(RHSA-2019:1580) Important: virt:rhel security update

2019-06-2012:44:28

access.redhat.com

112

0.0004 Low

EPSS

Percentile

14.4%

JSON

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fix(es):

libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API (CVE-2019-10161)
libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients (CVE-2019-10166)
libvirt: arbitrary command execution via virConnectGetDomainCapabilities API (CVE-2019-10167)
libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs (CVE-2019-10168)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64libvirt-libs< 4.5.0-23.3.module+el8.0.0.z+3418+a72cf898libvirt-libs-4.5.0-23.3.module+el8.0.0.z+3418+a72cf898.aarch64.rpm
RedHatanyaarch64hivex-debuginfo< 1.3.15-6.module+el8.0.0.z+3418+a72cf898hivex-debuginfo-1.3.15-6.module+el8.0.0.z+3418+a72cf898.aarch64.rpm
RedHatanyx86_64perl-sys-guestfs-debuginfo< 1.38.4-10.1.module+el8.0.0.z+3418+a72cf898perl-Sys-Guestfs-debuginfo-1.38.4-10.1.module+el8.0.0.z+3418+a72cf898.x86_64.rpm
RedHatanys390xlibvirt-daemon-driver-storage-disk-debuginfo< 4.5.0-23.3.module+el8.0.0.z+3418+a72cf898libvirt-daemon-driver-storage-disk-debuginfo-4.5.0-23.3.module+el8.0.0.z+3418+a72cf898.s390x.rpm
RedHatanyx86_64qemu-kvm-common-debuginfo< 2.12.0-64.module+el8.0.0.z+3418+a72cf898.2qemu-kvm-common-debuginfo-2.12.0-64.module+el8.0.0.z+3418+a72cf898.2.x86_64.rpm
RedHatanyppc64lehivex-debugsource< 1.3.15-6.module+el8.0.0.z+3418+a72cf898hivex-debugsource-1.3.15-6.module+el8.0.0.z+3418+a72cf898.ppc64le.rpm
RedHatanyaarch64libvirt-daemon-driver-storage-iscsi< 4.5.0-23.3.module+el8.0.0.z+3418+a72cf898libvirt-daemon-driver-storage-iscsi-4.5.0-23.3.module+el8.0.0.z+3418+a72cf898.aarch64.rpm
RedHatanys390xlibvirt-client< 4.5.0-23.3.module+el8.0.0.z+3418+a72cf898libvirt-client-4.5.0-23.3.module+el8.0.0.z+3418+a72cf898.s390x.rpm
RedHatanyppc64lelibvirt-daemon-driver-secret< 4.5.0-23.3.module+el8.0.0.z+3418+a72cf898libvirt-daemon-driver-secret-4.5.0-23.3.module+el8.0.0.z+3418+a72cf898.ppc64le.rpm
RedHatanyaarch64qemu-kvm-block-curl< 2.12.0-64.module+el8.0.0.z+3418+a72cf898.2qemu-kvm-block-curl-2.12.0-64.module+el8.0.0.z+3418+a72cf898.2.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	aarch64	libvirt-libs	< 4.5.0-23.3.module+el8.0.0.z+3418+a72cf898	libvirt-libs-4.5.0-23.3.module+el8.0.0.z+3418+a72cf898.aarch64.rpm
RedHat	any	aarch64	hivex-debuginfo	< 1.3.15-6.module+el8.0.0.z+3418+a72cf898	hivex-debuginfo-1.3.15-6.module+el8.0.0.z+3418+a72cf898.aarch64.rpm
RedHat	any	x86_64	perl-sys-guestfs-debuginfo	< 1.38.4-10.1.module+el8.0.0.z+3418+a72cf898	perl-Sys-Guestfs-debuginfo-1.38.4-10.1.module+el8.0.0.z+3418+a72cf898.x86_64.rpm
RedHat	any	s390x	libvirt-daemon-driver-storage-disk-debuginfo	< 4.5.0-23.3.module+el8.0.0.z+3418+a72cf898	libvirt-daemon-driver-storage-disk-debuginfo-4.5.0-23.3.module+el8.0.0.z+3418+a72cf898.s390x.rpm
RedHat	any	x86_64	qemu-kvm-common-debuginfo	< 2.12.0-64.module+el8.0.0.z+3418+a72cf898.2	qemu-kvm-common-debuginfo-2.12.0-64.module+el8.0.0.z+3418+a72cf898.2.x86_64.rpm
RedHat	any	ppc64le	hivex-debugsource	< 1.3.15-6.module+el8.0.0.z+3418+a72cf898	hivex-debugsource-1.3.15-6.module+el8.0.0.z+3418+a72cf898.ppc64le.rpm
RedHat	any	aarch64	libvirt-daemon-driver-storage-iscsi	< 4.5.0-23.3.module+el8.0.0.z+3418+a72cf898	libvirt-daemon-driver-storage-iscsi-4.5.0-23.3.module+el8.0.0.z+3418+a72cf898.aarch64.rpm
RedHat	any	s390x	libvirt-client	< 4.5.0-23.3.module+el8.0.0.z+3418+a72cf898	libvirt-client-4.5.0-23.3.module+el8.0.0.z+3418+a72cf898.s390x.rpm
RedHat	any	ppc64le	libvirt-daemon-driver-secret	< 4.5.0-23.3.module+el8.0.0.z+3418+a72cf898	libvirt-daemon-driver-secret-4.5.0-23.3.module+el8.0.0.z+3418+a72cf898.ppc64le.rpm
RedHat	any	aarch64	qemu-kvm-block-curl	< 2.12.0-64.module+el8.0.0.z+3418+a72cf898.2	qemu-kvm-block-curl-2.12.0-64.module+el8.0.0.z+3418+a72cf898.2.aarch64.rpm