This update for libvirt fixes the following issues: Security issues fixed :

  - CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd'     CPUID feature bits to address V4 Speculative Store     Bypass aka 'Memory Disambiguation' (bsc#1092885).

  - CVE-2018-1064: Fix denial of service problem during     reading from guest agent (bsc#1083625).

  - CVE-2018-5748: Fix resource exhaustion via     qemuMonitorIORead() method (bsc#1076500).

  - CVE-2016-5008: Fix that an empty VNC password disables     authentication (bsc#987527).

  - CVE-2017-5715: Fix speculative side channel attacks aka     'SpectreAttack' (var2) (bsc#1079869). Bug fixes :

  - bsc#980558: Fix NUMA node memory allocation.

  - bsc#968483: Restart daemons in %posttrans after     connection drivers.

  - bsc#897352: Systemd fails to ignore LSB services.

  - bsc#956298: virsh domxml-to-native causes segfault of     libvirtd.

  - bsc#964465: libvirtd.service causes systemd warning     about xencommons service.

  - bsc#954872: Script block-dmmd not working as expected.

  - bsc#854343: libvirt installation run inappropriate     systemd restart.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLES12 Security Update : libvirt (SUSE-SU-2018:2141-1) (Spectre)

critical Nessus Plugin ID 111503

Version 1.9