CVE-2014-8136

Updated libvirt packages fix security vulnerability:

The qemuDomainMigratePerform and qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors (CVE-2014-8136).

libvirt was updated to fix security issues and bugs.

These security issues were fixed:

• Fixed denial of service flaw in libvirt's virConnectListAllDomains() function (CVE-2014-3657).
• Information leak with flag VIR_DOMAIN_XML_MIGRATABLE (CVE-2014-7823).
• local denial of service in qemu driver (CVE-2014-8136)

These non-security issues were fixed:

• Get /proc/sys/net/ipv[46] read-write for wicked to work in containers (bsc#904432).
• libxl: Several migration improvements (bsc#903756).
• libxl: allow libxl to find pygrub binary (bdo#770485).
• Fix Qemu AppArmor abstraction (bsc#904426).
• AppArmor confined kvm domains couldn't find the apparmor profile template (bnc#902976).
• Backport commit c110cdb2 to fix non-raw storage format error (bnc#900587).
• qemu: use systemd's TerminateMachine to kill all processes (bsc#899334).
• Transformed Errors into warnings in detect_scsi_host_caps.
• Fix a missing cleanup for lxc containers.
• Adding network configuration to containers. bsc#904432

The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors.

It was discovered that libvirt incorrectly handled the firewall rules on bridge networks when the daemon was restarted. This could result in an unintended firewall configuration. This issue only applied to Ubuntu 12.04 LTS. (CVE-2011-4600)

Peter Krempa discovered that libvirt incorrectly handled locking when certain ACL checks failed. A local attacker could use this issue to cause libvirt to stop responding, resulting in a denial of service. This issue only applied to Ubuntu 14.04 LTS. (CVE-2014-8136)

Luyao Huang discovered that libvirt incorrectly handled VNC passwords in shapshot and image files. A remote authenticated user could use this issue to possibly obtain VNC passwords. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-0236)

Han Han discovered that libvirt incorrectly handled volume creation failure when used with NFS. A remote authenticated user could use this issue to cause libvirt to crash, resulting in a denial of service. This issue only applied to Ubuntu 15.10. (CVE-2015-5247)

Ossi Herrala and Joonas Kuorilehto discovered that libvirt incorrectly performed storage pool name validation. A remote authenticated user could use this issue to bypass ACLs and gain access to unintended files. This issue only applied to Ubuntu 14.04 LTS, Ubuntu 15.04 and Ubuntu 15.10. (CVE-2015-5313)