- Announce - libvirt List Archives

[Libvirt-announce] Entering freeze for libvirt-5.8.0
by Daniel Veillard 03 Oct '19

03 Oct '19

per previous mail, apologies, I totally forgot. It's tagged in git, I have pushed RC1 signed tarball and source rpm to the usual place at: https://libvirt.org/sources/ I will reckon my testing was even more minimal than usual, I will just say it built for me ! https://ci.centos.org/view/libvirt/ is green with a small exception, so apparently it's not too broken, but please give it a try ! I will push rc2 on Thursday, and if everything is fine will do the release on Saturday, a bit late but hopefully not a big deal ! thanks, Daniel -- Daniel Veillard | Red Hat Developers Tools http://developer.redhat.com/ veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] Release of libvirt 5.7.0
by Daniel Veillard 03 Sep '19

03 Sep '19

A few hours ago I tagged the release in git and pushed the signed tarball and source rpm to the usual place: https://libvirt.org/sources/ I also tagged a release of the python bindings which you can find at https://libvirt.org/sources/python/ This is a balanced release with new features, improvements and bug fixes, also note some deprecation for KVM assignment support and for build with older versions of libxml2. New features: - qemu: Support Direct Mode for Hyper-V Synthetic timers The QEMU driver now supports Direct Mode for Hyper-V Synthetic timers for Hyper-V guests. - lib: Add virDomainGetGuestInfo() This API is intended to aggregate several guest agent information queries and is inspired by stats API virDomainListGetStats(). It is anticipated that this information will be provided by a guest agent running within the domain. It's exposed as virsh guestinfo. - Split libvirtd into separate daemons The big monolithic libvirtd daemon can now be replaced by smaller per-driver daemons. Distributions can chose if they want the former or the latter. The libvirtd is still kept around for backwards compatibility. Removed features: - Remove KVM assignment support The KVM style of PCI device assignment was removed from the kernel in version 4.12.0 after being deprecated since 4.2.0. Libvirt defaults to VFIO for a long time. Remove support for KVM device assignment from libvirt too. - libxml: min required libxml is now 2.9.1 Support for building with libxml versions older than 2.9.1 has been dropped. Improvements: - virsh: Support setting bandwidth in migrate subcommand In addition to postcopy bandwidth, the virsh migrate subcommand now supports specifying precopy bandwidth with the --bandwidth parameter. - libxl: Implement domain metadata getter/setter The libxl driver now supports virDomainGetMetadata() and virDomainSetMetadata() APIs. - test driver: Expand API coverage Additional APIs have been implemented in the test driver. - Report RNG device in domain capabilities XML Libvirt now reports if RNG devices are supported by the underlying hypervisor in the domain capabilities XML. - Stop linking virt-login-shell and NSS plugins with libvirt.so In order to allow libvirt to abort on out of memory, we need to stop linking libvirt.so to virt-login-shell or the NSS plugins where we don't want to abort. This change also resulted in smaller binaries and libraries. - qemu: Allow migration with disk cache on When QEMU supports flushing caches at the end of migration, we can safely allow migration even if disk/driver/@cache is neither none nor directsync. Bug fixes: - Various security label remembering fixes In the previous release libvirt introduced remembering of original owners and SELinux labels on files. However, the feature did not work properly with snapshots, on migrations or on network filesystems. This is now fixed. - Allow greater PCI domain numbers Libvirt used to require PCI domain number to be not greater than 0xFFFF. The code was changed to allow 32 bits long numbers. - Various D-Bus fixes When D-Bus is not available, libvirt was reporting random errors. These are now gone. - Prefer read-only opening of PCI config files When enumerating PCI bus, libvirt opens config files under sysfs mount and parses them to learn various aspects of the device (e.g. its capabilities). Only in a very limited number of cases it is actually writing into the file. However, it used to open the file also for writing even if it was only reading from it. - Fix AppArmor profile Since the 5.6.0 release, libvirt uses procfs to learn the list of opened file descriptors when spawning a command. However, our AppArmor profile was not allowing such access. - Don't block storage driver when starting or building a pool Starting or building a storage pool can take a long time to finish. During this time the storage driver was blocked and thus no other API involving the storage driver could run. This is now fixed. Thanks everybody who helped for this release, be it with patches, reviews, bug reports, docs, etc... Enjoy the release ! Daniel -- Daniel Veillard | Red Hat Developers Tools http://developer.redhat.com/ veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Entering freeze for libvirt 5.7.0
by Daniel Veillard 01 Sep '19

