SUSE-SU-2019:1490-1
- Source
- https://www.suse.com/support/update/announcement/2019/suse-su-20191490-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1490-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2019:1490-1
- Upstream
- Related
- Published
- 2019-06-13T11:18:45Z
- Modified
- 2026-03-11T07:09:34Z
- Summary
- Security update for libvirt
- Details
-
This update for libvirt fixes the following issues:
Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331)
- CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS)
- CVE-2018-12127: Microarchitectural Fill Buffer Data Sampling (MFBDS)
- CVE-2018-12130: Microarchitectural Load Port Data Sampling (MLPDS)
- CVE-2019-11091: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)
These updates contain the libvirt adjustments, that pass through the new 'md-clear' CPU flag (bsc#1135273).
For more information on this set of vulnerabilities, check out https://www.suse.com/support/kb/doc/?id=7023736
Security issues fixed:
- CVE-2019-10132: Reject clients unless their UID matches the server UID (bsc#1134348)
Non security issues fixed:
- delay global firewall setup if no networks are running (bsc#1133229)
- add systemd-container dependency to qemu and lxc drivers (bsc#1136109)
- References
-
- https://www.suse.com/support/update/announcement/2019/suse-su-20191490-1/
- https://bugzilla.suse.com/1111331
- https://bugzilla.suse.com/1133229
- https://bugzilla.suse.com/1134348
- https://bugzilla.suse.com/1135273
- https://bugzilla.suse.com/1136109
- https://www.suse.com/security/cve/CVE-2018-12126
- https://www.suse.com/security/cve/CVE-2018-12127
- https://www.suse.com/security/cve/CVE-2018-12130
- https://www.suse.com/security/cve/CVE-2019-10132
- https://www.suse.com/security/cve/CVE-2019-11091
Affected packages
SUSE:Linux Enterprise Module for Basesystem 15 SP1
SUSE:Linux Enterprise Module for Server Applications 15 SP1
libvirt
Package
- Name
- libvirt
- Purl
- pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP1
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed5.1.0-8.3.1
Ecosystem specific
{
"binaries": [
{
"libvirt": "5.1.0-8.3.1",
"libvirt-admin": "5.1.0-8.3.1",
"libvirt-bash-completion": "5.1.0-8.3.1",
"libvirt-client": "5.1.0-8.3.1",
"libvirt-daemon": "5.1.0-8.3.1",
"libvirt-daemon-config-network": "5.1.0-8.3.1",
"libvirt-daemon-config-nwfilter": "5.1.0-8.3.1",
"libvirt-daemon-driver-interface": "5.1.0-8.3.1",
"libvirt-daemon-driver-libxl": "5.1.0-8.3.1",
"libvirt-daemon-driver-lxc": "5.1.0-8.3.1",
"libvirt-daemon-driver-network": "5.1.0-8.3.1",
"libvirt-daemon-driver-nodedev": "5.1.0-8.3.1",
"libvirt-daemon-driver-nwfilter": "5.1.0-8.3.1",
"libvirt-daemon-driver-qemu": "5.1.0-8.3.1",
"libvirt-daemon-driver-secret": "5.1.0-8.3.1",
"libvirt-daemon-driver-storage": "5.1.0-8.3.1",
"libvirt-daemon-driver-storage-core": "5.1.0-8.3.1",
"libvirt-daemon-driver-storage-disk": "5.1.0-8.3.1",
"libvirt-daemon-driver-storage-iscsi": "5.1.0-8.3.1",
"libvirt-daemon-driver-storage-logical": "5.1.0-8.3.1",
"libvirt-daemon-driver-storage-mpath": "5.1.0-8.3.1",
"libvirt-daemon-driver-storage-rbd": "5.1.0-8.3.1",
"libvirt-daemon-driver-storage-scsi": "5.1.0-8.3.1",
"libvirt-daemon-hooks": "5.1.0-8.3.1",
"libvirt-daemon-lxc": "5.1.0-8.3.1",
"libvirt-daemon-qemu": "5.1.0-8.3.1",
"libvirt-daemon-xen": "5.1.0-8.3.1",
"libvirt-devel": "5.1.0-8.3.1",
"libvirt-doc": "5.1.0-8.3.1",
"libvirt-lock-sanlock": "5.1.0-8.3.1",
"libvirt-nss": "5.1.0-8.3.1"
}
]
}