[RHSA-2019:2294-01] Moderate: libvirt security, bug fix, and enhancement update

Security announcements for all Red Hat products and services. rhsa-announce at redhat.com
Tue Aug 6 12:48:15 UTC 2019 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Moderate: libvirt security, bug fix, and enhancement update
Advisory ID:       RHSA-2019:2294-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2019:2294
Issue date:        2019-08-06
CVE Names:         CVE-2019-3840 
=====================================================================

1. Summary:

An update for libvirt is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Client (v. 7) - x86_64
Red Hat Enterprise Linux Client Optional (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64
Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64
Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64
Red Hat Enterprise Linux Workstation (v. 7) - x86_64
Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64

3. Description:

The libvirt library contains a C API for managing and interacting with the
virtualization capabilities of Linux and other operating systems. In
addition, libvirt provides tools for remote management of virtualized
systems.

Security Fix(es):

* libvirt: NULL pointer dereference after running qemuAgentCommand in
qemuAgentGetInterfaces function (CVE-2019-3840)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 7.7 Release Notes linked from the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, libvirtd will be restarted
automatically.

5. Bugs fixed (https://bugzilla.redhat.com/):

1501450 - Race starting multiple libvirtd user sessions at the same time
1558558 - Enhance detection of host CPU model to avoid guesses based on fea.ture list length
1584663 - [RFE] Add functionality to virsh to mount nfs shares using commands like mountvers, nosuid, nodev.
1592737 - Cannot use a xml file with XML declaration as a input of cpu-compare
1594266 - virt-xml-validate validate fails for volume having backing file
1609454 - nwfilter-binding-create succeed on interface which does not exist
1609720 - Starting VM without source configured for pci-serial device caused libvirtd crash
1612943 - Wrong RESUME event after I/O error
1613737 - Allow the inputvol to be encrypted when creating a volume from another volume
1615680 - Improve --adapter-parent-wwnn,--adapter-parent-wwpn and --adapter-parent-fabric-wwn info for pool-define-as in man page
1628469 - libvirt uses incorrect method to detect that KVM is working
1628892 - Permission denied when start guest with egl-headless display
1631606 - Create luks vol failed when give the user access control for storage-vol API
1631622 - guest with an interface referred to nwfilter killed by libvirt when restart libvirtd with access driver enabled
1632711 - [RHEL] VMs on gluster storage domain can't be migrated
1632833 - scsi host device passthrough limits IO writes
1633077 - domxml-to-native should treat --xml as the default option
1633389 - libvirt creating qemu channels with the wrong permissions
1640465 - [RHHI] Hosted Engine migration fails in gluster storage domain
1641702 - check tsc scaling fea-ture of destination host on migration
1647365 - VIR_DOMAIN_EVENT_SUSPENDED_POSTCOPY is never used in postcopy migration
1652894 - when create vhba without indicating wwpn/wwnn, libvirt will generate duplicated ones
1656360 - when <shareable/> removed from scsi hostdev xml, related chardev's unpriv_sgio not set back to zero.
1657468 - different behaviors when create storage pool via NPIV in RHEL7.5 and RHEL7.6
1658198 - libvirt sends VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED event too soon (before it has finished tearing down the device's resources and objects)
1658406 - mode="host-model" VMs include broken "arch-facilities" flag name [libvirt]
1658652 - Missing librbd1 dependecy for libvirt-daemon-driver-storage-rbd is causing problem with RHEL host upgrade
1660531 - Garbled output on memory locking failure
1663051 - libvirtd encountered sigsegv due to null pointer in virJSONValueObjectHasKey()
1665228 - CVE-2019-3840 libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function
1665474 - libvirt segfaults with vfio-pci hostdev device
1665553 - Unable to migrate VM's using ceph storage - Unsafe migration: Migration without shared storage is unsafe
1669581 - libvirtd crash when hotplug 'block' type 'lun' device disk without 'sgio' setting to guest
1669586 - Cannot passthrough a iscsi lun to vm as a hostdev device
1672957 - [RHEL 7.7] [libvirt] Backport 07c9d6601 ("qemu: use line breaks in command line args written to log")
1683175 - Don't emit a log error message  if ovs-vsctl doesn't support a particular statistic type on a vif
1690122 - RFE: backport upstream patches for polling buffers/caches from balloon driver
1690703 - Fails to query domjobinfo when do snapshot
1691358 - Network filters are not honouring explicitly listed parameters for MAC
1692296 - Attaching a device with a taken address succeeds
1703661 - 'cannot set CPU affinity' error when starting guest
1716387 - internal error: Failed to parse bitmap '' when starting guest
1718172 - NULL pointer access in qemuProcessInitCpuAffinity()

