libvirt was updated to fix some bugs and security issues:
Security issues fixed:
- Fix crash on error paths of message dispatching,
CVE-2013-0170 bnc#800976
- security: Fix libvirtd crash possibility CVE-2012-4423
bnc#780432
Also bugs were fixed:
- qemu: Fix probing for guest capabilities bnc#772586
- xen-xm: Generate UUID if not specified bnc#773626
- xenParseXM: don't dereference NULL pointer when script is
empty bnc#773621
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE 12.1:
zypper in -t patch openSUSE-2013-105
To bring your system up-to-date, use "zypper patch".
- openSUSE 12.1 (i586 x86_64):
libvirt-0.9.6-3.13.1
libvirt-client-0.9.6-3.13.1
libvirt-client-debuginfo-0.9.6-3.13.1
libvirt-debuginfo-0.9.6-3.13.1
libvirt-debugsource-0.9.6-3.13.1
libvirt-devel-0.9.6-3.13.1
libvirt-doc-0.9.6-3.13.1
libvirt-python-0.9.6-3.13.1
libvirt-python-debuginfo-0.9.6-3.13.1
- openSUSE 12.1 (x86_64):
libvirt-client-32bit-0.9.6-3.13.1
libvirt-client-debuginfo-32bit-0.9.6-3.13.1
libvirt-devel-32bit-0.9.6-3.13.1
- openSUSE 12.1 (ia64):
libvirt-client-debuginfo-x86-0.9.6-3.13.1
libvirt-client-x86-0.9.6-3.13.1
https://www.suse.com/security/cve/CVE-2012-4423.html
https://www.suse.com/security/cve/CVE-2013-0170.html
Get the latest Linux and open source security news straight to your inbox.