Issued:

2017-03-02

Updated:

2017-03-02

RHBA-2017:0397 - libvirt bug fix update

Synopsis

libvirt bug fix update

Type/Severity

Bug Fix Advisory None

Topic

An update for libvirt is now available for Red Hat Enterprise Linux 7.

Description

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

This update fixes the following bugs:

• Previously, the libvirt code assumed that for any domain disk device found to be LUKS encrypted, the device would have a libvirt secret associated with the device to provide the key to unlock the device. As a consequence, when attempting to access the secret libvirt would crash. This update adds a check to ensure that not only is there encryption, but there is a secret, before trying to access the secret object to pass the secret along with the disk. As a result, it is possible to attach a LUKS encrypted without providing a libvirt secret to unlock the LUKS disk. This allows the application to provide the mechanism to unlock the LUKS disk. (BZ# 1411394)

• Previously, libvirt did not provide a method for adding a secret for a virtio-scsi device during alterations to support a domain master secret for passing the encrypted secret to qemu. Consequently, it was not possible to hot-plug a virtio-scsi device using cephx authentication. This update adjusts the algorithm to add the authentication object with the encrypted secret for qemu to parse. As a result, libvirt can authenticate a hot-plugged virtio-scsi device. (BZ# 1411398)

Users of libvirt are advised to upgrade to this updated package, which fixes these bugs. After installing the updated packages, libvirtd will be restarted automatically.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• libvirt-daemon-lxc-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-nss-2.0.0-10.el7_3.5.i686.rpm
• libvirt-daemon-driver-secret-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-client-2.0.0-10.el7_3.5.s390.rpm
• libvirt-daemon-config-network-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-nss-2.0.0-10.el7_3.5.ppc.rpm
• libvirt-nss-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-client-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-login-shell-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-nss-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-nss-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-daemon-driver-nodedev-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-client-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-debuginfo-2.0.0-10.el7_3.5.s390.rpm
• libvirt-daemon-driver-lxc-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-devel-2.0.0-10.el7_3.5.s390.rpm
• libvirt-devel-2.0.0-10.el7_3.5.i686.rpm
• libvirt-daemon-driver-nwfilter-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-daemon-lxc-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-devel-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-login-shell-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-daemon-driver-network-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-devel-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-daemon-driver-storage-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-daemon-driver-storage-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-daemon-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-daemon-config-nwfilter-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-daemon-driver-lxc-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-lock-sanlock-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-login-shell-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-daemon-driver-network-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-daemon-driver-secret-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-daemon-lxc-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-client-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-devel-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-debuginfo-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-nss-2.0.0-10.el7_3.5.s390.rpm
• libvirt-daemon-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-debuginfo-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-nss-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-2.0.0-10.el7_3.5.src.rpm
• libvirt-daemon-config-nwfilter-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-daemon-driver-storage-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-daemon-kvm-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-daemon-driver-secret-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-debuginfo-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-daemon-driver-nodedev-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-devel-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-lock-sanlock-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-daemon-driver-interface-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-client-2.0.0-10.el7_3.5.i686.rpm
• libvirt-daemon-config-nwfilter-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-daemon-driver-storage-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-debuginfo-2.0.0-10.el7_3.5.i686.rpm
• libvirt-daemon-driver-nwfilter-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-daemon-config-network-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-daemon-lxc-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-daemon-config-network-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-daemon-driver-nwfilter-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-client-2.0.0-10.el7_3.5.ppc.rpm
• libvirt-daemon-config-nwfilter-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-daemon-kvm-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-debuginfo-2.0.0-10.el7_3.5.ppc.rpm
• libvirt-debuginfo-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-devel-2.0.0-10.el7_3.5.ppc.rpm
• libvirt-client-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-daemon-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-daemon-driver-interface-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-daemon-driver-lxc-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-daemon-driver-network-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-daemon-config-network-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-daemon-driver-interface-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-daemon-driver-interface-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-daemon-driver-nodedev-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-daemon-driver-secret-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-daemon-driver-lxc-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-daemon-driver-qemu-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-docs-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-daemon-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-docs-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-docs-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-daemon-driver-nodedev-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-daemon-driver-qemu-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-daemon-driver-network-2.0.0-10.el7_3.5.ppc64.rpm
• libvirt-daemon-driver-nwfilter-2.0.0-10.el7_3.5.s390x.rpm
• libvirt-daemon-driver-qemu-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-docs-2.0.0-10.el7_3.5.x86_64.rpm
• libvirt-lock-sanlock-2.0.0-10.el7_3.5.ppc64le.rpm
• libvirt-login-shell-2.0.0-10.el7_3.5.ppc64.rpm

Fixes

• This content is not included.BZ - 1411394
• This content is not included.BZ - 1411398

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.