6. Package List:

Red Hat Enterprise Linux Client (v. 7):

Source:
libvirt-4.5.0-23.el7.src.rpm

x86_64:
libvirt-4.5.0-23.el7.x86_64.rpm
libvirt-bash-completion-4.5.0-23.el7.x86_64.rpm
libvirt-client-4.5.0-23.el7.i686.rpm
libvirt-client-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-config-network-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-config-nwfilter-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-interface-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-lxc-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-network-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-nodedev-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-nwfilter-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-qemu-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-secret-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-core-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-disk-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-gluster-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-logical-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-rbd-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-kvm-4.5.0-23.el7.x86_64.rpm
libvirt-debuginfo-4.5.0-23.el7.i686.rpm
libvirt-debuginfo-4.5.0-23.el7.x86_64.rpm
libvirt-libs-4.5.0-23.el7.i686.rpm
libvirt-libs-4.5.0-23.el7.x86_64.rpm

Red Hat Enterprise Linux Client Optional (v. 7):

x86_64:
libvirt-admin-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-lxc-4.5.0-23.el7.x86_64.rpm
libvirt-debuginfo-4.5.0-23.el7.i686.rpm
libvirt-debuginfo-4.5.0-23.el7.x86_64.rpm
libvirt-devel-4.5.0-23.el7.i686.rpm
libvirt-devel-4.5.0-23.el7.x86_64.rpm
libvirt-docs-4.5.0-23.el7.x86_64.rpm
libvirt-lock-sanlock-4.5.0-23.el7.x86_64.rpm
libvirt-login-shell-4.5.0-23.el7.x86_64.rpm
libvirt-nss-4.5.0-23.el7.i686.rpm
libvirt-nss-4.5.0-23.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode (v. 7):

Source:
libvirt-4.5.0-23.el7.src.rpm

x86_64:
libvirt-bash-completion-4.5.0-23.el7.x86_64.rpm
libvirt-client-4.5.0-23.el7.i686.rpm
libvirt-client-4.5.0-23.el7.x86_64.rpm
libvirt-debuginfo-4.5.0-23.el7.i686.rpm
libvirt-debuginfo-4.5.0-23.el7.x86_64.rpm
libvirt-libs-4.5.0-23.el7.i686.rpm
libvirt-libs-4.5.0-23.el7.x86_64.rpm

Red Hat Enterprise Linux ComputeNode Optional (v. 7):

x86_64:
libvirt-4.5.0-23.el7.x86_64.rpm
libvirt-admin-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-config-network-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-config-nwfilter-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-interface-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-lxc-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-network-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-nodedev-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-nwfilter-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-qemu-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-secret-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-core-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-disk-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-gluster-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-logical-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-rbd-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-kvm-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-lxc-4.5.0-23.el7.x86_64.rpm
libvirt-debuginfo-4.5.0-23.el7.i686.rpm
libvirt-debuginfo-4.5.0-23.el7.x86_64.rpm
libvirt-devel-4.5.0-23.el7.i686.rpm
libvirt-devel-4.5.0-23.el7.x86_64.rpm
libvirt-docs-4.5.0-23.el7.x86_64.rpm
libvirt-lock-sanlock-4.5.0-23.el7.x86_64.rpm
libvirt-login-shell-4.5.0-23.el7.x86_64.rpm
libvirt-nss-4.5.0-23.el7.i686.rpm
libvirt-nss-4.5.0-23.el7.x86_64.rpm

Red Hat Enterprise Linux Server (v. 7):

Source:
libvirt-4.5.0-23.el7.src.rpm

ppc64:
libvirt-4.5.0-23.el7.ppc64.rpm
libvirt-bash-completion-4.5.0-23.el7.ppc64.rpm
libvirt-client-4.5.0-23.el7.ppc.rpm
libvirt-client-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-config-network-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-config-nwfilter-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-interface-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-lxc-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-network-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-nodedev-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-nwfilter-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-qemu-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-secret-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-storage-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-storage-core-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-storage-disk-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-storage-logical-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-23.el7.ppc64.rpm
libvirt-debuginfo-4.5.0-23.el7.ppc.rpm
libvirt-debuginfo-4.5.0-23.el7.ppc64.rpm
libvirt-devel-4.5.0-23.el7.ppc.rpm
libvirt-devel-4.5.0-23.el7.ppc64.rpm
libvirt-docs-4.5.0-23.el7.ppc64.rpm
libvirt-libs-4.5.0-23.el7.ppc.rpm
libvirt-libs-4.5.0-23.el7.ppc64.rpm

