gpp_maybe Security update for libvirt

SUSE-SLE-Module-Basesystem-15-SP2-2020-2970

This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155). - qemu: Avoid stale capabilities cache host CPU or kernel command line changes (bsc#1173157). - virdevmapper: Handle kernel without device-mapper support (bsc#1175465). - Xen: Added support for passing arbitrary commands to the qemu device model, similar to the xl.cfg(5) device_model_args setting (bsc#1174139). - Xen: Don't add dom0 twice on driver reload (bsc#1176430).

• Release Date
  Oct 20 2020
• References
  Bugzilla: 1175465, 1176430, 1177155, 1173157, 1174139, 1174955
  CVEs: CVE-2020-25637, CVE-2020-15708
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.2 aarch64

• Packages
  libvirt
  Library providing a virtualization API

  6.0.0-13.8.1 lock src

  libvirt-libs
  Client side libraries for libvirt

  6.0.0-13.8.1 lock rpm

Basesystem Module 15.2 s390x

• Packages
  libvirt
  Library providing a virtualization API

  6.0.0-13.8.1 lock src

  libvirt-libs
  Client side libraries for libvirt

  6.0.0-13.8.1 lock rpm

Basesystem Module 15.2 ppc64le

• Packages
  libvirt
  Library providing a virtualization API

  6.0.0-13.8.1 lock src

  libvirt-libs
  Client side libraries for libvirt

  6.0.0-13.8.1 lock rpm

Basesystem Module 15.2 x86_64

• Packages
  libvirt
  Library providing a virtualization API

  6.0.0-13.8.1 lock src

  libvirt-libs
  Client side libraries for libvirt

  6.0.0-13.8.1 lock rpm