01 Sep '19

I'm a day late but I just tagged it in git and pushed signed tarball and source rpm to the usual place: https://libvirt.org/sources/ Seems to work fine in my very minimal testing, there is a few red spots in CI https://ci.centos.org/view/libvirt/ but they seems mostly related to Debian 10 testing so maybe there was a hiccup on that arch in CI... I guess I will push RC2 over the week-end, and if things are fine push the final 5.7.0 release next Tuesday, in the meantime, please give it some testing, thanks, Daniel -- Daniel Veillard | Red Hat Developers Tools http://developer.redhat.com/ veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] Release of libvirt-5.6.0
by Daniel Veillard 05 Aug '19

05 Aug '19

It's out ! Tagged in git and with signed tarball and source rpm at the usual place: https://libvirt.org/sources/ I also released the 5.6.0 python bindings for the release that can be found at: https://libvirt.org/sources/python/ This release includes a number of new features, notably the checkpoint APIs removes the sxpr xen support and carries a set of improvement and bug fixes as usual: New features: - qemu: Introduce a new video model of type 'bochs' Introduce a new video model type that supports the bochs-display device that was added in qemu version 3.0. - api: new virDomainCheckpoint APIs Introduce several new APIs for creating and managing checkpoints in the test and qemu drivers (the latter requires qcow2 images). Checkpoints serve as a way to tell which portions of a disk have changed since a point in time. - qemu: Add support for overriding max threads per process limit systemd-based systems impose a limit on the number of threads a process can spawn, which in some cases can be exceeded by QEMU processes running VMs. Add a max_threads_per_process option to qemu.conf to override the system default. - Remember original owners and SELinux labels of files When a domain is starting up libvirt changes DAC and SELinux labels so that domain can access it. However, it never remembered the original labels and therefore the file was returned back to root:root. With this release, the original labels are remembered and restored properly. - network: Allow passing arbitrary options to dnsmasq This works similarly to the existing support for passing arbitary options to QEMU, and just like that feature it comes with no support guarantees. Removed features: - xen: Remove sxpr config support Remove the sxpr style config parser and formatter a year after the xend driver was removed. Improvements: - qemu: Allow XML validation for snapshot creation Add flag VIR_DOMAIN_SNAPSHOT_CREATE_VALIDATE to validate snapshot input XML. For virsh, users can use it as virsh snapshot-create --validate. - Support encrypted soft TPM A soft TPM backend could be encrypted with passphrase. Now libvirt supports using a secret object to hold the passphrase, and referring to it via the encryption element of the TPM device. - test driver: Expand API coverage Additional APIs have been implemented in the test driver. - Implement per-driver locking Drivers now acquire a lock when they're loaded, ensuring that there can never be two instances of the same driver active at a time. - nss: Report newer addresses first In some cases, a guest might be assigned a new IP address by DHCP before the previous lease has expired, in which case the NSS plugin will correctly report both addresses; many applications, however, ignore all addresses but the first, and may thus end up trying to connect using a stale address. To prevent that from happening, the NSS plugin will now always report the newest address first. - util: Optimize mass closing of FDs when spawning child processes When the limit on the number of FDs is very high, closing all unwanted FDs after calling fork() can take a lot of time and delay the start of the child process. libvirt will now use an optimized algorithm that minimizes such delays. Bug fixes: - logging: Ensure virtlogd rollover takes priority over logrotate virtlogd implements its own rollover mechanism, but until now logrotate could end up acting on the logs before virtlogd had a chance to do so itself. Thanks everybody who helped with this release, be it with bug reports, patches, reviews, documenation, localization, etc ... Enjoy the release, Daniel -- Daniel Veillard | Red Hat Developers Tools http://developer.redhat.com/ veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Entering freeze for libvirt 5.6.0
by Daniel Veillard 02 Aug '19

