon-driver-libxl-3.3.0-12.1 libvirt-daemon-driver-lxc-3.3.0-12.1 libvirt-daemon-driver-network-3.3.0-12.1 libvirt-daemon-driver-nodedev-3.3.0-12.1 libvirt-daemon-driver-nwfilter-3.3.0-12.1 libvirt-daemon-driver-qemu-3.3.0-12.1 libvirt-daemon-driver-secret-3.3.0-12.1 libvirt-daemon-driver-storage-3.3.0-12.1 libvirt-daemon-driver-storage-core-3.3.0-12.1 libvirt-daemon-driver-storage-disk-3.3.0-12.1 libvirt-daemon-driver-storage-iscsi-3.3.0-12.1 libvirt-daemon-driver-storage-logical-3.3.0-12.1 libvirt-daemon-driver-storage-mpath-3.3.0-12.1 libvirt-daemon-driver-storage-rbd-3.3.0-12.1 libvirt-daemon-driver-storage-scsi-3.3.0-12.1 libvirt-daemon-driver-uml-3.3.0-12.1 libvirt-daemon-driver-vbox-3.3.0-12.1 libvirt-daemon-hooks-3.3.0-12.1 libvirt-daemon-lxc-3.3.0-12.1 libvirt-daemon-qemu-3.3.0-12.1 libvirt-daemon-uml-3.3.0-12.1 libvirt-daemon-vbox-3.3.0-12.1 libvirt-daemon-xen-3.3.0-12.1 libvirt-devel-3.3.0-12.1 libvirt-devel-32bit-3.3.0-12.1 libvirt-doc-3.3.0-12.1 libvirt-libs-3.3.0-12.1 libvirt-lock-sanlock-3.3.0-12.1 libvirt-nss-3.3.0-12.1 libvirt-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-admin-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-client-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-config-network-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-config-nwfilter-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-interface-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-libxl-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-lxc-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-network-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-nodedev-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-nwfilter-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-qemu-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-secret-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-storage-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-storage-core-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-storage-disk-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-storage-iscsi-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-storage-logical-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-storage-mpath-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-storage-rbd-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-storage-scsi-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-uml-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-driver-vbox-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-hooks-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-lxc-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-qemu-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-uml-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-vbox-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-daemon-xen-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-devel-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-devel-32bit-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-doc-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-libs-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-lock-sanlock-3.3.0-12.1 as a component of openSUSE Leap 42.3 libvirt-nss-3.3.0-12.1 as a component of openSUSE Leap 42.3 qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply. CVE-2018-5748 openSUSE Leap 42.3:libvirt-3.3.0-12.1 openSUSE Leap 42.3:libvirt-admin-3.3.0-12.1 openSUSE Leap 42.3:libvirt-client-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-config-network-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-config-nwfilter-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-interface-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-libxl-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-lxc-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-network-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-nodedev-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-nwfilter-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-qemu-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-secret-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-storage-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-storage-core-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-storage-disk-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-storage-iscsi-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-storage-logical-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-storage-mpath-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-storage-rbd-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-storage-scsi-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-uml-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-driver-vbox-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-hooks-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-lxc-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-qemu-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-uml-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-vbox-3.3.0-12.1 openSUSE Leap 42.3:libvirt-daemon-xen-3.3.0-12.1 openSUSE Leap 42.3:libvirt-devel-3.3.0-12.1 openSUSE Leap 42.3:libvirt-devel-32bit-3.3.0-12.1 openSUSE Leap 42.3:libvirt-doc-3.3.0-12.1 openSUSE Leap 42.3:libvirt-libs-3.3.0-12.1 openSUSE Leap 42.3:libvirt-lock-sanlock-3.3.0-12.1 openSUSE Leap 42.3:libvirt-nss-3.3.0-12.1 low Please Install the update. https://lists.opensuse.org/opensuse-updates/2018-01/msg00120.html https://www.suse.com/security/cve/CVE-2018-5748.html CVE-2018-5748 https://bugzilla.suse.com/1076500 SUSE Bug 1076500 https://bugzilla.suse.com/1083625 SUSE Bug 1083625