Security update for libvirt SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1289-1 Final 1 1 2020-05-15T14:24:59Z current 2020-05-15T14:24:59Z 2020-05-15T14:24:59Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libvirt This update for libvirt fixes the following issues: Security issue fixed: - CVE-2020-10703: Fixed a daemon crash caused by pools without target paths (bsc#1168683). Non-security issues fixed: - apparmor: avoid copying empty profile name (bsc#1149100). - logging: ensure virtlogd rollover takes priority over logrotate (bsc#1137137). - qemu: Add support for overriding max threads per process limit (bsc#1133719). - util: fix copying bitmap to larger data buffer (bsc#1138734). - virsh: support for setting precopy bandwidth in migrate (bsc#1145586). - virsh: use upstream name for migration precopy bandwidth parameter (bsc#1145586). - virt-create-rootfs: add SLE 15 and SLE 12 service packs support (bsc#1154093). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-SAP-Azure-2020-1289,Image SLES12-SP4-SAP-Azure-BYOS-2020-1289,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2020-1289,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2020-1289,Image SLES12-SP4-SAP-EC2-HVM-2020-1289,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2020-1289,Image SLES12-SP4-SAP-GCE-2020-1289,Image SLES12-SP4-SAP-GCE-BYOS-2020-1289,Image SLES12-SP4-SAP-OCI-BYOS-2020-1289,SUSE-2020-1289,SUSE-SLE-SDK-12-SP4-2020-1289,SUSE-SLE-SERVER-12-SP4-2020-1289 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201289-1/ Link for SUSE-SU-2020:1289-1 https://lists.suse.com/pipermail/sle-security-updates/2020-May/006821.html E-Mail link for SUSE-SU-2020:1289-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1133719 SUSE Bug 1133719 https://bugzilla.suse.com/1137137 SUSE Bug 1137137 https://bugzilla.suse.com/1138734 SUSE Bug 1138734 https://bugzilla.suse.com/1145586 SUSE Bug 1145586 https://bugzilla.suse.com/1149100 SUSE Bug 1149100 https://bugzilla.suse.com/1154093 SUSE Bug 1154093 https://bugzilla.suse.com/1168683 SUSE Bug 1168683 https://www.suse.com/security/cve/CVE-2020-10703/ SUSE CVE CVE-2020-10703 page Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 libvirt-client-4.0.0-8.20.2 libvirt-libs-4.0.0-8.20.2 libvirt-4.0.0-8.20.2 libvirt-admin-4.0.0-8.20.2 libvirt-daemon-4.0.0-8.20.2 libvirt-daemon-config-network-4.0.0-8.20.2 libvirt-daemon-config-nwfilter-4.0.0-8.20.2 libvirt-daemon-driver-interface-4.0.0-8.20.2 libvirt-daemon-driver-libxl-4.0.0-8.20.2 libvirt-daemon-driver-lxc-4.0.0-8.20.2 libvirt-daemon-driver-network-4.0.0-8.20.2 libvirt-daemon-driver-nodedev-4.0.0-8.20.2 libvirt-daemon-driver-nwfilter-4.0.0-8.20.2 libvirt-daemon-driver-qemu-4.0.0-8.20.2 libvirt-daemon-driver-secret-4.0.0-8.20.2 libvirt-daemon-driver-storage-4.0.0-8.20.2 libvirt-daemon-driver-storage-core-4.0.0-8.20.2 libvirt-daemon-driver-storage-disk-4.0.0-8.20.2 libvirt-daemon-driver-storage-iscsi-4.0.0-8.20.2 libvirt-daemon-driver-storage-logical-4.0.0-8.20.2 libvirt-daemon-driver-storage-mpath-4.0.0-8.20.2 libvirt-daemon-driver-storage-rbd-4.0.0-8.20.2 libvirt-daemon-driver-storage-scsi-4.0.0-8.20.2 libvirt-daemon-hooks-4.0.0-8.20.2 libvirt-daemon-lxc-4.0.0-8.20.2 libvirt-daemon-qemu-4.0.0-8.20.2 libvirt-daemon-xen-4.0.0-8.20.2 libvirt-devel-4.0.0-8.20.2 libvirt-devel-32bit-4.0.0-8.20.2 libvirt-devel-64bit-4.0.0-8.20.2 libvirt-doc-4.0.0-8.20.2 libvirt-lock-sanlock-4.0.0-8.20.2 libvirt-nss-4.0.0-8.20.2 wireshark-plugin-libvirt-4.0.0-8.20.2 libvirt-client-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-Azure libvirt-libs-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-Azure libvirt-client-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-Azure-BYOS libvirt-libs-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-Azure-BYOS libvirt-client-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libvirt-libs-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libvirt-client-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libvirt-libs-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libvirt-client-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-EC2-HVM libvirt-libs-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-EC2-HVM libvirt-client-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libvirt-libs-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libvirt-client-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-GCE libvirt-libs-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-GCE libvirt-client-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-GCE-BYOS libvirt-libs-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-GCE-BYOS libvirt-client-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-OCI-BYOS libvirt-libs-4.0.0-8.20.2 as a component of Image SLES12-SP4-SAP-OCI-BYOS libvirt-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-admin-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-client-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-config-network-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-config-nwfilter-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-interface-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-libxl-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-lxc-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-network-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-nodedev-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-nwfilter-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-qemu-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-secret-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-core-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-disk-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-iscsi-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-logical-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-mpath-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-rbd-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-driver-storage-scsi-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-hooks-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-lxc-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-qemu-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-daemon-xen-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-doc-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-libs-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-lock-sanlock-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-nss-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server 12 SP4 