02 Aug '19

I completely forgot to send plans for this and already a bit late for release schedule, so I just tagged RC1 in git and pushed the signed tarball and source rpm to the usual place: https://libvirt.org/sources/ Seems okay in my very limited tests here, there is a few red tests on jenkins but nothing looking like core libvirt issues https://ci.centos.org/view/libvirt/ I will try to cut RC2 once I'm back in Europe Thursday, and then get the final release by the w.e. or Monday. In the meantime, please give it some testing ! thanks, Daniel -- Daniel Veillard | Red Hat Developers Tools http://developer.redhat.com/ veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] Release of libvirt-5.5.0
by Daniel Veillard 02 Jul '19

02 Jul '19

It's there, only one day late :-) tagged in git as with signed tarball and source rpms uploaded to the usual place: https://libvirt.org/sources/ I also released the python bindings that you can find at: https://libvirt.org/sources/python/ This is a rich release with security fixes, new APIs, some deprecated features and as usual improvements and bug fixes ! Security: - api: Prevent access to several APIs over read-only connections Certain APIs give root-equivalent access to the host, and as such should be limited to privileged users. CVE-2019-10161, CVE-2019-10166, CVE-2019-10167, CVE-2019-10168. New features: - qemu: Support SMMUv3 IOMMU SMMUv3 is an IOMMU implementation for ARM virt guests. - network: Introduce the network port API This new public API can be used by virtualization drivers to manage network resources associated with guests, and is a further step towards splitting libvirtd into multiple daemons. Removed features: - qemu: Remove support for virDomainQemuAttach and virConnectDomainXMLFromNative APIs The qemu implementations for the APIs mentioned above were removed and the APIs now return an error. The implementation was stale for a long time and did not work with modern QEMU command lines, generated from libvirt or otherwise. - Stop supporting migration of config files from pre-XDG layout The new layout was introduced with libvirt 0.9.13 (Jul 2012). - Remove Avahi mDNS support This feature was never used outside of virt-manager, which has itself stopped using it a while ago. Improvements: - sysinfo: Report SMBIOS information on aarch64 While SMBIOS support has historically been limited to x86_64, modern aarch64 machines often offer access to the same information as well, and libvirt now exposes it to the user when that's the case. - test driver: Expand API coverage Even more APIs that were missing from the test driver have now been implemented. - virt-xml-validate: Allow input to be read from stdin - qemu: Validate spapr-vio addresses as 32-bit libvirt has always considered these addresses (used for pSeries guests) as 64-bit, but the sPAPR specification says that they're 32-bit instead. Bug fixes: - qemu: Set process affinity correctly when using <numatune> libvirt would mistakenly interpret the nodeset attribute as a list of CPUs instead of as a list of NUMA node, and the process affinity would be set incorrectly as a result; this has now been fixed. Thanks everybody for your help with this release, be that with bugs, fixes, reviews, documentation, localisation, etc ... Enjoy the release, Daniel -- Daniel Veillard | Red Hat Developers Tools http://developer.redhat.com/ veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Entering freeze for libvirt-5.5.0
by Daniel Veillard 30 Jun '19

30 Jun '19

As planned I tagged RC1 in git and pushed signed tarball and source rpm to the usual place: https://libvirt.org/sources/ I'm on the road with even less testing capacity than usual, but https://ci.centos.org/view/libvirt/ looks rather green except for some go bindings so I assume we are in pretty good shape, i.e. it will hopefully compile and run for most of you :-) I hope to be back on Fraiday and make an evening release again, then if all goes fine we can push on Mon or Tuesday, please give it some testing, thanks, Daniel -- Daniel Veillard | Red Hat Developers Tools http://developer.redhat.com/ veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] LSN-2019-0007: virConnect*HypervisorCPU do not check for read-only connection
by Ján Tomko 24 Jun '19

