An update that solves two vulnerabilities and has one errata is now available. . SUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:3038-1 Rating: important References: #1171701 #1174955 #1177155 Cross-References: CVE-2020-15708 CVE-2020-25637 Affected Products: SUSE OpenStack Cloud Crowbar 9 SUSE OpenStack Cloud 9 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server 12-SP4-LTSS ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155). - libxl: Fixed lock manager lock ordering (bsc#1171701). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2020-3038=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2020-3038=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2020-3038=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2020-3038=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): libvirt-4.0.0-8.23.1 libvirt-admin-4.0.0-8.23.1 libvirt-admin-debuginfo-4.0.0-8.23.1 libvirt-client-4.0.0-8.23.1 libvirt-client-debuginfo-4.0.0-8.23.1 libvirt-daemon-4.0.0-8.23.1 libvirt-daemon-config-network-4.0.0-8.23.1 libvirt-daemon-config-nwfilter-4.0.0-8.23.1 libvirt-daemon-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-interface-4.0.0-8.23.1 libvirt-daemon-driver-interface-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-libxl-4.0.0-8.23.1 libvirt-daemon-driver-libxl-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-lxc-4.0.0-8.23.1 libvirt-daemon-driver-lxc-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-network-4.0.0-8.23.1 libvirt-daemon-driver-network-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-nodedev-4.0.0-8.23.1 libvirt-daemon-driver-nodedev-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-nwfilter-4.0.0-8.23.1 libvirt-daemon-driver-nwfilter-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-qemu-4.0.0-8.23.1 libvirt-daemon-driver-qemu-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-secret-4.0.0-8.23.1 libvirt-daemon-driver-secret-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-4.0.0-8.23.1 libvirt-daemon-driver-storage-core-4.0.0-8.23.1 libvirt-daemon-driver-storage-core-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-disk-4.0.0-8.23.1 libvirt-daemon-driver-storage-disk-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-iscsi-4.0.0-8.23.1 libvirt-daemon-driver-storage-iscsi-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-logical-4.0.0-8.23.1 libvirt-daemon-driver-storage-logical-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-mpath-4.0.0-8.23.1 libvirt-daemon-driver-storage-mpath-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-rbd-4.0.0-8.23.1 libvirt-daemon-driver-storage-rbd-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-scsi-4.0.0-8.23.1 libvirt-daemon-driver-storage-scsi-debuginfo-4.0.0-8.23.1 libvirt-daemon-hooks-4.0.0-8.23.1 libvirt-daemon-lxc-4.0.0-8.23.1 libvirt-daemon-qemu-4.0.0-8.23.1 libvirt-daemon-xen-4.0.0-8.23.1 libvirt-debugsource-4.0.0-8.23.1 libvirt-doc-4.0.0-8.23.1 libvirt-libs-4.0.0-8.23.1 libvirt-libs-debuginfo-4.0.0-8.23.1 libvirt-lock-sanlock-4.0.0-8.23.1 libvirt-lock-sanlock-debuginfo-4.0.0-8.23.1 libvirt-nss-4.0.0-8.23.1 libvirt-nss-debuginfo-4.0.0-8.23.1 - SUSE OpenStack Cloud 9 (x86_64): libvirt-4.0.0-8.23.1 libvirt-admin-4.0.0-8.23.1 libvirt-admin-debuginfo-4.0.0-8.23.1 libvirt-client-4.0.0-8.23.1 libvirt-client-debuginfo-4.0.0-8.23.1 libvirt-daemon-4.0.0-8.23.1 libvirt-daemon-config-network-4.0.0-8.23.1 libvirt-daemon-config-nwfilter-4.0.0-8.23.1 libvirt-daemon-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-interface-4.0.0-8.23.1 libvirt-daemon-driver-interface-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-libxl-4.0.0-8.23.1 libvirt-daemon-driver-libxl-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-lxc-4.0.0-8.23.1 libvirt-daemon-driver-lxc-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-network-4.0.0-8.23.1 libvirt-daemon-driver-network-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-nodedev-4.0.0-8.23.1 libvirt-daemon-driver-nodedev-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-nwfilter-4.0.0-8.23.1 libvirt-daemon-driver-nwfilter-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-qemu-4.0.0-8.23.1 