Issued:
2018-01-22
Updated:
2018-01-22

RHSA-2018:0109 - Security Advisory

Synopsis

Important: libvirt security update

Type/Severity

Security Advisory: Important

Topic

An update for libvirt is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fix(es):

  • An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions (a commonly used performance optimization). There are three primary variants of the issue which differ in the way the speculative execution can be exploited. Variant CVE-2017-5715 triggers the speculative execution by utilizing branch target injection. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory accesses may cause allocation into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to cross the syscall and guest/host boundaries and read privileged memory by conducting targeted cache side-channel attacks. (CVE-2017-5715)

Note: This is the libvirt side of the CVE-2017-5715 mitigation.

Red Hat would like to thank Google Project Zero for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, libvirtd will be restarted automatically.

Affected Products

  • Red Hat Enterprise Linux Server - AUS 6.6 x86_64
  • Red Hat Enterprise Linux Server - TUS 6.6 x86_64

Fixes

  • BZ - 1519780 - CVE-2017-5715 hw: cpu: speculative execution branch target injection

CVEs

(none)

References

Red Hat Enterprise Linux Server - AUS 6.6

SRPM
libvirt-0.10.2-46.el6_6.7.src.rpm SHA-256: faa0119a4bb52b19e65e404bc3e297466899990f509efe9fedb6cb7be9c7cb94
x86_64
libvirt-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: a8266e8b0711aa27fb9ab314a227441281f42d7e1e9943f67e4b9953b3685856
libvirt-client-0.10.2-46.el6_6.7.i686.rpm SHA-256: 47f967574b9afc5808e1dc5e9e56617efe754bcf111435155ff81f28a38498ca
libvirt-client-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: 8532924f1ff936589412ddecaff17134aee54902c1ba5f34adca63b7ebfedf19
libvirt-debuginfo-0.10.2-46.el6_6.7.i686.rpm SHA-256: a49cf45d81d7e1f393a20df283d8dce2e713bed5bbb762807c2922b4f14f01f8
libvirt-debuginfo-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: 1ec1826e0abee5e32e2675e6077607aa1c9d54c6417f3e8e9098610f52b60cb8
libvirt-debuginfo-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: 1ec1826e0abee5e32e2675e6077607aa1c9d54c6417f3e8e9098610f52b60cb8
libvirt-devel-0.10.2-46.el6_6.7.i686.rpm SHA-256: a4a9d8f9e5c114891ae837a643eec6bcdd4bcfa311ef633f9bed6ad6ab11f43a
libvirt-devel-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: b34da10a026971840f8861a4a576bd5dca6b2887701fc6ed18fdd2f4e5aa6716
libvirt-lock-sanlock-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: 1457bb75a08f4ce891b0a56438162040c721ae7c15fa134aac7aa94dcf1983c0
libvirt-python-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: 8ec18472fe4eba9f87f6078f69eb950dfb443bc7440826c8c0a25c10bd5161a0

Red Hat Enterprise Linux Server - TUS 6.6

SRPM
libvirt-0.10.2-46.el6_6.7.src.rpm SHA-256: faa0119a4bb52b19e65e404bc3e297466899990f509efe9fedb6cb7be9c7cb94
x86_64
libvirt-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: a8266e8b0711aa27fb9ab314a227441281f42d7e1e9943f67e4b9953b3685856
libvirt-client-0.10.2-46.el6_6.7.i686.rpm SHA-256: 47f967574b9afc5808e1dc5e9e56617efe754bcf111435155ff81f28a38498ca
libvirt-client-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: 8532924f1ff936589412ddecaff17134aee54902c1ba5f34adca63b7ebfedf19
libvirt-debuginfo-0.10.2-46.el6_6.7.i686.rpm SHA-256: a49cf45d81d7e1f393a20df283d8dce2e713bed5bbb762807c2922b4f14f01f8
libvirt-debuginfo-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: 1ec1826e0abee5e32e2675e6077607aa1c9d54c6417f3e8e9098610f52b60cb8
libvirt-debuginfo-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: 1ec1826e0abee5e32e2675e6077607aa1c9d54c6417f3e8e9098610f52b60cb8
libvirt-devel-0.10.2-46.el6_6.7.i686.rpm SHA-256: a4a9d8f9e5c114891ae837a643eec6bcdd4bcfa311ef633f9bed6ad6ab11f43a
libvirt-devel-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: b34da10a026971840f8861a4a576bd5dca6b2887701fc6ed18fdd2f4e5aa6716
libvirt-lock-sanlock-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: 1457bb75a08f4ce891b0a56438162040c721ae7c15fa134aac7aa94dcf1983c0
libvirt-python-0.10.2-46.el6_6.7.x86_64.rpm SHA-256: 8ec18472fe4eba9f87f6078f69eb950dfb443bc7440826c8c0a25c10bd5161a0

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.