24 Jun '19

Libvirt Security Notice: LSN-2019-0007 ====================================== Summary: virConnect*HypervisorCPU do not check for read-only connection Reported on: 20190604 Published on: 20190620 Fixed on: 20190620 Reported by: Ján Tomko <jtomko(a)redhat.com> Patched by: Ján Tomko <jtomko(a)redhat.com> See also: CVE-2019-10168 Description ----------- The virConnect*HypervisorCPU APIs allow reporting CPU capabilities from arbitrary emulator binaries without checking for a read-only connection. This allows unprivileged users to execute arbitrary binaries with elevated privileges. Impact ------ The default libvirt configuration allows all local user accounts read-only access to the libvirtd daemon. Any local user can provide an arbitrary emulator, executing arbitrary binaries as the configured QEMU user. Since v5.1.0, the emulator binary is run with CAP_DAC_OVERRIDE, essentially having root privileges. Workaround ---------- Edit the /etc/libvirt/libvirtd.conf configuration file, to set the 'unix_sock_ro_perms = "0700"' to prevent local users from connecting to libvirt. Alternatively setup a policy kit rule to prevent them access without first authenticating as root. Affected product ---------------- Name: libvirt Repository: git://libvirt.org/git/libvirt.git http://libvirt.org/git/?p=libvirt.git Branch: master Broken in: v4.4.0 Broken in: v4.5.0 Broken in: v4.6.0 Broken in: v4.7.0 Broken in: v4.8.0 Broken in: v4.9.0 Broken in: v4.10.0 Broken in: v5.0.0 Broken in: v5.1.0 Broken in: v5.2.0 Broken in: v5.3.0 Broken in: v5.4.0 Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Fixed by: bf6c2830b6c338b1f5699b095df36f374777b291 Branch: v4.4-maint Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Fixed by: a6116fc8618300f6e2a082396812363310d1420f Branch: v4.5-maint Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Fixed by: 415cc5c0644304fd1e1bb721a092cf65e07be79f Branch: v4.6-maint Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Fixed by: 890965e8943a8837b41c3c6f366135ccfef48fb3 Branch: v4.7-maint Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Fixed by: f5ace9c05d59b70d4899199a187cb32ec6f600d8 Branch: v4.8-maint Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Fixed by: fc30929ffdf339d920b2e2183faf4373920bff6f Branch: v4.9-maint Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Fixed by: dd88b69a207c1ed6e89d7e9fa6b5f4a9ec4db97c Branch: v4.10-maint Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Fixed by: 09c2635d0deec198de0f250abc2958f2d1c09eaa Branch: v5.0-maint Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Fixed by: 1ef98539a655109480628c91feac48c3c69675ef Branch: v5.1-maint Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Fixed by: 2a3f95a40725f743b5189868bcc1a78d922517f6 Branch: v5.1.0-maint Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Branch: v5.2-maint Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Fixed by: 45ae5e529d4e886f47dacca9dfe5a08d95a3425a Branch: v5.3-maint Broken by: 24a41aa6435045df2cf711d34cf399c2d74e4bf2 Broken by: 7d0a1efcd6087096671f3769ec2b850292465e9a Fixed by: d8e4d13446a0b04b757bd28c242a4cfecaaa8f1e

1 0

[Libvirt-announce] LSN-2019-0006: virConnectGetDomainCapabilities does not check for read-only connection
by Ján Tomko 24 Jun '19

