SUSE-SU-2018:2304-1

Dashboard / Vulnerabilities / SUSE-SU-2018:2304-1

SUSE-SU-2018:2304-1

Summary: Security update for libvirt

Details: This update for libvirt fixes the following issues: Security issue fixed: - CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd' CPUID feature bits to address V4 Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1092885). Bug fixes: - bsc#1094325: Enable virsh blockresize for XEN guests (FATE#325467). - bsc#1095556: Fix qemu VM creating with --boot uefi due to missing AppArmor profile. - bsc#1094725: Fix `virsh blockresize` to work with Xen qdisks. - bsc#1094480: Fix `virsh list` to list domains with `xl list`. - bsc#1087416: Fix missing video device within guest with default installation by virt-mamanger. - bsc#1079150: Fix libvirt-guests start dependency. - bsc#1076861: Fix locking of lockspace resource '/devcfs/disks/uatidmsvn1-xvda'. - bsc#1074014: Fix KVM live migration when shutting down cluster node. - bsc#959329: Fix wrong state of VMs in virtual manager.

References: https://www.suse.com/support/update/announcement/2018/suse-su-20182304-1/, https://bugzilla.suse.com/1074014, https://bugzilla.suse.com/1076861, https://bugzilla.suse.com/1079150, https://bugzilla.suse.com/1087416, https://bugzilla.suse.com/1092885, https://bugzilla.suse.com/1094325, https://bugzilla.suse.com/1094480, https://bugzilla.suse.com/1094725, https://bugzilla.suse.com/1095556, https://bugzilla.suse.com/959329, https://www.suse.com/security/cve/CVE-2018-3639