File _patchinfo of Package patchinfo.239

<patchinfo incident="239">
  <issue id="899484" tracker="bnc">VUL-1: CVE-2014-3657: libvirt: domain_conf: domain deadlock DoS</issue>
  <issue id="903756" tracker="bnc" />
  <issue id="902976" tracker="bnc" />
  <issue id="899334" tracker="bnc">libvirt claiming Machine already exists</issue>
  <issue id="904432" tracker="bnc" />
  <issue id="904176" tracker="bnc">VUL-1: CVE-2014-7823: libvirt: Information leak with flag VIR_DOMAIN_XML_MIGRATABLE</issue>
  <issue id="904426" tracker="bnc" />
  <issue id="900587" tracker="bnc" />
  <issue id="909828" tracker="bnc" />
  <issue id="910862" tracker="bnc" />
  <issue id="891936" tracker="bnc" />
  <issue id="911737" tracker="bnc" />
  <issue id="904432" tracker="bnc" />
  <issue id="CVE-2014-7823" tracker="cve" />
  <issue id="CVE-2014-8136" tracker="cve" />
  <issue id="CVE-2014-3657" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>jfehlig</packager>
  <description>libvirt was updated to fix security issues and bugs.

These security issues were fixed:
- Fixed denial of service flaw in libvirt's virConnectListAllDomains() function (CVE-2014-3657).
- Information leak with flag VIR_DOMAIN_XML_MIGRATABLE (CVE-2014-7823).
- local denial of service in qemu driver (CVE-2014-8136)

These non-security issues were fixed:
- Get /proc/sys/net/ipv[46] read-write for wicked to work in containers (bsc#904432).
- libxl: Several migration improvements (bsc#903756).
- libxl: allow libxl to find pygrub binary (bdo#770485).
- Fix Qemu AppArmor abstraction (bsc#904426).
- AppArmor confined kvm domains couldn't find the apparmor profile template (bnc#902976).
- Backport commit c110cdb2 to fix non-raw storage format error (bnc#900587).
- qemu: use systemd's TerminateMachine to kill all processes (bsc#899334).
- Transformed Errors into warnings in detect_scsi_host_caps.
- Fix a missing cleanup for lxc containers.
- Adding network configuration to containers. bsc#904432
</description>
  <summary>Security update for libvirt</summary>
</patchinfo>
openSUSE Build Service is sponsored by