24 Jun '19

Libvirt Security Notice: LSN-2019-0006 ====================================== Summary: virConnectGetDomainCapabilities does not check for read-only connection Reported on: 20190604 Published on: 20190620 Fixed on: 20190620 Reported by: Ján Tomko <jtomko(a)redhat.com> Patched by: Ján Tomko <jtomko(a)redhat.com> See also: CVE-2019-10167 Description ----------- The virConnectGetDomainCapabilities API reports the domain capabilities XML without checking for a read-only connection. This allows unprivileged users to execute arbitrary binaries with elevated privileges. Impact ------ The default libvirt configuration allows all local user accounts read-only access to the libvirtd daemon. Any local user can provide an arbitrary emulator, executing arbitrary binaries as the configured QEMU user. Since v5.1.0, the emulator binary is run with CAP_DAC_OVERRIDE, essentially having root privileges. Workaround ---------- Edit the /etc/libvirt/libvirtd.conf configuration file, to set the 'unix_sock_ro_perms = "0700"' to prevent local users from connecting to libvirt. Alternatively setup a policy kit rule to prevent them access without first authenticating as root. Affected product ---------------- Name: libvirt Repository: git://libvirt.org/git/libvirt.git http://libvirt.org/git/?p=libvirt.git Branch: master Broken in: v1.2.19 Broken in: v1.2.20 Broken in: v1.2.21 Broken in: v1.3.0 Broken in: v1.3.1 Broken in: v1.3.2 Broken in: v1.3.3 Broken in: v1.3.4 Broken in: v1.3.5 Broken in: v2.0.0 Broken in: v2.1.0 Broken in: v2.2.0 Broken in: v2.3.0 Broken in: v2.4.0 Broken in: v2.5.0 Broken in: v3.0.0 Broken in: v3.1.0 Broken in: v3.2.0 Broken in: v3.3.0 Broken in: v3.4.0 Broken in: v3.5.0 Broken in: v3.6.0 Broken in: v3.7.0 Broken in: v3.8.0 Broken in: v3.9.0 Broken in: v3.10.0 Broken in: v4.0.0 Broken in: v4.1.0 Broken in: v4.2.0 Broken in: v4.3.0 Broken in: v4.4.0 Broken in: v4.5.0 Broken in: v4.6.0 Broken in: v4.7.0 Broken in: v4.8.0 Broken in: v4.9.0 Broken in: v4.10.0 Broken in: v5.0.0 Broken in: v5.1.0 Broken in: v5.2.0 Broken in: v5.3.0 Broken in: v5.4.0 Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 8afa68bac0cf99d1f8aaa6566685c43c22622f26 Branch: v1.2.19-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 7d3b95b03880c8ade5f908dcb3d3c8b2d8e82a8f Branch: v1.2.20-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: c5cc88c32320d46f27521aac69027baa3d426ff2 Branch: v1.2.21-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: badcb3662a5b28d3ed01c8ceff496e6197d12e3c Branch: v1.3.0-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 6ba6bb236a7e293007eb21013d69f42dd1fb21c8 Branch: v1.3.1-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: be5d96d547ec54bc35e5eab6472ec900184ae837 Branch: v1.3.2-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: e433008df4867b43085961a0f8181ac9401e707b Branch: v1.3.3-maint Broken in: v1.3.3.1 Broken in: v1.3.3.2 Broken in: v1.3.3.3 Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: a663e28410aa853675b8b090a1ffafa7c8711ead Branch: v1.3.4-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: ab728b5658b307bcde90cf9e9d2e9c2cfb3e9de0 Branch: v1.3.5-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 5632ca00ef8b75ce600ebb7255d392339c07b967 Branch: v2.0-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 1e51b78a92fa2b381a5741599f4909c2516c0481 Branch: v2.1-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: e322b6f73dc2fb5eaab14406cc786361d17ffdc3 Branch: v2.2-maint Broken in: v2.2.1 Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: c97b296cf8b336ed1a3260af8c8bd79746cb2971 Branch: v3.0-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: bfea7de821a224782253061309e5005486b1b2f6 Branch: v3.2-maint Broken in: v3.2.1 Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 452fa3ae558bc842a88753fcdf0d1141a2fd212c Branch: v3.7-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: d47a396e995180fd54a0f84cf137f024159b7967 Branch: v4.1-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 585be8edbef5ce4ef30e6c20386358ca1ba8e344 Branch: v4.2-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 4ce590b007d80b41abd00aba95f73c04e71ff53b Branch: v4.3-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: f9b65fa812f6f121b7c5f5daa642f05310b4123c Branch: v4.4-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 15502d85dd21d7badeb230285898fa28f67cba9d Branch: v4.5-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: fd16bd525afeac6870ab3b747d9ee16002e2f1b2 Branch: v4.6-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 93edb0ea630556569320de83d45b100718f1391f Branch: v4.7-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 5441f05a42a90779b0df86518286bf527e94aafb Branch: v4.8-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 38a16f786794887cb2fd8e82d4b52e07a77d9f50 Branch: v4.9-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 6452b9fdff7988024a6157ca0a973ac3abf54468 Branch: v4.10-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: d238f132e6e0432a42d3cdff4571730dae3a85eb Branch: v5.0-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 58f237d696310f3ac62e98b3b5e9cb98e13064e9 Branch: v5.1-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: c5085b7a9031f899c7bef0d2630aa77c461b92a6 Branch: v5.1.0-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Branch: v5.2-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 4f50f36c0004af0faf0f535b46e2a1841c2443d8 Branch: v5.3-maint Broken by: e8d55172544c1fafe31a9e09346bdebca4f0d6f9 Fixed by: 97a737c58ff6080bd0e149830b860ef32b3d2acb

