File _patchinfo of Package patchinfo.2560

<patchinfo>
  <issue id="817407" tracker="bnc">When performing device assignment of a Broadcom 57810 NIC on a Guest OS, the guest will not boot.</issue>
  <issue id="857492" tracker="bnc">VUL-0: CVE-2013-6458: libvirtd: qemu job usage issue in several API leading to libvirtd crash</issue>
  <issue id="859051" tracker="bnc">VUL-0: CVE-2014-0028: libvirt: event registration bypasses domain:getattr ACL</issue>
  <issue id="857271" tracker="bnc">Setting up CD ROM as boot media causes installation process to abort: qemu: prepended, but phy: (optical drive) or file: (ISO image) expected</issue>
  <issue id="858824" tracker="bnc">VUL-0: CVE-2013-6457: libvirt: avoid crashing if calling 'virsh numatune' on an inactive domain (libxl)</issue>
  <issue id="859041" tracker="bnc">libvirt-daemon has a postinstall check for a file in libvirt-daemon-driver-network</issue>
  <issue id="858817" tracker="bnc">VUL-0: CVE-2014-1447: libvirt: denial of service with keepalive</issue>
  <issue id="CVE-2013-6458" tracker="cve" />
  <issue id="CVE-2014-1447" tracker="cve" />
  <issue id="CVE-2014-0028" tracker="cve" />
  <issue id="CVE-2013-6457" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>jfehlig</packager>
  <description>This update fixes the following security and non security issues with libvirt:

- bnc#857492: Fix libvirtd crash when hot-plugging disks for qemu 
  domains (CVE-2013-6458)
- bnc#858817: Don't crash if a connection closes early (CVE-2014-1447)
- bnc#858824: avoid crashing libvirtd when calling `virsh numatune' on 
  inactive Xen libxl domain (CVE-2013-6457)
- bnc#859051: filter global events by domain:getattr ACL (CVE-2014-0028)
- bnc#817407: Add CAP_SYS_PACCT capability to libvirtd AppArmor profile
- bnc#859041: Following the upstream pattern, introduce the 
  daemon-config-network subpackage to handle defining the default network
- bnc#857271: Fix initialization of emulated NICs
- bnc#857271: Fix potential segfault in libxl driver when domain create 
  fails
</description>
  <summary>update for libvirt</summary>
</patchinfo>
openSUSE Build Service is sponsored by