This update for libvirt fixes the following issues :

CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use ioctl's to obtain the dependency tree of disks and drop use of libdevmapper. - bsc#1161883, bsc#1174458

qemu: Setup emulator thread and cpuset.mems before exec - bsc#1171946

libxl: Normalize MAC address in device conf on netdev hotplug - bsc#1172052

spec: Use a functional requires instead of explicit version requires for the new memory-related libxl APIs - bsc#1167007

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2020:2237-1)

high Nessus Plugin ID 139656

Version 1.5