FlawAtlas
Search the atlas
SUSE-SU-2016:0923-1 Not scored

Security update for libvirt

This update to libvirt 1.2.18.2 fixes the following minor security issue: - CVE-2015-5313: Directory traversal allowed privilege escalation (bsc#953110) The following bugs were fixed: - bsc#952849: Don't add apparmor deny rw rule for 9P readonly mounts. - bsc#960305: libxl: support parsing and formatting vif bandwidth - bsc#954872: libxl: Add support for block-{dmmd,drbd,npiv} scripts - bsc#964465: Remove 'Wants=xencommons.service' from libvirtd service file

Exploit probability Not scored
Published March 31, 2016
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Desktop 12 SP1 libvirt
SUSE:Linux Enterprise Server 12 SP1 libvirt
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 libvirt
SUSE:Linux Enterprise Software Development Kit 12 SP1 libvirt
SUSE:Linux Enterprise Workstation Extension 12 SP1 libvirt

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2016:0923-1

This update to libvirt 1.2.18.2 fixes the following minor security issue: - CVE-2015-5313: Directory traversal allowed privilege escalation (bsc#953110) The following bugs were fixed: - bsc#952849: Don't add apparmor deny rw rule for 9P readonly mounts. - bsc#960305: libxl: support parsing and formatting vif bandwidth - bsc#954872: libxl: Add support for block-{dmmd,drbd,npiv} scripts - bsc#964465: Remove 'Wants=xencommons.service' from libvirtd service file

View original source

05 / REFERENCES

Further evidence