libvirt-daemon-driver-qemu-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-secret-4.0.0-8.23.1 libvirt-daemon-driver-secret-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-4.0.0-8.23.1 libvirt-daemon-driver-storage-core-4.0.0-8.23.1 libvirt-daemon-driver-storage-core-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-disk-4.0.0-8.23.1 libvirt-daemon-driver-storage-disk-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-iscsi-4.0.0-8.23.1 libvirt-daemon-driver-storage-iscsi-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-logical-4.0.0-8.23.1 libvirt-daemon-driver-storage-logical-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-mpath-4.0.0-8.23.1 libvirt-daemon-driver-storage-mpath-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-rbd-4.0.0-8.23.1 libvirt-daemon-driver-storage-rbd-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-scsi-4.0.0-8.23.1 libvirt-daemon-driver-storage-scsi-debuginfo-4.0.0-8.23.1 libvirt-daemon-hooks-4.0.0-8.23.1 libvirt-daemon-lxc-4.0.0-8.23.1 libvirt-daemon-qemu-4.0.0-8.23.1 libvirt-daemon-xen-4.0.0-8.23.1 libvirt-debugsource-4.0.0-8.23.1 libvirt-doc-4.0.0-8.23.1 libvirt-libs-4.0.0-8.23.1 libvirt-libs-debuginfo-4.0.0-8.23.1 libvirt-lock-sanlock-4.0.0-8.23.1 libvirt-lock-sanlock-debuginfo-4.0.0-8.23.1 libvirt-nss-4.0.0-8.23.1 libvirt-nss-debuginfo-4.0.0-8.23.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64): libvirt-4.0.0-8.23.1 libvirt-admin-4.0.0-8.23.1 libvirt-admin-debuginfo-4.0.0-8.23.1 libvirt-client-4.0.0-8.23.1 libvirt-client-debuginfo-4.0.0-8.23.1 libvirt-daemon-4.0.0-8.23.1 libvirt-daemon-config-network-4.0.0-8.23.1 libvirt-daemon-config-nwfilter-4.0.0-8.23.1 libvirt-daemon-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-interface-4.0.0-8.23.1 libvirt-daemon-driver-interface-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-lxc-4.0.0-8.23.1 libvirt-daemon-driver-lxc-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-network-4.0.0-8.23.1 libvirt-daemon-driver-network-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-nodedev-4.0.0-8.23.1 libvirt-daemon-driver-nodedev-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-nwfilter-4.0.0-8.23.1 libvirt-daemon-driver-nwfilter-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-qemu-4.0.0-8.23.1 libvirt-daemon-driver-qemu-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-secret-4.0.0-8.23.1 libvirt-daemon-driver-secret-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-4.0.0-8.23.1 libvirt-daemon-driver-storage-core-4.0.0-8.23.1 libvirt-daemon-driver-storage-core-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-disk-4.0.0-8.23.1 libvirt-daemon-driver-storage-disk-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-iscsi-4.0.0-8.23.1 libvirt-daemon-driver-storage-iscsi-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-logical-4.0.0-8.23.1 libvirt-daemon-driver-storage-logical-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-mpath-4.0.0-8.23.1 libvirt-daemon-driver-storage-mpath-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-scsi-4.0.0-8.23.1 libvirt-daemon-driver-storage-scsi-debuginfo-4.0.0-8.23.1 libvirt-daemon-hooks-4.0.0-8.23.1 libvirt-daemon-lxc-4.0.0-8.23.1 libvirt-daemon-qemu-4.0.0-8.23.1 libvirt-debugsource-4.0.0-8.23.1 libvirt-doc-4.0.0-8.23.1 libvirt-libs-4.0.0-8.23.1 libvirt-libs-debuginfo-4.0.0-8.23.1 libvirt-lock-sanlock-4.0.0-8.23.1 libvirt-lock-sanlock-debuginfo-4.0.0-8.23.1 libvirt-nss-4.0.0-8.23.1 libvirt-nss-debuginfo-4.0.0-8.23.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (x86_64): libvirt-daemon-driver-libxl-4.0.0-8.23.1 libvirt-daemon-driver-libxl-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-rbd-4.0.0-8.23.1 libvirt-daemon-driver-storage-rbd-debuginfo-4.0.0-8.23.1 libvirt-daemon-xen-4.0.0-8.23.