1 0

[Libvirt-announce] LSN-2019-0005: virDomainManagedSaveDefineXML does not check for read-only connection
by Ján Tomko 24 Jun '19

24 Jun '19

Libvirt Security Notice: LSN-2019-0005 ====================================== Summary: virDomainManagedSaveDefineXML does not check for read-only connection Reported on: 20190604 Published on: 20190620 Fixed on: 20190620 Reported by: Matthias Gerstner <mgerstner(a)suse.de> Patched by: Ján Tomko <jtomko(a)redhat.com> See also: CVE-2019-10166 Description ----------- The virDomainManagedSaveDefineXML API redefines the manage-saved domain XML without checking for a read-only connection. This allows unprivileged users to check for existence of arbitrary files or executing arbitrary binaries with elevated privileges. Impact ------ The default libvirt configuration allows all local user accounts read-only access to the libvirtd daemon. Any local user can provide an arbitrary emulator, executing arbitrary binaries as the configured QEMU user. Since v5.1.0, the emulator binary is run with CAP_DAC_OVERRIDE, essentially having root privileges. Workaround ---------- Edit the /etc/libvirt/libvirtd.conf configuration file, to set the 'unix_sock_ro_perms = "0700"' to prevent local users from connecting to libvirt. Alternatively setup a policy kit rule to prevent them access without first authenticating as root. Affected product ---------------- Name: libvirt Repository: git://libvirt.org/git/libvirt.git http://libvirt.org/git/?p=libvirt.git Branch: master Broken in: v3.7.0 Broken in: v3.8.0 Broken in: v3.9.0 Broken in: v3.10.0 Broken in: v4.0.0 Broken in: v4.1.0 Broken in: v4.2.0 Broken in: v4.3.0 Broken in: v4.4.0 Broken in: v4.5.0 Broken in: v4.6.0 Broken in: v4.7.0 Broken in: v4.8.0 Broken in: v4.9.0 Broken in: v4.10.0 Broken in: v5.0.0 Broken in: v5.1.0 Broken in: v5.2.0 Broken in: v5.3.0 Broken in: v5.4.0 Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: db0b78457f183e4c7ac45bc94de86044a1e2056a Branch: v3.7-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: e7d9c8899fc7751201b46b6cf6bff4eadb38af2f Branch: v4.1-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: d9a1f3debad411756f53ab8ab81e44ab0bb50e0a Branch: v4.2-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: 1813138f6b00058285e325191d50c41ace39e5b3 Branch: v4.3-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: 9816854ac4e5ccd87cf82320b4550671e75f6509 Branch: v4.4-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: e777cce08e069e29deedec540d463ed70c29e92c Branch: v4.5-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: d025c10d54975fe98927be85f33146e780c28d52 Branch: v4.6-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: 00e673c93fc3d0cfed274cc7a1ec2c52260c8262 Branch: v4.7-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: 6da721ea37bf3624ff9922637cfa657d2dcb20f9 Branch: v4.8-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: 6dc29a174ae204b1ae13fed0f533818ad6d24b9f Branch: v4.9-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: 0a744e15517d727c7f473fabe32ca6b0dbb7b7d1 Branch: v4.10-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: 3f744efec31959f7643849f6a3708198bcdfc6ae Branch: v5.0-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: a064d492272bcb0029b140ec4e18fce1ac0ec5b2 Branch: v5.1-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: 58c7c3fc4a0f15544c2054ed4682ff5d740681ab Branch: v5.1.0-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Branch: v5.2-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: 96bca3af450cc62183b91a361f7024f93126bc49 Branch: v5.3-maint Broken by: 1558f2584fd9b32c7903238bff2c9f12ba406ba6 Fixed by: f4dabe99f7f46520f2967f3e068fcbeb54e617df

1 0