Security update for libvirt SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:0948-1 Final 1 1 2019-04-15T09:55:42Z current 2019-04-15T09:55:42Z 2019-04-15T09:55:42Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libvirt This update for libvirt fixes the following issues: Security issue fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#1127458). - CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595). Other issues addressed: - libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325). - conf: added new 'xenbus' controller type - util: skip RDMA detection for non-PCI network devices (bsc#1112182). - qemu: don't use CAP_DAC_OVERRIDE capability if non-root (bsc#1125665). - qemu: fix issues related to restricted permissions on /dev/sev(bsc#1102604). - libxl: save current memory value after successful balloon (bsc#1120813). - libxl: Add support for soft reset. (bsc#1081516) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-948,SUSE-SLE-DESKTOP-12-SP4-2019-948,SUSE-SLE-SDK-12-SP4-2019-948,SUSE-SLE-SERVER-12-SP4-2019-948 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20190948-1/ Link for SUSE-SU-2019:0948-1 https://lists.suse.com/pipermail/sle-security-updates/2019-April/005338.html E-Mail link for SUSE-SU-2019:0948-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1081516 SUSE Bug 1081516 https://bugzilla.suse.com/1102604 SUSE Bug 1102604 https://bugzilla.suse.com/1112182 SUSE Bug 1112182 https://bugzilla.suse.com/1120813 SUSE Bug 1120813 https://bugzilla.suse.com/1125665 SUSE Bug 1125665 https://bugzilla.suse.com/1126325 SUSE Bug 1126325 https://bugzilla.suse.com/1127458 SUSE Bug 1127458 https://bugzilla.suse.com/1131595 SUSE Bug 1131595 https://www.suse.com/security/cve/CVE-2019-3840/ SUSE CVE CVE-2019-3840 page https://www.suse.com/security/cve/CVE-2019-3886/ SUSE CVE CVE-2019-3886 page SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 libvirt-4.0.0-8.9.1 libvirt-admin-4.0.0-8.9.1 libvirt-client-4.0.0-8.9.1 libvirt-daemon-4.0.0-8.9.1 libvirt-daemon-config-network-4.0.0-8.9.1 libvirt-daemon-config-nwfilter-4.0.0-8.9.1 libvirt-daemon-driver-interface-4.0.0-8.9.1 libvirt-daemon-driver-libxl-4.0.0-8.9.1 libvirt-daemon-driver-lxc-4.0.0-8.9.1 libvirt-daemon-driver-network-4.0.0-8.9.1 libvirt-daemon-driver-nodedev-4.0.0-8.9.1 libvirt-daemon-driver-nwfilter-4.0.0-8.9.1 libvirt-daemon-driver-qemu-4.0.0-8.9.1 libvirt-daemon-driver-secret-4.0.0-8.9.1 libvirt-daemon-driver-storage-4.0.0-8.9.1 libvirt-daemon-driver-storage-core-4.0.0-8.9.1 libvirt-daemon-driver-storage-disk-4.0.0-8.9.1 libvirt-daemon-driver-storage-iscsi-4.0.0-8.9.1 libvirt-daemon-driver-storage-logical-4.0.0-8.9.1 libvirt-daemon-driver-storage-mpath-4.0.0-8.9.1 libvirt-daemon-driver-storage-rbd-4.0.0-8.9.1 libvirt-daemon-driver-storage-scsi-4.0.0-8.9.1 libvirt-daemon-hooks-4.0.0-8.9.1 libvirt-daemon-lxc-4.0.0-8.9.1 libvirt-daemon-qemu-4.0.0-8.9.1 libvirt-daemon-xen-4.0.0-8.9.1 libvirt-devel-4.0.0-8.9.1 libvirt-devel-32bit-4.0.0-8.9.1 libvirt-devel-64bit-4.0.0-8.9.1 libvirt-doc-4.0.0-8.9.1 libvirt-libs-4.0.0-8.9.1 libvirt-lock-sanlock-4.0.0-8.9.1 libvirt-nss-4.0.0-8.9.1 wireshark-plugin-libvirt-4.0.0-8.9.1 libvirt-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-admin-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-client-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-config-network-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-config-nwfilter-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-interface-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-libxl-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-lxc-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-network-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-nodedev-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-nwfilter-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-qemu-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-secret-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-storage-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-storage-core-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-storage-disk-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-storage-iscsi-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-storage-logical-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-storage-mpath-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-storage-rbd-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-driver-storage-scsi-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-lxc-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-qemu-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-daemon-xen-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-doc-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-libs-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libvirt-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-admin-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-client-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-config-network-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-config-nwfilter-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-interface-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-libxl-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-lxc-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-network-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-nodedev-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-nwfilter-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-qemu-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-secret-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-core-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-disk-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-iscsi-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-logical-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-mpath-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-rbd-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-scsi-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-hooks-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-lxc-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-qemu-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-xen-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-doc-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-libs-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-lock-sanlock-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-nss-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-admin-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-client-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-config-network-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-config-nwfilter-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-interface-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-libxl-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-lxc-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-network-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-nodedev-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-nwfilter-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-qemu-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-secret-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-core-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-disk-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-iscsi-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-logical-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-mpath-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-rbd-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-scsi-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-hooks-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-lxc-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-qemu-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-xen-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-doc-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-libs-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-lock-sanlock-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-nss-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-devel-4.0.0-8.9.