SUSE: 2020:1208-1 Important: libvirt Memory Leak And Daemon Crash
suse
May 6, 2020
An update that solves two vulnerabilities and has 8 fixes is now available
Summary
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2020-10703: Fixed a daemon crash caused by pools without target paths (bsc#1168683). - CVE-2020-12430: Fixed a memory leak in qemuDomainGetStatsIOThread (bsc#1170765). Non-security issues fixed: - Support setting credit2 scheduler parameters for xen (bsc#1162160). - Add SLE 15 and SLE 12 service packs support to 'libvirtd' (bsc#1154093). - Add support boot from 'vfio-ccw'and 'mdev' devices (jsc#SLE-5826, FATE#327355, bsc#1152649). - Fix lock manager lock ordering (bsc#1145774). - Do not define known no-op features. (bsc#1151850). - Enable use of newer libxl APIs for retrieving memory statistics (bsc#1157490, bsc#1167007). - Create multipath targets for qemu PR (bsc#1161883). Patch Instructions:
Topics Covered
References
#1145774 #1151850 #1152649 #1154093 #1157490
#1161883 #1162160 #1167007 #1168683 #1170765
Cross- CVE-2020-10703 CVE-2020-12430
Affected Products:
SUSE Linux Enterprise Module for Server Applications 15-SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
SUSE Linux Enterprise Module for Basesystem 15-SP1
https://www.suse.com/security/cve/CVE-2020-10703.html
https://www.suse.com/security/cve/CVE-2020-12430.html
https://bugzilla.suse.com/1145774
https://bugzilla.suse.com/1151850
https://bugzilla.suse.com/1152649
https://bugzilla.suse.com/1154093
https://bugzilla.suse.com/1157490
https://bugzilla.suse.com/1161883
https://bugzilla.suse.com/1162160
https://bugzilla.suse.com/1167007
https://bugzilla.suse.com/1168683
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2020:1208-1
Rating: important
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!