gpp_maybe Security update for libvirt

SUSE-SLE-Module-Basesystem-15-2019-1637

This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd (bsc#1138301). - CVE-2019-10166: Fixed an issue with virDomainManagedSaveDefineXML which could have been used to alter the domain's config used for managedsave or execute arbitrary emulator binaries (bsc#1138302). - CVE-2019-10167: Fixed an issue with virConnectGetDomainCapabilities API which could have been used to execute arbitrary emulators (bsc#1138303). Other issue addressed: - spec: add systemd-container dependency to qemu and lxc drivers (bsc#1136109).

Release Date

Jun 21 2019
References

Bugzilla: 1138301, 1138303, 1138302, 1136109
CVEs: CVE-2019-10161, CVE-2019-10167, CVE-2019-10166
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15 ppc64le

Packages

libvirt
Library providing a simple virtualization API

4.0.0-9.27.1 lock src

libvirt-libs
Client side libraries for libvirt

4.0.0-9.27.1 lock rpm

Basesystem Module 15 aarch64

Packages

libvirt
Library providing a simple virtualization API

4.0.0-9.27.1 lock src

libvirt-libs
Client side libraries for libvirt

4.0.0-9.27.1 lock rpm

Basesystem Module 15 s390x

Packages

libvirt
Library providing a simple virtualization API

4.0.0-9.27.1 lock src

libvirt-libs
Client side libraries for libvirt

4.0.0-9.27.1 lock rpm

Basesystem Module 15 x86_64

Packages

libvirt
Library providing a simple virtualization API

4.0.0-9.27.1 lock src

libvirt-libs
Client side libraries for libvirt

4.0.0-9.27.1 lock rpm