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service. CVE-2019-3840 SUSE Linux Enterprise Desktop 12 SP4:libvirt-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-admin-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-client-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-config-network-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-config-nwfilter-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-interface-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-libxl-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-lxc-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-network-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-nodedev-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-nwfilter-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-qemu-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-secret-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-core-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-disk-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-iscsi-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-logical-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-mpath-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-rbd-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-scsi-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-lxc-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-qemu-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-xen-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-doc-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-libs-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-admin-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-client-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-config-network-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-config-nwfilter-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-interface-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-libxl-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-lxc-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-network-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-nodedev-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-nwfilter-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-qemu-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-secret-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-core-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-disk-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-iscsi-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-logical-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-mpath-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-rbd-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-scsi-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-hooks-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-lxc-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-qemu-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-xen-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-doc-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-libs-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-lock-sanlock-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-nss-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-admin-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-client-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-config-network-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-config-nwfilter-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-interface-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-libxl-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-lxc-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-network-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-nodedev-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-nwfilter-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-qemu-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-secret-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-core-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-disk-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-iscsi-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-logical-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-mpath-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-rbd-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-scsi-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-hooks-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-lxc-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-qemu-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-xen-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-doc-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-libs-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-lock-sanlock-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-nss-4.0.0-8.9.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libvirt-devel-4.0.0-8.9.1 moderate 3.5 AV:N/AC:M/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190948-1/ https://www.suse.com/security/cve/CVE-2019-3840.html CVE-2019-3840 https://bugzilla.suse.com/1127458 SUSE Bug 1127458 An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block. CVE-2019-3886 SUSE Linux Enterprise Desktop 12 SP4:libvirt-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-admin-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-client-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-config-network-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-config-nwfilter-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-interface-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-libxl-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-lxc-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-network-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-nodedev-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-nwfilter-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-qemu-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-secret-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-core-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-disk-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-iscsi-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-logical-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-mpath-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-rbd-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-driver-storage-scsi-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-lxc-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-qemu-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-daemon-xen-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-doc-4.0.0-8.9.1 SUSE Linux Enterprise Desktop 12 SP4:libvirt-libs-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-admin-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-client-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-config-network-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-config-nwfilter-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-interface-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-libxl-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-lxc-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-network-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-nodedev-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-nwfilter-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-qemu-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-secret-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-core-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-disk-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-iscsi-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-logical-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-mpath-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-rbd-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-scsi-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-hooks-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-lxc-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-qemu-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-xen-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-doc-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-libs-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-lock-sanlock-4.0.0-8.9.1 SUSE Linux Enterprise Server 12 SP4:libvirt-nss-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-admin-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-client-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-config-network-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-config-nwfilter-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-interface-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-libxl-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-lxc-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-network-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-nodedev-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-nwfilter-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-qemu-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-secret-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-core-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-disk-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-iscsi-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-logical-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-mpath-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-rbd-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-scsi-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-hooks-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-lxc-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-qemu-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-xen-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-doc-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-libs-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-lock-sanlock-4.0.0-8.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-nss-4.0.0-8.9.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libvirt-devel-4.0.0-8.9.1 moderate 4.8 AV:A/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190948-1/ https://www.suse.com/security/cve/CVE-2019-3886.html CVE-2019-3886 https://bugzilla.suse.com/1131595 SUSE Bug 1131595 https://bugzilla.suse.com/1133150 SUSE Bug 1133150 https://bugzilla.suse.com/1138301 SUSE Bug 1138301