Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 486
Alerts This Week
Warning Icon 1 486

openSUSE: libvirt Moderate Security Update 2026:0068-1 CVE-2025-12748,13193

suse
Calendar Grey January 8, 2026
Dist Suse Esm H88
Security update for libvirt in openSUSE with fixes for two vulnerabilities rated moderate severity.
An update that solves two vulnerabilities can now be installed.

Summary

## This update for libvirt fixes the following issues: * CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703) * CVE-2025-12748: Fixed Check ACLs before parsing the whole domain XML (bsc#1253278) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-68=1 openSUSE-SLE-15.6-2026-68=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libvirt-daemon-log-debuginfo-10.0.0-150600.8.12.1 * libvirt-daemon-driver-storage-iscsi-direct-10.0.0-150600.8.12.1 * libvirt-client-10.0.0-150600.8.12.1

Topics%20covered

Topics Covered

security advisory moderate cve issue OpenSUSE libvirt threat fix

References

* bsc#1253278

* bsc#1253703

Cross-

* CVE-2025-12748

* CVE-2025-13193

CVSS scores:

* CVE-2025-12748 ( SUSE ): 6.9

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2025-12748 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2025-12748 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

* CVE-2025-13193 ( SUSE ): 5.7

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2025-13193 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

* CVE-2025-13193 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products:

* openSUSE Leap 15.6

An update that solves two vulnerabilities can now be installed.

##

* https://www.suse.com/security/cve/CVE-2025-12748.html

Announcement ID: SUSE-SU-2026:0068-1
Release Date: 2026-01-08T12:22:41Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate cve issue OpenSUSE libvirt threat fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.