SUSE-SU-2017:2598-1
Security update for libvirt
No scoreFix available
This update for libvirt fixes several issues.
This security issue was fixed:
- bsc#1053600: Escape ssh commed line to prevent interpreting malicious hostname as arguments, allowing for command execution
These non-security issues were fixed:
- bsc#1049505, bsc#1051017: Security manager: Don't autogenerate seclabels of type 'none' when AppArmor is inactive
- bsc#1045693: Support chardevs with ARM machines
What each source reports
OSVNo score
Security update for libvirt
This update for libvirt fixes several issues.
This security issue was fixed:
- bsc#1053600: Escape ssh commed line to prevent interpreting malicious hostname as arguments, allowing for command execution
These non-security issues were fixed:
- bsc#1049505, bsc#1051017: Security manager: Don't autogenerate seclabels of type 'none' when AppArmor is inactive
- bsc#1045693: Support chardevs with ARM machines
- Record
SUSE-SU-2017:2598-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libvirtSUSE:Linux Enterprise Desktop 12 SP3 | before 3.3.0-5.3.1 | 3.3.0-5.3.1 |
libvirtSUSE:Linux Enterprise Software Development Kit 12 SP3 | before 3.3.0-5.3.1 | 3.3.0-5.3.1 |
libvirtSUSE:Linux Enterprise Server 12 SP3 | before 3.3.0-5.3.1 | 3.3.0-5.3.1 |
libvirtSUSE:Linux Enterprise Server for SAP Applications 12 SP3 | before 3.3.0-5.3.1 | 3.3.0-5.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
SUSE-SU-2017:2598-1 is a vulnerability with no CVSS score yet in libvirt, published September 29, 2017. No source lists public exploit code. Fixed in libvirt 3.3.0-5.3.1.