This update for libvirt and virt-manager fixes the following issues:
Security issues fixed :

  - CVE-2017-5715: Fixes for speculative side channel     attacks aka 'SpectreAttack' (var2) (bsc#1079869).

  - CVE-2018-6764: Fixed guest executable code injection via     libnss_dns.so loaded by libvirt_lxc before init     (bsc#1080042).

  - CVE-2018-1064: Fixed denial of service when reading from     guest agent (bsc#1083625). Non-security issues fixed in     libvirt :

  - bsc#1070615: Fixed TPM device passthrough failure on     kernels >= 4.0.

  - bsc#1082041: SUSE Linux Enterprise 11 SP4 hvm converted     to pvhvm. Unless vm memory is on gig boundary, vm won't     boot.

  - bsc#1082161: Unable to change RTC basis or adjustment     for Xen HVM guests using libvirt. Non-security issues     fixed in virt-manager :

  - bsc#1086038: VM guests cannot be properly installed with     virt-install

  - bsc#1067018: KVM Guest creation failed - Property .cmt     not found

  - bsc#1054986: Fix openSUSE 15.0 detection. It has no     content file or .treeinfo file

  - bsc#1085757: Fallback to latest version of openSUSE when     opensuse-unknown is detected for the ISO

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2018:0920-1) (Spectre)

high Nessus Plugin ID 109012

Version 1.11