Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2026-18917: integer overflow in `NodeGetFreePages` RPC handler leads to heap buffer overflow and allows for possible local privilege escalation (bsc#1275863). - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows for `dnsmasq` configuration directive injection and can lead to arbitrary code execution as root (bsc#1274576). - CVE-2026-63622: symlink-following in `virFileChownFiles()` allows `swtpm` user to trick the root-level `libvirt` daemon into changing the ownership of an arbitrary file and can lead to privilege escalation (bsc#1275264). - CVE-2026-63623: newly created volume images are temporarily world-readable during clone/convert operations, which can lead to sensitive information disclosure (bsc#1275265). - CVE-2026-77159: root `chown()` on `swtpm` logfile follows symlinks and allows for root-owned file ownership changes, which can lead to privilege escalation (bsc#1274946).
SUSE-SU-2026:23603-1
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:SUSE-SU-2026:23603-1
libvirt
Source reference: /affected/0/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 11.4.0-160000.5.1
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
libvirt
Source reference: /affected/1/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 11.4.0-160000.5.1
Source reference:
/affected/1/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "11.4.0-160000.5.1"
}
]
}
],
"package": {
"name": "libvirt",
"purl": "pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Server%2016.0",
"ecosystem": "SUSE:Linux Enterprise Server 16.0"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23603-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"libvirt-doc": "11.4.0-160000.5.1",
"libvirt-nss": "11.4.0-160000.5.1",
"libvirt-libs": "11.4.0-160000.5.1",
"libvirt-devel": "11.4.0-160000.5.1",
"libvirt-client": "11.4.0-160000.5.1",
"libvirt-daemon": "11.4.0-160000.5.1",
"libvirt-ssh-proxy": "11.4.0-160000.5.1",
"libvirt-daemon-log": "11.4.0-160000.5.1",
"libvirt-client-qemu": "11.4.0-160000.5.1",
"libvirt-daemon-lock": "11.4.0-160000.5.1",
"libvirt-daemon-qemu": "11.4.0-160000.5.1",
"libvirt-daemon-hooks": "11.4.0-160000.5.1",
"libvirt-daemon-proxy": "11.4.0-160000.5.1",
"libvirt-daemon-common": "11.4.0-160000.5.1",
"libvirt-daemon-driver-qemu": "11.4.0-160000.5.1",
"libvirt-daemon-plugin-lockd": "11.4.0-160000.5.1",
"libvirt-daemon-driver-secret": "11.4.0-160000.5.1",
"libvirt-daemon-config-network": "11.4.0-160000.5.1",
"libvirt-daemon-driver-network": "11.4.0-160000.5.1",
"libvirt-daemon-driver-nodedev": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage": "11.4.0-160000.5.1",
"libvirt-daemon-config-nwfilter": "11.4.0-160000.5.1",
"libvirt-daemon-driver-nwfilter": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-core": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-disk": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-scsi": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-iscsi": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-mpath": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-logical": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-iscsi-direct": "11.4.0-160000.5.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "11.4.0-160000.5.1"
}
]
}
],
"package": {
"name": "libvirt",
"purl": "pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0",
"ecosystem": "SUSE:Linux Enterprise Server for SAP applications 16.0"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23603-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"libvirt-doc": "11.4.0-160000.5.1",
"libvirt-nss": "11.4.0-160000.5.1",
"libvirt-libs": "11.4.0-160000.5.1",
"libvirt-devel": "11.4.0-160000.5.1",
"libvirt-client": "11.4.0-160000.5.1",
"libvirt-daemon": "11.4.0-160000.5.1",
"libvirt-ssh-proxy": "11.4.0-160000.5.1",
"libvirt-daemon-log": "11.4.0-160000.5.1",
"libvirt-client-qemu": "11.4.0-160000.5.1",
"libvirt-daemon-lock": "11.4.0-160000.5.1",
"libvirt-daemon-qemu": "11.4.0-160000.5.1",
"libvirt-daemon-hooks": "11.4.0-160000.5.1",
"libvirt-daemon-proxy": "11.4.0-160000.5.1",
"libvirt-daemon-common": "11.4.0-160000.5.1",
"libvirt-daemon-driver-qemu": "11.4.0-160000.5.1",
"libvirt-daemon-plugin-lockd": "11.4.0-160000.5.1",
"libvirt-daemon-driver-secret": "11.4.0-160000.5.1",
"libvirt-daemon-config-network": "11.4.0-160000.5.1",
"libvirt-daemon-driver-network": "11.4.0-160000.5.1",
"libvirt-daemon-driver-nodedev": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage": "11.4.0-160000.5.1",
"libvirt-daemon-config-nwfilter": "11.4.0-160000.5.1",
"libvirt-daemon-driver-nwfilter": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-core": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-disk": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-scsi": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-iscsi": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-mpath": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-logical": "11.4.0-160000.5.1",
"libvirt-daemon-driver-storage-iscsi-direct": "11.4.0-160000.5.1"
}
]
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #30869 · Revision 1
- Added to Heist Feed
- Publisher date