SUSE-SU-2020:3037-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 26 Oct 2020, 15:20
Last modified:04 Feb 2026, 04:07

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Oct 2020, 15:20
Published
Vulnerability first disclosed
04 Feb 2026, 04:07
Last Modified
Vulnerability information updated

Description

Security update for libvirt This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155). - qemu: Adjust max memlock on mdev hotplug (bsc#1177480). - Xen: Don't add dom0 twice on driver reload (bsc#1176430). - virdevmapper: Handle kernel without device-mapper support (bsc#1175465). - Fixed an issue where building was failing (bsc#1175574).

Affected Systems

  • suse•libvirt&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1

    < 5.1.0-8.24.1

  • suse•libvirt&distro=SUSE Linux Enterprise Module for Server Applications 15 SP1

    < 5.1.0-8.24.1

References (9)