FS#67807 - [libvirt] [security] CVE-2020-14339
Attached to Project:
Community Packages
Opened by loqs (loqs) - Wednesday, 02 September 2020, 14:43 GMT
Last edited by Robin Broda (coderobe) - Tuesday, 15 September 2020, 00:45 GMT
Opened by loqs (loqs) - Wednesday, 02 September 2020, 14:43 GMT
Last edited by Robin Broda (coderobe) - Tuesday, 15 September 2020, 00:45 GMT
|
Details
Description:
A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of their standard permissions, potentially causing serious damage to the host operating system. Fixed in libvirt 6.6.0. Additional info: * libvirt 6.5.0-1 * https://libvirt.org/git/?p=libvirt.git;a=commit;h=22494556542c676d1b9e7f1c1f2ea13ac17e1e3e * https://bugzilla.redhat.com/show_bug.cgi?id=1858260 * https://libvirt.org/news.html |
This task depends upon
Closed by Robin Broda (coderobe)
Tuesday, 15 September 2020, 00:45 GMT
Reason for closing: Fixed
Additional comments about closing: patched in libvirt 6.5.0-2
Tuesday, 15 September 2020, 00:45 GMT
Reason for closing: Fixed
Additional comments about closing: patched in libvirt 6.5.0-2
Deferred until redhat fixes their releng
Commits cherry-picked in the following order:
c6a0d3ff8b4ead3b1f38a40668df65f152cc2f32
ae5752aabc09f435675504246e30a0b9c4795d79
b8ebbe05451fde7ce541564f73437a29ffd5db0d
22494556542c676d1b9e7f1c1f2ea13ac17e1e3e
e450ebb4c6eab1b7376a5ba873d10936ad563b75
Attached test.patch of diff against v6.5.0 after cherry-picking the above.
Dropping the unrelated PO file change c6a0d3ff8b4ead3b1f38a40668df65f152cc2f32 and manually merging 22494556542c676d1b9e7f1c1f2ea13ac17e1e3e produced test2.patch.
I agree it is not worth applying and can wait for 6.6 / 6.7.
[1] https://www.redhat.com/archives/libvir-list/2020-July/msg01743.html
test2.patch (12.8 KiB)
Thanks a lot for actually bothering to pick through the changes, solid contributions as usual from you :)