Mageni Mageni Security LLC

Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

openSUSE: Security Advisory for libvirt (openSUSE-SU-2021:2812-1)

Information

Severity

Severity

Medium

Family

Family

SuSE Local Security Checks

CVSSv2 Base

CVSSv2 Base

5.0

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Solution Type

Solution Type

Vendor Patch

Created

Created

2 years ago

Modified

Modified

2 years ago

Share

Summary

The remote host is missing an update for the 'libvirt' package(s) announced via the openSUSE-SU-2021:2812-1 advisory.

Insight

Insight

This update for libvirt fixes the following issues: Security issues fixed: - CVE-2021-3631: fix SELinux label generation logic (bsc#1187871) - CVE-2021-3667: Unlock object on ACL fail in storagePoolLookupByTargetPath (bsc#1188843) Non-security issues fixed: - virtlockd: Don&#x27 t report error if lockspace exists (bsc#1184253) - Don&#x27 t forcibly remove &#x27 --listen&#x27 arg from /etc/sysconfig/libvirtd. Add &#x27 --timeout 120&#x27 if &#x27 --listen&#x27 is not specified. (bsc#1188232)

Affected Software

Affected Software

'libvirt' package(s) on openSUSE Leap 15.3.

Detection Method

Detection Method

Checks if a vulnerable package version is present on the target host.

Solution

Solution

Please install the updated package(s).

Common Vulnerabilities and Exposures (CVE)

References