This update for libvirt and virt-manager fixes the following issues :

Security issues fixed :

  - CVE-2017-5715: Fixes for speculative side channel     attacks aka 'SpectreAttack' (var2) (bsc#1079869).

  - CVE-2018-6764: Fixed guest executable code injection via     libnss_dns.so loaded by libvirt_lxc before init     (bsc#1080042).

  - CVE-2018-1064: Fixed denial of service when reading from     guest agent (bsc#1083625).

Non-security issues fixed in libvirt :

  - bsc#1070615: Fixed TPM device passthrough failure on     kernels >= 4.0.

  - bsc#1082041: SUSE Linux Enterprise 11 SP4 hvm converted     to pvhvm. Unless vm memory is on gig boundary, vm won't     boot.

  - bsc#1082161: Unable to change RTC basis or adjustment     for Xen HVM guests using libvirt.

Non-security issues fixed in virt-manager :

  - bsc#1086038: VM guests cannot be properly installed with     virt-install

  - bsc#1067018: KVM Guest creation failed - Property .cmt     not found

  - bsc#1054986: Fix openSUSE 15.0 detection. It has no     content file or .treeinfo file

  - bsc#1085757: Fallback to latest version of openSUSE when     opensuse-unknown is detected for the ISO

This update was imported from the SUSE:SLE-12-SP3:Update update project.

Detections

Analytics

openSUSE Security Update : libvirt (openSUSE-2018-358) (Spectre)

high Nessus Plugin ID 109020

Version 1.10