gpp_maybe Security update for libvirt

slessp4-libvirt-14097

This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd (bsc#1138301). - CVE-2019-3886: Fixed a information exposure which allowed to retrieve the guest hostname under readonly mode (bsc#1131595).

• Release Date
  Jun 21 2019
• References
  Bugzilla: 1138301, 1131595
  CVEs: CVE-2019-10161, CVE-2019-3886
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 x86_64

• Packages
  libvirt
  A C toolkit to interact with the virtualization capabilities of Linux

  1.2.5-23.20.1

  lock rpm

  lock src

  libvirt-client
  Client side library and utilities of the libvirt library

  1.2.5-23.20.1

  lock rpm

  libvirt-client-32bit
  Client side library and utilities of the libvirt library

  1.2.5-23.20.1

  lock rpm

  libvirt-doc
  A C toolkit to interact with the virtualization capabilities of Linux

  1.2.5-23.20.1

  lock rpm

  libvirt-lock-sanlock
  Sanlock lock manager plugin for QEMU driver

  1.2.5-23.20.1

  lock rpm

SUSE Linux Enterprise Server 11.4 ppc64

• Packages
  libvirt
  A C toolkit to interact with the virtualization capabilities of Linux

  1.2.5-23.20.1

  lock rpm

  lock src

  libvirt-client
  Client side library and utilities of the libvirt library

  1.2.5-23.20.1

  lock rpm

  libvirt-client-32bit
  Client side library and utilities of the libvirt library

  1.2.5-23.20.1

  lock rpm

  libvirt-doc
  A C toolkit to interact with the virtualization capabilities of Linux

  1.2.5-23.20.1

  lock rpm

  libvirt-lock-sanlock
  Sanlock lock manager plugin for QEMU driver

  1.2.5-23.20.1

  lock rpm

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  libvirt
  A C toolkit to interact with the virtualization capabilities of Linux

  1.2.5-23.20.1

  lock rpm

  lock src

  libvirt-client
  Client side library and utilities of the libvirt library

  1.2.5-23.20.1

  lock rpm

  libvirt-client-32bit
  Client side library and utilities of the libvirt library

  1.2.5-23.20.1

  lock rpm

  libvirt-doc
  A C toolkit to interact with the virtualization capabilities of Linux

  1.2.5-23.20.1

  lock rpm

  libvirt-lock-sanlock
  Sanlock lock manager plugin for QEMU driver

  1.2.5-23.20.1

  lock rpm

SUSE Linux Enterprise Server 11.4 i686

• Packages
  libvirt
  A C toolkit to interact with the virtualization capabilities of Linux

  1.2.5-23.20.1

  lock rpm

  lock src

  libvirt-client
  Client side library and utilities of the libvirt library

  1.2.5-23.20.1

  lock rpm

  libvirt-doc
  A C toolkit to interact with the virtualization capabilities of Linux

  1.2.5-23.20.1

  lock rpm

  libvirt-lock-sanlock
  Sanlock lock manager plugin for QEMU driver

  1.2.5-23.20.1

  lock rpm