Security update for libvirt
This update for libvirt fixes the following issues: Security issue: - CVE-2015-5313: directory directory traversal privilege escalation vulnerability. (bsc#953110) Bugs fixed: - bsc#960305: xenxs: support parsing and formatting vif bandwidth - bsc#961173: xen: use correct domctl version in domaininfolist union - bsc#959094: xen: Disable building xen-inotify subdriver. It is unmaintained and contains bugs that can cause client connection failures. - bsc#948686: qemu: Use PAUSED state for domains that are starting up - bsc#948516: Fix profile_status to distringuish between errors and unconfined domains.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for libvirt fixes the following issues: Security issue: - CVE-2015-5313: directory directory traversal privilege escalation vulnerability. (bsc#953110) Bugs fixed: - bsc#960305: xenxs: support parsing and formatting vif bandwidth - bsc#961173: xen: use correct domctl version in domaininfolist union - bsc#959094: xen: Disable building xen-inotify subdriver. It is unmaintained and contains bugs that can cause client connection failures. - bsc#948686: qemu: Use PAUSED state for domains that are starting up - bsc#948516: Fix profile_status to distringuish between errors and unconfined domains.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/948516
- https://bugzilla.suse.com/948686
- https://bugzilla.suse.com/953110
- https://bugzilla.suse.com/959094
- https://bugzilla.suse.com/960305
- https://bugzilla.suse.com/961173
- https://www.suse.com/security/cve/CVE-2015-5313
- https://www.suse.com/support/update/announcement/2016/suse-su-20160931-1/