libvirt-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-admin-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-client-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-config-network-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-config-nwfilter-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-interface-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-libxl-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-lxc-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-network-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-nodedev-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-nwfilter-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-qemu-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-secret-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-core-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-disk-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-iscsi-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-logical-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-mpath-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-rbd-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-driver-storage-scsi-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-hooks-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-lxc-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-qemu-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-daemon-xen-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-doc-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-libs-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-lock-sanlock-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-nss-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libvirt-devel-4.0.0-8.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its target path. In more detail, this flaw affects storage pools created without a target path such as network-based pools like gluster and RBD. Unprivileged users with a read-only connection could abuse this flaw to crash the libvirt daemon, resulting in a potential denial of service. CVE-2020-10703 Image SLES12-SP4-SAP-Azure-BYOS:libvirt-client-4.0.0-8.20.2 Image SLES12-SP4-SAP-Azure-BYOS:libvirt-libs-4.0.0-8.20.2 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libvirt-client-4.0.0-8.20.2 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libvirt-libs-4.0.0-8.20.2 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libvirt-client-4.0.0-8.20.2 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libvirt-libs-4.0.0-8.20.2 Image SLES12-SP4-SAP-Azure:libvirt-client-4.0.0-8.20.2 Image SLES12-SP4-SAP-Azure:libvirt-libs-4.0.0-8.20.2 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libvirt-client-4.0.0-8.20.2 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libvirt-libs-4.0.0-8.20.2 Image SLES12-SP4-SAP-EC2-HVM:libvirt-client-4.0.0-8.20.2 Image SLES12-SP4-SAP-EC2-HVM:libvirt-libs-4.0.0-8.20.2 Image SLES12-SP4-SAP-GCE-BYOS:libvirt-client-4.0.0-8.20.2 Image SLES12-SP4-SAP-GCE-BYOS:libvirt-libs-4.0.0-8.20.2 Image SLES12-SP4-SAP-GCE:libvirt-client-4.0.0-8.20.2 Image SLES12-SP4-SAP-GCE:libvirt-libs-4.0.0-8.20.2 Image SLES12-SP4-SAP-OCI-BYOS:libvirt-client-4.0.0-8.20.2 Image SLES12-SP4-SAP-OCI-BYOS:libvirt-libs-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-admin-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-client-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-config-network-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-config-nwfilter-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-interface-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-libxl-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-lxc-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-network-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-nodedev-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-nwfilter-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-qemu-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-secret-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-core-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-disk-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-iscsi-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-logical-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-mpath-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-rbd-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-driver-storage-scsi-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-hooks-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-lxc-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-qemu-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-daemon-xen-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-doc-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-libs-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-lock-sanlock-4.0.0-8.20.2 SUSE Linux Enterprise Server 12 SP4:libvirt-nss-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-admin-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-client-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-config-network-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-config-nwfilter-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-interface-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-libxl-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-lxc-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-network-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-nodedev-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-nwfilter-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-qemu-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-secret-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-core-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-disk-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-iscsi-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-logical-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-mpath-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-rbd-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-driver-storage-scsi-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-hooks-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-lxc-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-qemu-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-daemon-xen-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-doc-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-libs-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-lock-sanlock-4.0.0-8.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libvirt-nss-4.0.0-8.20.2 SUSE Linux Enterprise Software Development Kit 12 SP4:libvirt-devel-4.0.0-8.20.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201289-1/ https://www.suse.com/security/cve/CVE-2020-10703.html CVE-2020-10703 https://bugzilla.suse.com/1168683 SUSE Bug 1168683