This update for libvirt fixes the following issues :

Security issues fixed: &#9; 

  - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API     which could accept a path parameter pointing anywhere on     the system and potentially leading to execution of a     malicious file with root privileges by libvirtd     (bsc#1138301). 

  - CVE-2019-10166: Fixed an issue with     virDomainManagedSaveDefineXML which could have been used     to alter the domain's config used for managedsave or     execute arbitrary emulator binaries (bsc#1138302).

  - CVE-2019-10167: Fixed an issue with     virConnectGetDomainCapabilities API which could have     been used to execute arbitrary emulators (bsc#1138303).

  - CVE-2019-10168: Fixed an issue with     virConnect*HypervisorCPU API which could have been used     to execute arbitrary emulators (bsc#1138305).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Detections

Analytics

openSUSE Security Update : libvirt (openSUSE-2019-1753)

high Nessus Plugin ID 126894

Version 1.4