Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

openSUSE Leap 15.2: 2021:1451-1 Moderate: Libvirt DoS Vulnerability Fix

opensuse
Calendar Grey November 5, 2021
Dist Opensuse Esm H88
A significant patch for openSUSE Leap 15.2's libvirt has been released to mitigate a DoS vulnerability, along with multiple updates provided.
An update that solves one vulnerability and has 6 fixes is now available

Description

This update for libvirt fixes the following issues:

- CVE-2021-3667: Fixed a DoS vulnerability in the libvirt

virStoragePoolLookupByTargetPath API. (bsc#1188843)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.2:

zypper in -t patch openSUSE-2021-1451=1

Package List

- openSUSE Leap 15.2 (i586 x86_64):

libvirt-6.0.0-lp152.9.15.1

libvirt-admin-6.0.0-lp152.9.15.1

libvirt-admin-debuginfo-6.0.0-lp152.9.15.1

libvirt-client-6.0.0-lp152.9.15.1

libvirt-client-debuginfo-6.0.0-lp152.9.15.1

libvirt-daemon-6.0.0-lp152.9.15.1

libvirt-daemon-config-network-6.0.0-lp152.9.15.1

libvirt-daemon-config-nwfilter-6.0.0-lp152.9.15.1

libvirt-daemon-debuginfo-6.0.0-lp152.9.15.1

libvirt-daemon-driver-interface-6.0.0-lp152.9.15.1

libvirt-daemon-driver-interface-debuginfo-6.0.0-lp152.9.15.1

libvirt-daemon-driver-lxc-6.0.0-lp152.9.15.1

libvirt-daemon-driver-lxc-debuginfo-6.0.0-lp152.9.15.1

libvirt-daemon-driver-network-6.0.0-lp152.9.15.1

libvirt-daemon-driver-network-debuginfo-6.0.0-lp152.9.15.1

libvirt-daemon-driver-nodedev-6.0.0-lp152.9.15.1

libvirt-daemon-driver-nodedev-debuginfo-6.0.0-lp152.9.15.1

libvirt-daemon-driver-nwfilter-6.0.0-lp152.9.15.1

libvirt-daemon-driver-nwfilter-debuginfo-6.0.0-lp152.9.15.1

libvirt-daemon-driver-qemu-6.0.0-lp152.9.15.1

libvirt-daemon-driver-qemu-debuginfo-6.0.0-...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2021-3667.html

https://bugzilla.suse.com/1177902

https://bugzilla.suse.com/1186398

https://bugzilla.suse.com/1188232

https://bugzilla.suse.com/1188843

https://bugzilla.suse.com/1190420

https://bugzilla.suse.com/1190693

https://bugzilla.suse.com/1190695

Announcement ID: openSUSE-SU-2021:1451-1
Rating: moderate
Affected Products: openSUSE Leap 15.2 ble.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here