Security update for libvirt SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1042-1 Final 1 1 2019-04-26T06:41:19Z current 2019-04-26T06:41:19Z 2019-04-26T06:41:19Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libvirt This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#1127458). - CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595). Other issue addressed: - cpu: add Skylake-Server and Skylake-Server-IBRS CPU models (FATE#327261, bsc#1131955) - libxl: save current memory value after successful balloon (bsc#1120813). - libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325). - conf: add new 'xenbus' controller type The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-1042,SUSE-SLE-DESKTOP-12-SP3-2019-1042,SUSE-SLE-SDK-12-SP3-2019-1042,SUSE-SLE-SERVER-12-SP3-2019-1042 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191042-1/ Link for SUSE-SU-2019:1042-1 https://lists.suse.com/pipermail/sle-security-updates/2019-April/005368.html E-Mail link for SUSE-SU-2019:1042-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1120813 SUSE Bug 1120813 https://bugzilla.suse.com/1126325 SUSE Bug 1126325 https://bugzilla.suse.com/1127458 SUSE Bug 1127458 https://bugzilla.suse.com/1131595 SUSE Bug 1131595 https://bugzilla.suse.com/1131955 SUSE Bug 1131955 https://www.suse.com/security/cve/CVE-2019-3840/ SUSE CVE CVE-2019-3840 page https://www.suse.com/security/cve/CVE-2019-3886/ SUSE CVE CVE-2019-3886 page SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 libvirt-3.3.0-5.30.1 libvirt-admin-3.3.0-5.30.1 libvirt-client-3.3.0-5.30.1 libvirt-daemon-3.3.0-5.30.1 libvirt-daemon-config-network-3.3.0-5.30.1 libvirt-daemon-config-nwfilter-3.3.0-5.30.1 libvirt-daemon-driver-interface-3.3.0-5.30.1 libvirt-daemon-driver-libxl-3.3.0-5.30.1 libvirt-daemon-driver-lxc-3.3.0-5.30.1 libvirt-daemon-driver-network-3.3.0-5.30.1 libvirt-daemon-driver-nodedev-3.3.0-5.30.1 libvirt-daemon-driver-nwfilter-3.3.0-5.30.1 libvirt-daemon-driver-qemu-3.3.0-5.30.1 libvirt-daemon-driver-secret-3.3.0-5.30.1 libvirt-daemon-driver-storage-3.3.0-5.30.1 libvirt-daemon-driver-storage-core-3.3.0-5.30.1 libvirt-daemon-driver-storage-disk-3.3.0-5.30.1 libvirt-daemon-driver-storage-iscsi-3.3.0-5.30.1 libvirt-daemon-driver-storage-logical-3.3.0-5.30.1 libvirt-daemon-driver-storage-mpath-3.3.0-5.30.1 libvirt-daemon-driver-storage-rbd-3.3.0-5.30.1 libvirt-daemon-driver-storage-scsi-3.3.0-5.30.1 libvirt-daemon-hooks-3.3.0-5.30.1 libvirt-daemon-lxc-3.3.0-5.30.1 libvirt-daemon-qemu-3.3.0-5.30.1 libvirt-daemon-xen-3.3.0-5.30.1 libvirt-devel-3.3.0-5.30.1 libvirt-devel-32bit-3.3.0-5.30.1 libvirt-devel-64bit-3.3.0-5.30.1 libvirt-doc-3.3.0-5.30.1 libvirt-libs-3.3.0-5.30.1 libvirt-lock-sanlock-3.3.0-5.30.1 libvirt-nss-3.3.0-5.30.1 libvirt-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-admin-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-client-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-config-network-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-config-nwfilter-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-interface-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-libxl-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-lxc-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-network-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-nodedev-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-nwfilter-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-qemu-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-secret-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-storage-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-storage-core-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-storage-disk-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-storage-iscsi-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-storage-logical-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-storage-mpath-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-storage-rbd-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-driver-storage-scsi-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-lxc-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-qemu-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-daemon-xen-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-doc-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-libs-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 libvirt-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-admin-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-client-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-config-network-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-config-nwfilter-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-interface-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-libxl-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-lxc-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-network-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-nodedev-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-nwfilter-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-qemu-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-secret-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-storage-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-storage-core-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-storage-disk-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-storage-iscsi-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-storage-logical-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-storage-mpath-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-storage-rbd-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-driver-storage-scsi-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-hooks-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-lxc-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-qemu-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-daemon-xen-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-doc-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-libs-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-lock-sanlock-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-nss-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server 12 SP3 libvirt-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-admin-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-client-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-config-network-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-config-nwfilter-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-interface-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-libxl-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-lxc-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-network-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-nodedev-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-nwfilter-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-qemu-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-secret-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-storage-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-storage-core-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-storage-disk-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-storage-iscsi-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-storage-logical-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-storage-mpath-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-storage-rbd-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-driver-storage-scsi-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-hooks-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-lxc-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-qemu-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-daemon-xen-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-doc-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-libs-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-lock-sanlock-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-nss-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libvirt-devel-3.3.0-5.30.