Red Hat Security AdvisoryRHSA-2018:3113
libvirt security, bug fix, and enhancement update
Released 2018-10-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libvirt-4.5.0-10.el7, libvirt-bash-completion-4.5.0-10.el7, libvirt-client-4.5.0-10.el7 +21
- Red Hat Enterprise Linux Client Optional (v. 7) libvirt-admin-4.5.0-10.el7, libvirt-daemon-lxc-4.5.0-10.el7, libvirt-devel-4.5.0-10.el7 +4
- Red Hat Enterprise Linux ComputeNode (v. 7) libvirt-4.5.0-10.el7, libvirt-bash-completion-4.5.0-10.el7, libvirt-client-4.5.0-10.el7 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libvirt-4.5.0-10.el7, libvirt-admin-4.5.0-10.el7, libvirt-daemon-4.5.0-10.el7 +25
- Red Hat Enterprise Linux Server (v. 7) libvirt-4.5.0-10.el7, libvirt-bash-completion-4.5.0-10.el7, libvirt-client-4.5.0-10.el7 +26
- Red Hat Enterprise Linux Server Optional (v. 7) libvirt-admin-4.5.0-10.el7, libvirt-daemon-lxc-4.5.0-10.el7, libvirt-lock-sanlock-4.5.0-10.el7 +3
- Red Hat Enterprise Linux Workstation (v. 7) libvirt-4.5.0-10.el7, libvirt-bash-completion-4.5.0-10.el7, libvirt-client-4.5.0-10.el7 +23
- Red Hat Enterprise Linux Workstation Optional (v. 7) libvirt-admin-4.5.0-10.el7, libvirt-daemon-lxc-4.5.0-10.el7, libvirt-lock-sanlock-4.5.0-10.el7 +2
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libvirt-4.5.0-10.el7, libvirt-bash-completion-4.5.0-10.el7, libvirt-client-4.5.0-10.el7 +21
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) libvirt-4.5.0-10.el7, libvirt-admin-4.5.0-10.el7, libvirt-bash-completion-4.5.0-10.el7 +26
Fixes 1 record
Priority LOW 34
util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a craf…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00325 · Published 2018-02-23 · Fixed CWE-346
