Every CVESearch/Get API key

SUSE-SU-2017:2660-1

Security update for libvirt

No scoreFix available

This update for libvirt fixes several issues.

This security issue was fixed:

  • bsc#1053600: Escape ssh commed line to prevent interpreting malicious hostname as arguments, allowing for command execution

These non-security issues were fixed:

  • bsc#1025340: Use xend for nodeGetFreeMemory API
  • bsc#1026236: Add support for tsc timers on xen

What each source reports

OSVNo score

Security update for libvirt

This update for libvirt fixes several issues.

This security issue was fixed:

  • bsc#1053600: Escape ssh commed line to prevent interpreting malicious hostname as arguments, allowing for command execution

These non-security issues were fixed:

  • bsc#1025340: Use xend for nodeGetFreeMemory API
  • bsc#1026236: Add support for tsc timers on xen
Record
SUSE-SU-2017:2660-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
libvirt
SUSE:Linux Enterprise Software Development Kit 11 SP4
before 1.2.5-23.3.1
1.2.5-23.3.1
libvirt
SUSE:Linux Enterprise Server 11 SP4
before 1.2.5-23.3.1
1.2.5-23.3.1
libvirt
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
before 1.2.5-23.3.1
1.2.5-23.3.1

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

SUSE-SU-2017:2660-1 is a vulnerability with no CVSS score yet in libvirt, published October 9, 2017. No source lists public exploit code. Fixed in libvirt 1.2.5-23.3.1.

References

MoveEnter Open