gpp_maybe Security update for libvirt

SUSE-SLE-SDK-12-SP2-2018-576

This update for libvirt fixes the following issues: Security issues fixed: - CVE-2017-5715: Fixes for speculative side channel attacks aka "SpectreAttack" (var2) (bsc#1079869). - CVE-2018-6764: Fixed guest executable code injection via libnss_dns.so loaded by libvirt_lxc before init (bsc#1080042). - CVE-2018-1064: Fixed denial of service when reading from guest agent (bsc#1083625). Non-security issues fixed: - Error starting domain: internal error: No usable sysfs TPM cancel file could be found (bsc#1078808). - SUSE Linux Enterprise 11 SP4 hvm converted to pvhvm. Unless vm memory is on gig boundary, vm won't boot (bsc#1082041).

• Release Date
  Apr 3 2018
• References
  Bugzilla: 1080042, 1079869, 1083625, 1078808, 1082041
  CVEs: CVE-2017-5715, CVE-2018-1064, CVE-2018-6764
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

• Packages
  libvirt
  Library providing a simple virtualization API

  2.0.0-27.34.1 lock src

  libvirt-devel
  Libraries, includes, etc. to compile with the libvirt library

  2.0.0-27.34.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

• Packages
  libvirt
  Library providing a simple virtualization API

  2.0.0-27.34.1 lock src

  libvirt-devel
  Libraries, includes, etc. to compile with the libvirt library

  2.0.0-27.34.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

• Packages
  libvirt
  Library providing a simple virtualization API

  2.0.0-27.34.1 lock src

  libvirt-devel
  Libraries, includes, etc. to compile with the libvirt library

  2.0.0-27.34.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

• Packages
  libvirt
  Library providing a simple virtualization API

  2.0.0-27.34.1 lock src

  libvirt-devel
  Libraries, includes, etc. to compile with the libvirt library

  2.0.0-27.34.1 lock rpm