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service. CVE-2019-3840 SUSE Linux Enterprise Desktop 12 SP3:libvirt-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-admin-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-client-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-config-network-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-config-nwfilter-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-interface-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-libxl-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-lxc-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-network-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-nodedev-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-nwfilter-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-qemu-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-secret-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-core-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-disk-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-iscsi-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-logical-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-mpath-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-rbd-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-scsi-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-lxc-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-qemu-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-xen-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-doc-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-libs-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-admin-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-client-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-config-network-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-config-nwfilter-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-interface-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-libxl-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-lxc-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-network-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-nodedev-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-nwfilter-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-qemu-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-secret-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-core-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-disk-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-iscsi-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-logical-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-mpath-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-rbd-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-scsi-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-hooks-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-lxc-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-qemu-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-xen-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-doc-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-libs-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-lock-sanlock-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-nss-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-admin-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-client-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-config-network-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-config-nwfilter-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-interface-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-libxl-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-lxc-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-network-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-nodedev-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-nwfilter-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-qemu-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-secret-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-core-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-disk-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-iscsi-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-logical-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-mpath-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-rbd-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-scsi-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-hooks-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-lxc-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-qemu-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-xen-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-doc-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-libs-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-lock-sanlock-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-nss-3.3.0-5.30.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libvirt-devel-3.3.0-5.30.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191042-1/ https://www.suse.com/security/cve/CVE-2019-3840.html CVE-2019-3840 https://bugzilla.suse.com/1127458 SUSE Bug 1127458 An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent, which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block. CVE-2019-3886 SUSE Linux Enterprise Desktop 12 SP3:libvirt-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-admin-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-client-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-config-network-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-config-nwfilter-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-interface-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-libxl-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-lxc-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-network-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-nodedev-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-nwfilter-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-qemu-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-secret-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-core-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-disk-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-iscsi-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-logical-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-mpath-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-rbd-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-driver-storage-scsi-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-lxc-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-qemu-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-daemon-xen-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-doc-3.3.0-5.30.1 SUSE Linux Enterprise Desktop 12 SP3:libvirt-libs-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-admin-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-client-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-config-network-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-config-nwfilter-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-interface-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-libxl-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-lxc-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-network-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-nodedev-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-nwfilter-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-qemu-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-secret-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-core-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-disk-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-iscsi-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-logical-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-mpath-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-rbd-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-driver-storage-scsi-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-hooks-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-lxc-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-qemu-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-daemon-xen-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-doc-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-libs-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-lock-sanlock-3.3.0-5.30.1 SUSE Linux Enterprise Server 12 SP3:libvirt-nss-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-admin-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-client-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-config-network-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-config-nwfilter-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-interface-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-libxl-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-lxc-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-network-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-nodedev-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-nwfilter-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-qemu-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-secret-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-core-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-disk-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-iscsi-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-logical-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-mpath-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-rbd-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-driver-storage-scsi-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-hooks-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-lxc-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-qemu-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-daemon-xen-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-doc-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-libs-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-lock-sanlock-3.3.0-5.30.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libvirt-nss-3.3.0-5.30.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libvirt-devel-3.3.0-5.30.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191042-1/ https://www.suse.com/security/cve/CVE-2019-3886.html CVE-2019-3886 https://bugzilla.suse.com/1131595 SUSE Bug 1131595 https://bugzilla.suse.com/1133150 SUSE Bug 1133150 https://bugzilla.suse.com/1138301 SUSE Bug 1138301