Important: Red Hat Security Advisory: libvirt security update

An update for libvirt is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

RHEL 9 : libvirt (RHSA-2026:65516)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:65516 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

RHEL 9 : libvirt (RHSA-2026:65515)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:65515 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

RHEL 10 : libvirt (RHSA-2026:64773)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64773 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

Security update for libvirt (important)

openSUSE security update: security update for libvirt ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21738-1 Rating: important References: bsc1274576 bsc1274946 bsc1275264 bsc1275265 bsc1275863 Cross-References: CVE-2026-18917 CVE-2026-61477...

Security update for libvirt

This update for libvirt fixes the following issues: CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. CVE-2026-63622...

SUSE-SU-2026:4010-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. -...

Security update for libvirt

This update for libvirt fixes the following issues: CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. CVE-2026-63622...

SUSE-SU-2026:4009-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. -...

Security update for libvirt

This update for libvirt fixes the following issues: CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. CVE-2026-63622...

SUSE-SU-2026:4004-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. -...

OESA-2026-3635 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...

OESA-2026-3634 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...

OESA-2026-3633 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...

OESA-2026-3632 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A flaw was found in libvirt. An unprivileged local user could exploit an integer...

Security update for libvirt

This update for libvirt fixes the following issues: CVE-2026-18917: remote: Fix integer overflow in RPC handler for virNodeGetFreePages bsc1275863 CVE-2026-63622: util: virFileChownFiles: do not follow symlinks bsc1275264 CVE-2026-63623: storage: create images with a private umask during qemu-img...

SUSE-SU-2026:3939-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2026-18917: remote: Fix integer overflow in RPC handler for virNodeGetFreePages bsc1275863 - CVE-2026-63622: util: virFileChownFiles: do not follow symlinks bsc1275264 - CVE-2026-63623: storage: create images with a private umask during...

OPENSUSE-SU-2026:21738-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2026-18917: integer overflow in NodeGetFreePages RPC handler leads to heap buffer overflow and allows for possible local privilege escalation bsc1275863. - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows for...

SUSE-SU-2026:23460-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2026-18917: integer overflow in NodeGetFreePages RPC handler leads to heap buffer overflow and allows for possible local privilege escalation bsc1275863. - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows for...

SUSE-SU-2026:23445-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. -...