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): libvirt-4.0.0-8.23.1 libvirt-admin-4.0.0-8.23.1 libvirt-admin-debuginfo-4.0.0-8.23.1 libvirt-client-4.0.0-8.23.1 libvirt-client-debuginfo-4.0.0-8.23.1 libvirt-daemon-4.0.0-8.23.1 libvirt-daemon-config-network-4.0.0-8.23.1 libvirt-daemon-config-nwfilter-4.0.0-8.23.1 libvirt-daemon-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-interface-4.0.0-8.23.1 libvirt-daemon-driver-interface-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-lxc-4.0.0-8.23.1 libvirt-daemon-driver-lxc-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-network-4.0.0-8.23.1 libvirt-daemon-driver-network-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-nodedev-4.0.0-8.23.1 libvirt-daemon-driver-nodedev-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-nwfilter-4.0.0-8.23.1 libvirt-daemon-driver-nwfilter-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-qemu-4.0.0-8.23.1 libvirt-daemon-driver-qemu-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-secret-4.0.0-8.23.1 libvirt-daemon-driver-secret-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-4.0.0-8.23.1 libvirt-daemon-driver-storage-core-4.0.0-8.23.1 libvirt-daemon-driver-storage-core-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-disk-4.0.0-8.23.1 libvirt-daemon-driver-storage-disk-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-iscsi-4.0.0-8.23.1 libvirt-daemon-driver-storage-iscsi-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-logical-4.0.0-8.23.1 libvirt-daemon-driver-storage-logical-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-mpath-4.0.0-8.23.1 libvirt-daemon-driver-storage-mpath-debuginfo-4.0.0-8.23.1 libvirt-daemon-driver-storage-scsi-4.0.0-8.23.1 libvirt-daemon-driver-storage-scsi-debuginfo-4.0.0-8.23.1 libvirt-daemon-hooks-4.0.0-8.23.1 libvirt-daemon-lxc-4.0.0-8.23.1 libvirt-daemon-qemu-4.0.0-8.23.1 libvirt-debugsource-4.0.0-8.23.1 libvirt-doc-4.0.0-8.23.1 libvirt-libs-4.0.0-8.23.1 libvirt-libs-debuginfo-4.0.0-8.23.1 libvirt-lock-sanlock-4.0.0-8.23.1 libvirt-lock-sanlock-debuginfo-4.0.0-8.23.1 libvirt-nss-4.0.0-8.23.1 libvirt-nss-debuginfo-4.0.0-8.23.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 x86_64): libvirt-daemon-driver-storage-rbd-4.0.0-8.23.1 libvirt-daemon-driver-storage-rbd-debuginfo-4.0.0-8.23.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (x86_64): libvirt-daemon-driver-libxl-4.0.0-8.23.1 libvirt-daemon-driver-libxl-debuginfo-4.0.0-8.23.1 libvirt-daemon-xen-4.0.0-8.23.1 References: https://www.suse.com/security/cve/CVE-2020-15708.html https://www.suse.com/security/cve/CVE-2020-25637.html https://bugzilla.suse.com/1171701 https://bugzilla.suse.com/1174955 https://bugzilla.suse.com/1177155 . A patch release for OpenSSL tackles significant security flaws found in Debian systems, improving defense against potential threats.. libvirt update,SUSE advisory,security patch,OpenStack vulnerability. . Severity: Important. LinuxSecurity.com Team
Updated upstream sources.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-480 2005-06-29 ---------------------------------------------------------------------Product : Fedora Core 4 Name : gulm Version : 1.0.0 Release : 2 Summary : gulm - One possible lock manager for GFS Description : gulm - One possible lock manager for GFS ---------------------------------------------------------------------Update Information: Updated upstream sources. ------------------------------------------------------------------------------------------------------------------------------------------This update can be downloaded from: 5120cdd16b14847f58282171113b2f01 SRPMS/gulm-1.0.0-2.src.rpm ab94be38a7a899be8e8c4a66443d9942 ppc/gulm-1.0.0-2.ppc.rpm b587ac6e773b662dee2c2854dd093d3d ppc/gulm-devel-1.0.0-2.ppc.rpm fea70128b85980de9c1a34c7053a233a ppc/debug/gulm-debuginfo-1.0.0-2.ppc.rpm 4d95e62c2566196b935d52af1ecdf7a0 x86_64/gulm-1.0.0-2.x86_64.rpm f724c902c136955afa05cf5a5e9f822a x86_64/gulm-devel-1.0.0-2.x86_64.rpm c7bd8d9fa2b5d6d4f661a7a8845b090d x86_64/debug/gulm-debuginfo-1.0.0-2.x86_64.rpm d1c38de691d959883b430e8b046d05f6 i386/gulm-1.0.0-2.i386.rpm a9994112e9d86d922e1971229eee3a2e i386/gulm-devel-1.0.0-2.i386.rpm 46e1913b39da74ad34373fc3525894af i386/debug/gulm-debuginfo-1.0.0-2.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list
Get the latest Linux and open source security news straight to your inbox.