Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2026:0068-1

UNKNOWN

Security update for libvirt

Published Jan 8, 2026

Modified 6 days ago

Fix available

Details

This update for libvirt fixes the following issues:

CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703)
CVE-2025-12748: Fixed Check ACLs before parsing the whole domain XML (bsc#1253278)

Affected Packages

openSUSE:Leap 15.6libvirt

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-client

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-client-qemu

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-common

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-config-network

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-config-nwfilter

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-interface

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-libxl

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-lxc

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-network

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-nodedev

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-nwfilter

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-qemu

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-secret

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-storage

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-storage-core

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-storage-disk

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-storage-gluster

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-storage-iscsi

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-storage-iscsi-direct

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-storage-logical

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-storage-mpath

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-storage-rbd

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-driver-storage-scsi

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-hooks

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-lock

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-log

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-lxc

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-plugin-lockd

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-plugin-sanlock

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-proxy

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-qemu

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-daemon-xen

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-devel

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-devel-32bit

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-doc

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-libs

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6libvirt-nss

Fixed in:

10.0.0-150600.8.12.1

openSUSE:Leap 15.6wireshark-plugin-libvirt

Fixed in:

10.0.0-150600.8.12.1

References

REPORThttps://bugzilla.suse.com/1253278 REPORThttps://bugzilla.suse.com/1253703 WEBhttps://www.suse.com/security/cve/CVE-2025-12748 WEBhttps://www.suse.com/security/cve/CVE-2025-13193 ADVISORYhttps://www.suse.com/support/update/announcement/2026/suse-su-20260068-1/

Upstream

CVE-2025-12748 CVE-2025-13193

Related

CVE-2025-12748 CVE-2025-13193

Ecosystems

openSUSE Leap 15.6

Timeline

PublishedJan 8, 2026

ModifiedJan 8, 2026

SUSE-SU-2026:0068-1 | Mondoo Vulnerability Intelligence