Summary
[4.5.0-10.0.1]
- added librbd1 as dependency (Keshav Sharma)
[4.5.0-10.el7_6.12]
- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)
- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)
- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)
- api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168)
[4.5.0-10.el7_6.11]
- virfile: added GPFS as shared fs (rhbz#1715867)
Fixed packages 31
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libvirt | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-admin | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-bash-completion | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-client | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-config-network | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-config-nwfilter | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-interface | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-lxc | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-network | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-nodedev | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-nwfilter | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-qemu | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-secret | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-core | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-disk | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-gluster | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-iscsi | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-logical | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-mpath | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-rbd | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-driver-storage-scsi | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-kvm | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-daemon-lxc | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-devel | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-docs | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-libs | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-lock-sanlock | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-login-shell | 0:4.5.0-10.0.1.el7_6.12 |
| Oracle Linux · 7 | libvirt-nss | 0:4.5.0-10.0.1.el7_6.12 |
Vulnerabilities 4
-
High 8.8
It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSav…
-
High 8.8
The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emu…
-
High 8.8
The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x …
-
High 7.8
It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to …