Red Hat Security AdvisoryRHSA-2019:1578
libvirt security update
Released 2019-06-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libvirt-0.10.2-64.el6_10.2, libvirt-client-0.10.2-64.el6_10.2, libvirt-python-0.10.2-64.el6_10.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) libvirt-devel-0.10.2-64.el6_10.2, libvirt-lock-sanlock-0.10.2-64.el6_10.2
- Red Hat Enterprise Linux HPC Node (v. 6) libvirt-0.10.2-64.el6_10.2, libvirt-client-0.10.2-64.el6_10.2, libvirt-python-0.10.2-64.el6_10.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libvirt-devel-0.10.2-64.el6_10.2, libvirt-lock-sanlock-0.10.2-64.el6_10.2
- Red Hat Enterprise Linux Server (v. 6) libvirt-0.10.2-64.el6_10.2, libvirt-client-0.10.2-64.el6_10.2, libvirt-client-0.10.2-64.el6_10.2.ppc +3
- Red Hat Enterprise Linux Server Optional (v. 6) libvirt-lock-sanlock-0.10.2-64.el6_10.2
- Red Hat Enterprise Linux Workstation (v. 6) libvirt-0.10.2-64.el6_10.2, libvirt-client-0.10.2-64.el6_10.2, libvirt-devel-0.10.2-64.el6_10.2 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libvirt-lock-sanlock-0.10.2-64.el6_10.2
Fixes 1 record
Priority LOW 35
It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients to use the virDomainSaveImageGetXMLDesc() API, specifying an arbitrary path which would be accessed with the permissions of…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00516 · Published 2019-07-30 · Fixed CWE-284
