Ubuntu
libvirt package

libvirt 5.0.0-1ubuntu2.3 source package in Ubuntu

Changelog

libvirt (5.0.0-1ubuntu2.3) disco-security; urgency=medium

  * SECURITY UPDATE: DoS via incorrect permissions check
    - debian/patches/CVE-2019-3886-1.patch: disallow virDomainGetHostname
      for read-only connections in src/libvirt-domain.c.
    - debian/patches/CVE-2019-3886-2.patch: enforce ACL write permission
      for getting guest time & hostname in src/remote/remote_protocol.x.
    - CVE-2019-3886
  * SECURITY UPDATE: privilege escalation via incorrect socket permissions
    - debian/patches/CVE-2019-10132-1.patch: reject clients unless their
      UID matches the current UID in src/admin/admin_server_dispatch.c.
    - debian/patches/CVE-2019-10132-2.patch: restrict sockets to mode 0600
      in src/locking/virtlockd-admin.socket.in,
      src/locking/virtlockd.socket.in.
    - debian/patches/CVE-2019-10132-3.patch: restrict sockets to mode 0600
      in src/logging/virtlogd-admin.socket.in,
      src/logging/virtlogd.socket.in.
    - CVE-2019-10132

 -- Marc Deslauriers <email address hidden>  Mon, 17 Jun 2019 07:18:24 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libvirt_5.0.0.orig.tar.xz 14.1 MiB afa81dbbc90b5209575930a820a222ff371e5ece5c1d8ec8f46b53c52b73b2e7
libvirt_5.0.0-1ubuntu2.3.debian.tar.xz 132.6 KiB 112bfedb5985c9aee1295a025c8f31faff202ce94b6ae96762b275f0cbc77bfb
libvirt_5.0.0-1ubuntu2.3.dsc 4.5 KiB d9a9f89a8feedb342f59885a08c7bc418bb17fc3f395a2131cc8fc8a60b4a8e1

Available diffs

View changes file

Binary packages built by this source

libnss-libvirt: No summary available for libnss-libvirt in ubuntu disco.

No description available for libnss-libvirt in ubuntu disco.

libnss-libvirt-dbgsym: No summary available for libnss-libvirt-dbgsym in ubuntu disco.

No description available for libnss-libvirt-dbgsym in ubuntu disco.

libvirt-clients: No summary available for libvirt-clients in ubuntu disco.

No description available for libvirt-clients in ubuntu disco.

libvirt-clients-dbgsym: No summary available for libvirt-clients-dbgsym in ubuntu disco.

No description available for libvirt-clients-dbgsym in ubuntu disco.

libvirt-daemon: No summary available for libvirt-daemon in ubuntu disco.

No description available for libvirt-daemon in ubuntu disco.

libvirt-daemon-dbgsym: No summary available for libvirt-daemon-dbgsym in ubuntu disco.

No description available for libvirt-daemon-dbgsym in ubuntu disco.

libvirt-daemon-driver-storage-gluster: No summary available for libvirt-daemon-driver-storage-gluster in ubuntu disco.

No description available for libvirt-daemon-driver-storage-gluster in ubuntu disco.

libvirt-daemon-driver-storage-gluster-dbgsym: No summary available for libvirt-daemon-driver-storage-gluster-dbgsym in ubuntu disco.

No description available for libvirt-daemon-driver-storage-gluster-dbgsym in ubuntu disco.

libvirt-daemon-driver-storage-rbd: No summary available for libvirt-daemon-driver-storage-rbd in ubuntu disco.

No description available for libvirt-daemon-driver-storage-rbd in ubuntu disco.

libvirt-daemon-driver-storage-rbd-dbgsym: No summary available for libvirt-daemon-driver-storage-rbd-dbgsym in ubuntu disco.

No description available for libvirt-daemon-driver-storage-rbd-dbgsym in ubuntu disco.

libvirt-daemon-driver-storage-zfs: No summary available for libvirt-daemon-driver-storage-zfs in ubuntu disco.

No description available for libvirt-daemon-driver-storage-zfs in ubuntu disco.

libvirt-daemon-driver-storage-zfs-dbgsym: No summary available for libvirt-daemon-driver-storage-zfs-dbgsym in ubuntu disco.

No description available for libvirt-daemon-driver-storage-zfs-dbgsym in ubuntu disco.

libvirt-daemon-system: No summary available for libvirt-daemon-system in ubuntu disco.

No description available for libvirt-daemon-system in ubuntu disco.

libvirt-daemon-system-dbgsym: No summary available for libvirt-daemon-system-dbgsym in ubuntu disco.

No description available for libvirt-daemon-system-dbgsym in ubuntu disco.

libvirt-dev: No summary available for libvirt-dev in ubuntu disco.

No description available for libvirt-dev in ubuntu disco.

libvirt-doc: No summary available for libvirt-doc in ubuntu disco.

No description available for libvirt-doc in ubuntu disco.

libvirt-sanlock: No summary available for libvirt-sanlock in ubuntu disco.

No description available for libvirt-sanlock in ubuntu disco.

libvirt-sanlock-dbgsym: No summary available for libvirt-sanlock-dbgsym in ubuntu disco.

No description available for libvirt-sanlock-dbgsym in ubuntu disco.

libvirt-wireshark: No summary available for libvirt-wireshark in ubuntu disco.

No description available for libvirt-wireshark in ubuntu disco.

libvirt-wireshark-dbgsym: No summary available for libvirt-wireshark-dbgsym in ubuntu disco.

No description available for libvirt-wireshark-dbgsym in ubuntu disco.

libvirt0: No summary available for libvirt0 in ubuntu disco.

No description available for libvirt0 in ubuntu disco.

libvirt0-dbgsym: No summary available for libvirt0-dbgsym in ubuntu disco.

No description available for libvirt0-dbgsym in ubuntu disco.