File _patchinfo of Package patchinfo.10498
<patchinfo incident="10498">
<issue tracker="bnc" id="1127458">VUL-0: CVE-2019-3840: libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function</issue>
<issue tracker="bnc" id="1120813">Virsh setmem –config does not preserve memory settings on live migrate</issue>
<issue tracker="bnc" id="1104662">zypper patch executes /usr/bin/systemctl try-restart libvirt-guests.service</issue>
<issue tracker="cve" id="2019-3840"/>
<category>security</category>
<rating>moderate</rating>
<packager>jfehlig</packager>
<description>This update for libvirt fixes the following issues:
Security issues fixed:
- CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could
have resulted in a remote denial of service via the guest agent (bsc#1127458).
Other issues fixed:
- libxl: save current memory value after successful balloon (bsc#1120813).
- spec: Don't restart libvirt-guests when updating libvirt-client (bsc#1104662).
</description>
<summary>Security update for libvirt</summary>
</patchinfo>