Lucene search

K
suseSuseSUSE-SU-2018:0920-1
HistoryApr 11, 2018 - 12:11 p.m.

Security update for libvirt (important)

2018-04-1112:11:26
lists.opensuse.org
71

0.975 High

EPSS

Percentile

100.0%

This update for libvirt and virt-manager fixes the following issues:

Security issues fixed:

  • CVE-2017-5715: Fixes for speculative side channel attacks aka
    "SpectreAttack" (var2) (bsc#1079869).
  • CVE-2018-6764: Fixed guest executable code injection via libnss_dns.so
    loaded by libvirt_lxc before init (bsc#1080042).
  • CVE-2018-1064: Fixed denial of service when reading from guest agent
    (bsc#1083625).

Non-security issues fixed in libvirt:

  • bsc#1070615: Fixed TPM device passthrough failure on kernels >= 4.0.
  • bsc#1082041: SUSE Linux Enterprise 11 SP4 hvm converted to pvhvm. Unless
    vm memory is on gig boundary, vm won’t boot.
  • bsc#1082161: Unable to change RTC basis or adjustment for Xen HVM guests
    using libvirt.

Non-security issues fixed in virt-manager:

  • bsc#1086038: VM guests cannot be properly installed with virt-install
  • bsc#1067018: KVM Guest creation failed - Property .cmt not found
  • bsc#1054986: Fix openSUSE 15.0 detection. It has no content file or
    .treeinfo file
  • bsc#1085757: Fallback to latest version of openSUSE when
    opensuse-unknown is detected for the ISO