File _patchinfo of Package patchinfo.11701
<patchinfo incident="11701">
<issue tracker="bnc" id="1138734">Handle copying bitmaps to larger data buffers</issue>
<issue tracker="cve" id="2020-10703"/>
<issue tracker="bnc" id="1145586">KVM guest has high load during live migration</issue>
<issue tracker="bnc" id="1133719">Hitting machine scope ThreadMax limits with QEMU VMs and multiple volumes</issue>
<issue tracker="bnc" id="1137137">log rotation of /var/log/libvirt/qemu in SOC7/8</issue>
<issue tracker="bnc" id="1168683">VUL-0: CVE-2020-10703: libvirt: potential denial of service via active pool without target path</issue>
<issue tracker="bnc" id="1149100">SLES 12 SP5 Beta4 - virsh dominfo command produces an internal error for guests running on our system (kvm/libvirt)</issue>
<packager>jfehlig</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for libvirt</summary>
<description>This update for libvirt fixes the following issues:
Security issue fixed:
- CVE-2020-10703: Fixed a daemon crash caused by pools without target paths (bsc#1168683).
Non-security issues fixed:
- apparmor: avoid copying empty profile name (bsc#1149100).
- logging: ensure virtlogd rollover takes priority over logrotate (bsc#1137137).
- qemu: Add support for overriding max threads per process limit (bsc#1133719).
- util: fix copying bitmap to larger data buffer (bsc#1138734).
- virsh: support for setting precopy bandwidth in migrate (bsc#1145586).
- virsh: use upstream name for migration precopy bandwidth parameter (bsc#1145586).
</description>
</patchinfo>