< back to search

gpp_maybe Security update for libvirt
SUSE-SLE-Module-Basesystem-15-SP1-2019-1643

This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd (bsc#1138301). - CVE-2019-10166: Fixed an issue with virDomainManagedSaveDefineXML which could have been used to alter the domain's config used for managedsave or execute arbitrary emulator binaries (bsc#1138302). - CVE-2019-10167: Fixed an issue with virConnectGetDomainCapabilities API which could have been used to execute arbitrary emulators (bsc#1138303). - CVE-2019-10168: Fixed an issue with virConnect*HypervisorCPU API which could have been used to execute arbitrary emulators (bsc#1138305).

cloud_download Downloads

Basesystem Module 15.1 aarch64
  • Packages
    libvirt
    Library providing a virtualization API
    5.1.0-8.6.1 lock src
    libvirt-libs
    Client side libraries for libvirt
    5.1.0-8.6.1 lock rpm
Basesystem Module 15.1 ppc64le
  • Packages
    libvirt
    Library providing a virtualization API
    5.1.0-8.6.1 lock src
    libvirt-libs
    Client side libraries for libvirt
    5.1.0-8.6.1 lock rpm
Basesystem Module 15.1 s390x
  • Packages
    libvirt
    Library providing a virtualization API
    5.1.0-8.6.1 lock src
    libvirt-libs
    Client side libraries for libvirt
    5.1.0-8.6.1 lock rpm
Basesystem Module 15.1 x86_64
  • Packages
    libvirt
    Library providing a virtualization API
    5.1.0-8.6.1 lock src
    libvirt-libs
    Client side libraries for libvirt
    5.1.0-8.6.1 lock rpm