OESA-2021-1385

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1385

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2021-1385.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2021-1385

Upstream

CVE-2021-3631

CVE-2021-3667

Published

2021-10-15T11:03:16Z

Modified

2025-08-12T05:09:11.732837Z

Summary

libvirt security update

Details

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support.

Security Fix(es):

An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited ACL permissions could use this flaw to acquire the lock and prevent other users from accessing storage pool/volume APIs, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability.(CVE-2021-3667)

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.(CVE-2021-3631)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:20.03-LTS-SP1 / libvirt

Package

Name: libvirt
Purl: pkg:rpm/openEuler/libvirt&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.2.0-13.oe1

Ecosystem specific

{
    "x86_64": [
        "libvirt-daemon-driver-qemu-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-kvm-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-wireshark-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-interface-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-network-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-core-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-admin-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-docs-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-secret-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-debuginfo-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-nodedev-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-scsi-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-config-nwfilter-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-gluster-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-mpath-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-iscsi-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-config-network-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-nwfilter-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-debugsource-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-logical-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-bash-completion-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-iscsi-direct-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-client-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-devel-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-nss-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-rbd-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-libs-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-qemu-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-disk-6.2.0-13.oe1.x86_64.rpm",
        "libvirt-lock-sanlock-6.2.0-13.oe1.x86_64.rpm"
    ],
    "src": [
        "libvirt-6.2.0-13.oe1.src.rpm"
    ],
    "aarch64": [
        "libvirt-daemon-driver-storage-iscsi-direct-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-qemu-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-nss-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-qemu-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-kvm-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-client-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-debuginfo-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-admin-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-bash-completion-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-logical-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-devel-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-interface-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-gluster-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-disk-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-nwfilter-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-secret-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-docs-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-core-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-nodedev-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-scsi-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-libs-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-debugsource-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-iscsi-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-config-network-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-lock-sanlock-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-network-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-rbd-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-config-nwfilter-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-wireshark-6.2.0-13.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-mpath-6.2.0-13.oe1.aarch64.rpm"
    ]
}

openEuler:20.03-LTS-SP2 / libvirt

Package

Name: libvirt
Purl: pkg:rpm/openEuler/libvirt&distro=openEuler-20.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.2.0-14.oe1

Ecosystem specific

{
    "x86_64": [
        "libvirt-daemon-driver-qemu-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-debuginfo-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-qemu-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-admin-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-config-network-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-secret-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-lock-sanlock-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-nss-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-nwfilter-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-iscsi-direct-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-kvm-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-network-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-core-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-rbd-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-devel-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-gluster-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-mpath-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-logical-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-nodedev-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-interface-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-docs-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-wireshark-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-config-nwfilter-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-scsi-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-iscsi-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-client-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-debugsource-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-bash-completion-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-daemon-driver-storage-disk-6.2.0-14.oe1.x86_64.rpm",
        "libvirt-libs-6.2.0-14.oe1.x86_64.rpm"
    ],
    "src": [
        "libvirt-6.2.0-14.oe1.src.rpm"
    ],
    "aarch64": [
        "libvirt-daemon-driver-storage-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-kvm-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-iscsi-direct-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-bash-completion-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-scsi-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-debuginfo-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-nss-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-wireshark-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-interface-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-core-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-mpath-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-qemu-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-debugsource-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-logical-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-docs-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-iscsi-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-config-nwfilter-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-libs-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-devel-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-secret-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-qemu-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-disk-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-nwfilter-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-rbd-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-storage-gluster-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-nodedev-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-config-network-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-daemon-driver-network-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-client-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-admin-6.2.0-14.oe1.aarch64.rpm",
        "libvirt-lock-sanlock-6.2.0-14.oe1.aarch64.rpm"
    ]
}