gpp_maybe Security update for libvirt

SUSE-SLE-SDK-12-SP4-2019-1599

This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd (bsc#1138301). - CVE-2019-10166: Fixed an issue with virDomainManagedSaveDefineXML which could have been used to alter the domain's config used for managedsave or execute arbitrary emulator binaries (bsc#1138302). - CVE-2019-10167: Fixed an issue with virConnectGetDomainCapabilities API which could have been used to execute arbitrary emulators (bsc#1138303).

• Release Date
  Jun 21 2019
• References
  Bugzilla: 1138301, 1138303, 1138302
  CVEs: CVE-2019-10161, CVE-2019-10167, CVE-2019-10166
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 ppc64le

• Packages
  libvirt
  Library providing a simple virtualization API

  4.0.0-8.15.2

  lock src

  libvirt-devel
  Libraries, includes, etc. to compile with the libvirt library

  4.0.0-8.15.2

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 s390x

• Packages
  libvirt
  Library providing a simple virtualization API

  4.0.0-8.15.2

  lock src

  libvirt-devel
  Libraries, includes, etc. to compile with the libvirt library

  4.0.0-8.15.2

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 aarch64

• Packages
  libvirt
  Library providing a simple virtualization API

  4.0.0-8.15.2

  lock src

  libvirt-devel
  Libraries, includes, etc. to compile with the libvirt library

  4.0.0-8.15.2

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 x86_64

• Packages
  libvirt
  Library providing a simple virtualization API

  4.0.0-8.15.2

  lock src

  libvirt-devel
  Libraries, includes, etc. to compile with the libvirt library

  4.0.0-8.15.2

  lock rpm