Lucene search

K
suseSuseOPENSUSE-SU-2021:2812-1
HistoryAug 23, 2021 - 12:00 a.m.

Security update for libvirt (moderate)

2021-08-2300:00:00
lists.opensuse.org
31
libvirt
security update
cve-2021-3631
cve-2021-3667
selinux
storagepoollookupbytargetpath
virtlockd
suse
opensuse leap 15.3

EPSS

0.002

Percentile

61.4%

An update that solves two vulnerabilities and has two fixes
is now available.

Description:

This update for libvirt fixes the following issues:

Security issues fixed:

  • CVE-2021-3631: fix SELinux label generation logic (bsc#1187871)
  • CVE-2021-3667: Unlock object on ACL fail in
    storagePoolLookupByTargetPath (bsc#1188843)

Non-security issues fixed:

  • virtlockd: Don’t report error if lockspace exists (bsc#1184253)
  • Don’t forcibly remove ‘–listen’ arg from /etc/sysconfig/libvirtd. Add
    ‘–timeout 120’ if ‘–listen’ is not specified. (bsc#1188232)

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-SLE-15.3-2021-2812=1