Security update for libvirt SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2022:0021-1 Final 1 1 2022-01-04T15:06:20Z current 2022-01-04T15:06:20Z 2022-01-04T15:06:20Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libvirt This update for libvirt fixes the following issues: - CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-SLE-15.3-2022-21 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4GRZCYHIJFWN3FE3P7JJYRY7F7UO2HTA/ E-Mail link for openSUSE-SU-2022:0021-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1191668 SUSE Bug 1191668 https://bugzilla.suse.com/1192017 SUSE Bug 1192017 https://bugzilla.suse.com/1193623 SUSE Bug 1193623 https://bugzilla.suse.com/1193719 SUSE Bug 1193719 https://bugzilla.suse.com/1193981 SUSE Bug 1193981 https://bugzilla.suse.com/1194041 SUSE Bug 1194041 https://www.suse.com/security/cve/CVE-2021-4147/ SUSE CVE CVE-2021-4147 page openSUSE Leap 15.3 libvirt-7.1.0-6.11.1 libvirt-admin-7.1.0-6.11.1 libvirt-bash-completion-7.1.0-6.11.1 libvirt-client-7.1.0-6.11.1 libvirt-daemon-7.1.0-6.11.1 libvirt-daemon-config-network-7.1.0-6.11.1 libvirt-daemon-config-nwfilter-7.1.0-6.11.1 libvirt-daemon-driver-interface-7.1.0-6.11.1 libvirt-daemon-driver-libxl-7.1.0-6.11.1 libvirt-daemon-driver-lxc-7.1.0-6.11.1 libvirt-daemon-driver-network-7.1.0-6.11.1 libvirt-daemon-driver-nodedev-7.1.0-6.11.1 libvirt-daemon-driver-nwfilter-7.1.0-6.11.1 libvirt-daemon-driver-qemu-7.1.0-6.11.1 libvirt-daemon-driver-secret-7.1.0-6.11.1 libvirt-daemon-driver-storage-7.1.0-6.11.1 libvirt-daemon-driver-storage-core-7.1.0-6.11.1 libvirt-daemon-driver-storage-disk-7.1.0-6.11.1 libvirt-daemon-driver-storage-gluster-7.1.0-6.11.1 libvirt-daemon-driver-storage-iscsi-7.1.0-6.11.1 libvirt-daemon-driver-storage-iscsi-direct-7.1.0-6.11.1 libvirt-daemon-driver-storage-logical-7.1.0-6.11.1 libvirt-daemon-driver-storage-mpath-7.1.0-6.11.1 libvirt-daemon-driver-storage-rbd-7.1.0-6.11.1 libvirt-daemon-driver-storage-scsi-7.1.0-6.11.1 libvirt-daemon-hooks-7.1.0-6.11.1 libvirt-daemon-lxc-7.1.0-6.11.1 libvirt-daemon-qemu-7.1.0-6.11.1 libvirt-daemon-xen-7.1.0-6.11.1 libvirt-devel-7.1.0-6.11.1 libvirt-devel-32bit-7.1.0-6.11.1 libvirt-doc-7.1.0-6.11.1 libvirt-libs-7.1.0-6.11.1 libvirt-lock-sanlock-7.1.0-6.11.1 libvirt-nss-7.1.0-6.11.1 wireshark-plugin-libvirt-7.1.0-6.11.1 libvirt-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-admin-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-bash-completion-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-client-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-config-network-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-config-nwfilter-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-interface-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-libxl-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-lxc-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-network-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-nodedev-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-nwfilter-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-qemu-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-secret-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-storage-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-storage-core-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-storage-disk-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-storage-gluster-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-storage-iscsi-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-storage-iscsi-direct-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-storage-logical-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-storage-mpath-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-storage-rbd-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-driver-storage-scsi-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-hooks-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-lxc-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-qemu-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-daemon-xen-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-devel-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-devel-32bit-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-doc-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-libs-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-lock-sanlock-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 libvirt-nss-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 wireshark-plugin-libvirt-7.1.0-6.11.1 as a component of openSUSE Leap 15.3 A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition. CVE-2021-4147 openSUSE Leap 15.3:libvirt-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-admin-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-bash-completion-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-client-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-config-network-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-config-nwfilter-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-interface-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-libxl-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-lxc-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-network-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-nodedev-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-nwfilter-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-qemu-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-secret-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-storage-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-storage-core-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-storage-disk-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-storage-gluster-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-storage-iscsi-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-storage-iscsi-direct-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-storage-logical-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-storage-mpath-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-storage-rbd-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-driver-storage-scsi-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-hooks-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-lxc-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-qemu-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-daemon-xen-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-devel-32bit-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-devel-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-doc-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-libs-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-lock-sanlock-7.1.0-6.11.1 openSUSE Leap 15.3:libvirt-nss-7.1.0-6.11.1 openSUSE Leap 15.3:wireshark-plugin-libvirt-7.1.0-6.11.1 important 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4GRZCYHIJFWN3FE3P7JJYRY7F7UO2HTA/ https://www.suse.com/security/cve/CVE-2021-4147.html CVE-2021-4147 https://bugzilla.suse.com/1194041 SUSE Bug 1194041 https://bugzilla.suse.com/1194313 SUSE Bug 1194313