ppc64le:
libvirt-4.5.0-23.el7.ppc64le.rpm
libvirt-bash-completion-4.5.0-23.el7.ppc64le.rpm
libvirt-client-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-config-network-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-config-nwfilter-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-interface-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-lxc-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-network-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-nodedev-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-nwfilter-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-qemu-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-secret-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-storage-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-storage-core-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-storage-disk-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-storage-logical-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-kvm-4.5.0-23.el7.ppc64le.rpm
libvirt-debuginfo-4.5.0-23.el7.ppc64le.rpm
libvirt-devel-4.5.0-23.el7.ppc64le.rpm
libvirt-docs-4.5.0-23.el7.ppc64le.rpm
libvirt-libs-4.5.0-23.el7.ppc64le.rpm

s390x:
libvirt-4.5.0-23.el7.s390x.rpm
libvirt-bash-completion-4.5.0-23.el7.s390x.rpm
libvirt-client-4.5.0-23.el7.s390.rpm
libvirt-client-4.5.0-23.el7.s390x.rpm
libvirt-daemon-4.5.0-23.el7.s390x.rpm
libvirt-daemon-config-network-4.5.0-23.el7.s390x.rpm
libvirt-daemon-config-nwfilter-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-interface-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-lxc-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-network-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-nodedev-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-nwfilter-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-qemu-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-secret-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-storage-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-storage-core-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-storage-disk-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-storage-logical-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-23.el7.s390x.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-23.el7.s390x.rpm
libvirt-daemon-kvm-4.5.0-23.el7.s390x.rpm
libvirt-debuginfo-4.5.0-23.el7.s390.rpm
libvirt-debuginfo-4.5.0-23.el7.s390x.rpm
libvirt-devel-4.5.0-23.el7.s390.rpm
libvirt-devel-4.5.0-23.el7.s390x.rpm
libvirt-docs-4.5.0-23.el7.s390x.rpm
libvirt-libs-4.5.0-23.el7.s390.rpm
libvirt-libs-4.5.0-23.el7.s390x.rpm

x86_64:
libvirt-4.5.0-23.el7.x86_64.rpm
libvirt-bash-completion-4.5.0-23.el7.x86_64.rpm
libvirt-client-4.5.0-23.el7.i686.rpm
libvirt-client-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-config-network-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-config-nwfilter-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-interface-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-lxc-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-network-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-nodedev-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-nwfilter-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-qemu-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-secret-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-core-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-disk-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-gluster-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-logical-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-rbd-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-kvm-4.5.0-23.el7.x86_64.rpm
libvirt-debuginfo-4.5.0-23.el7.i686.rpm
libvirt-debuginfo-4.5.0-23.el7.x86_64.rpm
libvirt-devel-4.5.0-23.el7.i686.rpm
libvirt-devel-4.5.0-23.el7.x86_64.rpm
libvirt-docs-4.5.0-23.el7.x86_64.rpm
libvirt-libs-4.5.0-23.el7.i686.rpm
libvirt-libs-4.5.0-23.el7.x86_64.rpm

Red Hat Enterprise Linux Server Optional (v. 7):

ppc64:
libvirt-admin-4.5.0-23.el7.ppc64.rpm
libvirt-daemon-lxc-4.5.0-23.el7.ppc64.rpm
libvirt-debuginfo-4.5.0-23.el7.ppc.rpm
libvirt-debuginfo-4.5.0-23.el7.ppc64.rpm
libvirt-lock-sanlock-4.5.0-23.el7.ppc64.rpm
libvirt-login-shell-4.5.0-23.el7.ppc64.rpm
libvirt-nss-4.5.0-23.el7.ppc.rpm
libvirt-nss-4.5.0-23.el7.ppc64.rpm

ppc64le:
libvirt-admin-4.5.0-23.el7.ppc64le.rpm
libvirt-daemon-lxc-4.5.0-23.el7.ppc64le.rpm
libvirt-debuginfo-4.5.0-23.el7.ppc64le.rpm
libvirt-lock-sanlock-4.5.0-23.el7.ppc64le.rpm
libvirt-login-shell-4.5.0-23.el7.ppc64le.rpm
libvirt-nss-4.5.0-23.el7.ppc64le.rpm

s390x:
libvirt-admin-4.5.0-23.el7.s390x.rpm
libvirt-daemon-lxc-4.5.0-23.el7.s390x.rpm
libvirt-debuginfo-4.5.0-23.el7.s390.rpm
libvirt-debuginfo-4.5.0-23.el7.s390x.rpm
libvirt-lock-sanlock-4.5.0-23.el7.s390x.rpm
libvirt-login-shell-4.5.0-23.el7.s390x.rpm
libvirt-nss-4.5.0-23.el7.s390.rpm
libvirt-nss-4.5.0-23.el7.s390x.rpm

