Commit - rpms/libvirt - a2479f539e521dfe57656ede0d10ae548283664e

    libvirt-5.4.0-2.fc31
    
    CVE-2019-10161: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API (bz #1722463, bz #1720115)
    CVE-2019-10166: virDomainManagedSaveDefineXML API exposed to readonly clients (bz #1722462, bz #1720114)
    CVE-2019-10167: arbitrary command execution via virConnectGetDomainCapabilities API (bz #1722464, bz #1720117)
    CVE-2019-10168: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs (bz #1722466, bz #1720118)

0001-api-disallow-virDomainSaveImageGetXMLDesc-on-read-on.patch

file added

+81

0002-api-disallow-virDomainManagedSaveDefineXML-on-read-o.patch

file added

+33

0003-api-disallow-virConnectGetDomainCapabilities-on-read.patch

file added

+31

0004-api-disallow-virConnect-HypervisorCPU-on-read-only-c.patch

file added

+39

libvirt.spec

file modified

+26 -1

render / rpms / libvirt

Source Code

a2479f libvirt-5.4.0-2.fc31

Authored and Committed by crobinso 5 years ago

`a2479f` libvirt-5.4.0-2.fc31