SUSE-SU-2017:2697-1
Security update for libvirt
No scoreFix available
This update for libvirt fixes several issues.
This security issue was fixed:
- bsc#1053600: Escape ssh commed line to prevent interpreting malicious hostname as arguments, allowing for command execution
These non-security issues were fixed:
- bsc#1049505, bsc#1051017: Security manager: Don't autogenerate seclabels of type 'none' when AppArmor is inactive
- bsc#1052151: Moved /usr/share/libvirt/libvirtLogo.png symlink from client to doc subpackage, where its target resides
- bsc#1048783: Ignore newlines in libvirt-guests.sh guest list
- bsc#1031056: Add default controllers for USB devices
- bsc#1012143: Define path to parted using autoconf cache variable. parted is used for management of disk-based storage pools
- bsc#1036785: Prevent output of null target in domxml-to-native
What each source reports
OSVNo score
Security update for libvirt
This update for libvirt fixes several issues.
This security issue was fixed:
- bsc#1053600: Escape ssh commed line to prevent interpreting malicious hostname as arguments, allowing for command execution
These non-security issues were fixed:
- bsc#1049505, bsc#1051017: Security manager: Don't autogenerate seclabels of type 'none' when AppArmor is inactive
- bsc#1052151: Moved /usr/share/libvirt/libvirtLogo.png symlink from client to doc subpackage, where its target resides
- bsc#1048783: Ignore newlines in libvirt-guests.sh guest list
- bsc#1031056: Add default controllers for USB devices
- bsc#1012143: Define path to parted using autoconf cache variable. parted is used for management of disk-based storage pools
- bsc#1036785: Prevent output of null target in domxml-to-native
- Record
SUSE-SU-2017:2697-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libvirtSUSE:Linux Enterprise Desktop 12 SP2 | before 2.0.0-27.20.1 | 2.0.0-27.20.1 |
libvirtSUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | before 2.0.0-27.20.1 | 2.0.0-27.20.1 |
libvirtSUSE:Linux Enterprise Software Development Kit 12 SP2 | before 2.0.0-27.20.1 | 2.0.0-27.20.1 |
libvirtSUSE:Linux Enterprise Server 12 SP2 | before 2.0.0-27.20.1 | 2.0.0-27.20.1 |
libvirtSUSE:Linux Enterprise Server for SAP Applications 12 SP2 | before 2.0.0-27.20.1 | 2.0.0-27.20.1 |
libvirtSUSE:Linux Enterprise Workstation Extension 12 SP2 | before 2.0.0-27.20.1 | 2.0.0-27.20.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
SUSE-SU-2017:2697-1 is a vulnerability with no CVSS score yet in libvirt, published October 10, 2017. No source lists public exploit code. Fixed in libvirt 2.0.0-27.20.1.