x86_64:
libvirt-admin-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-lxc-4.5.0-23.el7.x86_64.rpm
libvirt-debuginfo-4.5.0-23.el7.i686.rpm
libvirt-debuginfo-4.5.0-23.el7.x86_64.rpm
libvirt-lock-sanlock-4.5.0-23.el7.x86_64.rpm
libvirt-login-shell-4.5.0-23.el7.x86_64.rpm
libvirt-nss-4.5.0-23.el7.i686.rpm
libvirt-nss-4.5.0-23.el7.x86_64.rpm

Red Hat Enterprise Linux Workstation (v. 7):

Source:
libvirt-4.5.0-23.el7.src.rpm

x86_64:
libvirt-4.5.0-23.el7.x86_64.rpm
libvirt-bash-completion-4.5.0-23.el7.x86_64.rpm
libvirt-client-4.5.0-23.el7.i686.rpm
libvirt-client-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-config-network-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-config-nwfilter-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-interface-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-lxc-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-network-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-nodedev-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-nwfilter-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-qemu-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-secret-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-core-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-disk-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-gluster-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-iscsi-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-logical-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-mpath-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-rbd-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-driver-storage-scsi-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-kvm-4.5.0-23.el7.x86_64.rpm
libvirt-debuginfo-4.5.0-23.el7.i686.rpm
libvirt-debuginfo-4.5.0-23.el7.x86_64.rpm
libvirt-devel-4.5.0-23.el7.i686.rpm
libvirt-devel-4.5.0-23.el7.x86_64.rpm
libvirt-docs-4.5.0-23.el7.x86_64.rpm
libvirt-libs-4.5.0-23.el7.i686.rpm
libvirt-libs-4.5.0-23.el7.x86_64.rpm

Red Hat Enterprise Linux Workstation Optional (v. 7):

x86_64:
libvirt-admin-4.5.0-23.el7.x86_64.rpm
libvirt-daemon-lxc-4.5.0-23.el7.x86_64.rpm
libvirt-debuginfo-4.5.0-23.el7.i686.rpm
libvirt-debuginfo-4.5.0-23.el7.x86_64.rpm
libvirt-lock-sanlock-4.5.0-23.el7.x86_64.rpm
libvirt-login-shell-4.5.0-23.el7.x86_64.rpm
libvirt-nss-4.5.0-23.el7.i686.rpm
libvirt-nss-4.5.0-23.el7.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2019-3840
https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index

8. Contact:

The Red Hat security contact is <secalert at redhat.com>. More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2019 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIVAwUBXUl3DNzjgjWX9erEAQhrhg//URP3oLtPlvXvZoLPTqSgCzCreg2DpxUL
ckkmRATrG4juO5f1WBBi1OE64fidtb9cl3n8OqMC06dgQK4TxpsWab9diMPw1d0J
pS7kmIo4uSwvxzJVLLZLb5FU75A+qpqycxlpQIoO0rjXJmNvujLb8Slj57U36E2a
2/KcGmbAdQT9VVneT2soLkZNvN+WXKHXoS3LdBFzrPURDB5bAn2zwcl8o9L20U7S
EbyODV5zgOZIUNwB9LdUv/Rs8jyNOmyYgdnX83iHvQDZFhnuLyINYwSR0bHoLWnW
ID+uExdQGKABPkWVPkDWAX3lWzhq5od7DRlKgsXBe50he68ZN8O9GtGU4xmyahZt
HoWHKtkHJ2BeA0q4Qw7avfVZLncGC9mO6s6QuaotMdcnrbV3RQ0nprH6eavy5m3B
LePzIXV0QO6AzoquKLQ7su57uF0o3+B2SBueAYZcacslovFnRvA20vnk3u6z7Tu1
nRxvuFB++Ot6uzibkA1kAr8kruOPrCnzgU0iKaJfvy8LcMwk6O6sszkHVhhNT0lC
W4QWBbKQBE3cWQpw4Nb3DBawcMv7h//JI5+Hu5Ouvu2hJSxMUXrWYyqdblLzdf2e
W0ZGB2REMbfi9zCQCEVvkG2HVB+xXlMu2VowXh4zOwvSelTnAhlX1TkqJstHKmbl
cRUC8yT680g=
=qNGf
-----END PGP SIGNATURE-----

More information about the RHSA-announce mailing list