File _patchinfo of Package patchinfo.7975

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.7975

<patchinfo incident="7975">
  <issue id="1083625" tracker="bnc">VUL-0: EMBARGOED: CVE-2018-1064: libvirt: Denial of service reading from guest agent</issue>
  <issue id="1082041" tracker="bnc">L3: sles11sp4 hvm converted to pvhvm. Unless vm memory is on gig boundary, vm won't boot</issue>
  <issue id="1080042" tracker="bnc">VUL-1: CVE-2018-6764: libvirt: guest could inject executable code via libnss_dns.so loaded by libvirt_lxc before init</issue>
  <issue id="1070615" tracker="bnc">qemu: tpm device passthrough fails on kernels &gt;= 4.0</issue>
  <issue id="1079869" tracker="bnc">VUL-0: libvirt: fixes for speculative side channel attacks  aka "SpectreAttack" (var2)</issue>
  <issue id="1082161" tracker="bnc">Unable to change RTC basis or adjustment for Xen HVM guests using libvirt</issue>
  <issue id="1086038" tracker="bnc">VM guests cannot be properly installed with virt-install</issue>
  <issue id="1067018" tracker="bnc">L3: KVM Guest creation failed - Property .cmt not found</issue>
  <issue id="1054986" tracker="bnc">Missing content file on the ISO media causes virt-install to fail detecting distro type and version</issue>
  <issue id="1085757" tracker="bnc">Leap 15 patch for osinfo-db has wrong information in it</issue>
  <issue id="2017-5715" tracker="cve" />
  <issue id="2018-1064" tracker="cve" />
  <issue id="2018-6764" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>jfehlig</packager>
  <description>This update for libvirt and virt-manager fixes the following issues:

Security issues fixed:

- CVE-2017-5715: Fixes for speculative side channel attacks aka &quot;SpectreAttack&quot; (var2) (bsc#1079869).
- CVE-2018-6764: Fixed guest executable code injection via libnss_dns.so loaded by libvirt_lxc before init (bsc#1080042).
- CVE-2018-1064: Fixed denial of service when reading from guest agent (bsc#1083625).

Non-security issues fixed in libvirt:

- bsc#1070615: Fixed TPM device passthrough failure on kernels &gt;= 4.0.
- bsc#1082041: SUSE Linux Enterprise 11 SP4 hvm converted to pvhvm. Unless vm memory is on gig boundary, vm won't boot.
- bsc#1082161: Unable to change RTC basis or adjustment for Xen HVM guests using libvirt.

Non-security issues fixed in virt-manager:

- bsc#1086038: VM guests cannot be properly installed with virt-install
- bsc#1067018: KVM Guest creation failed - Property .cmt not found
- bsc#1054986: Fix openSUSE 15.0 detection. It has no content file or .treeinfo file
- bsc#1085757: Fallback to latest version of openSUSE when opensuse-unknown is detected for the ISO

This update was imported from the SUSE:SLE-12-SP3:Update update project.</description>
  <summary>Security update for libvirt</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.7975

Places