Security update for libvirt SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:0923-1 Final 1 1 2016-03-31T12:19:00Z current 2016-03-31T12:19:00Z 2016-03-31T12:19:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libvirt This update to libvirt 1.2.18.2 fixes the following minor security issue: - CVE-2015-5313: Directory traversal allowed privilege escalation (bsc#953110) The following bugs were fixed: - bsc#952849: Don't add apparmor deny rw rule for 9P readonly mounts. - bsc#960305: libxl: support parsing and formatting vif bandwidth - bsc#954872: libxl: Add support for block-{dmmd,drbd,npiv} scripts - bsc#964465: Remove 'Wants=xencommons.service' from libvirtd service file The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP1-2016-531,SUSE-SLE-SDK-12-SP1-2016-531,SUSE-SLE-SERVER-12-SP1-2016-531,SUSE-SLE-WE-12-SP1-2016-531 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20160923-1/ Link for SUSE-SU-2016:0923-1 https://lists.suse.com/pipermail/sle-security-updates/2016-March/001975.html E-Mail link for SUSE-SU-2016:0923-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/952849 SUSE Bug 952849 https://bugzilla.suse.com/953110 SUSE Bug 953110 https://bugzilla.suse.com/954872 SUSE Bug 954872 https://bugzilla.suse.com/960305 SUSE Bug 960305 https://bugzilla.suse.com/964465 SUSE Bug 964465 https://www.suse.com/security/cve/CVE-2015-5313/ SUSE CVE CVE-2015-5313 page SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1 libvirt-1.2.18.2-8.1 libvirt-client-1.2.18.2-8.1 libvirt-client-32bit-1.2.18.2-8.1 libvirt-daemon-1.2.18.2-8.1 libvirt-daemon-config-network-1.2.18.2-8.1 libvirt-daemon-config-nwfilter-1.2.18.2-8.1 libvirt-daemon-driver-interface-1.2.18.2-8.1 libvirt-daemon-driver-libxl-1.2.18.2-8.1 libvirt-daemon-driver-lxc-1.2.18.2-8.1 libvirt-daemon-driver-network-1.2.18.2-8.1 libvirt-daemon-driver-nodedev-1.2.18.2-8.1 libvirt-daemon-driver-nwfilter-1.2.18.2-8.1 libvirt-daemon-driver-qemu-1.2.18.2-8.1 libvirt-daemon-driver-secret-1.2.18.2-8.1 libvirt-daemon-driver-storage-1.2.18.2-8.1 libvirt-daemon-lxc-1.2.18.2-8.1 libvirt-daemon-qemu-1.2.18.2-8.1 libvirt-daemon-xen-1.2.18.2-8.1 libvirt-doc-1.2.18.2-8.1 libvirt-devel-1.2.18.2-8.1 libvirt-lock-sanlock-1.2.18.2-8.1 libvirt-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-client-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-client-32bit-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-config-network-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-config-nwfilter-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-driver-interface-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-driver-libxl-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-driver-lxc-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-driver-network-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-driver-nodedev-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-driver-nwfilter-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-driver-qemu-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-driver-secret-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-driver-storage-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-lxc-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-qemu-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-daemon-xen-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-doc-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libvirt-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-client-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-config-network-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-config-nwfilter-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-driver-interface-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-driver-libxl-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-driver-lxc-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-driver-network-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-driver-nodedev-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-driver-nwfilter-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-driver-qemu-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-driver-secret-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-driver-storage-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-lxc-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-qemu-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-daemon-xen-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-doc-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-lock-sanlock-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server 12 SP1 libvirt-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-client-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-config-network-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-config-nwfilter-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-driver-interface-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-driver-libxl-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-driver-lxc-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-driver-network-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-driver-nodedev-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-driver-nwfilter-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-driver-qemu-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-driver-secret-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-driver-storage-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-lxc-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-qemu-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-daemon-xen-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-doc-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-lock-sanlock-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libvirt-devel-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libvirt-client-32bit-1.2.18.2-8.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1 Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage/storage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name. CVE-2015-5313 SUSE Linux Enterprise Desktop 12 SP1:libvirt-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-client-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-client-32bit-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-config-network-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-config-nwfilter-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-driver-interface-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-driver-libxl-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-driver-lxc-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-driver-network-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-driver-nodedev-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-driver-nwfilter-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-driver-qemu-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-driver-secret-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-driver-storage-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-lxc-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-qemu-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-daemon-xen-1.2.18.2-8.1 SUSE Linux Enterprise Desktop 12 SP1:libvirt-doc-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-client-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-config-network-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-config-nwfilter-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-driver-interface-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-driver-libxl-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-driver-lxc-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-driver-network-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-driver-nodedev-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-driver-nwfilter-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-driver-qemu-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-driver-secret-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-driver-storage-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-lxc-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-qemu-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-daemon-xen-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-doc-1.2.18.2-8.1 SUSE Linux Enterprise Server 12 SP1:libvirt-lock-sanlock-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-client-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-config-network-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-config-nwfilter-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-driver-interface-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-driver-libxl-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-driver-lxc-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-driver-network-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-driver-nodedev-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-driver-nwfilter-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-driver-qemu-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-driver-secret-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-driver-storage-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-lxc-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-qemu-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-daemon-xen-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-doc-1.2.18.2-8.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libvirt-lock-sanlock-1.2.18.2-8.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libvirt-devel-1.2.18.2-8.1 SUSE Linux Enterprise Workstation Extension 12 SP1:libvirt-client-32bit-1.2.18.2-8.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20160923-1/ https://www.suse.com/security/cve/CVE-2015-5313.html CVE-2015-5313 https://bugzilla.suse.com/953110 SUSE Bug 953110