Publishing details

• Published on 2019-09-07

Changelog

libvirt (3.0.0-4+deb9u4) stretch-security; urgency=medium

  * Fix CVEs related to privilege escalations on R/O connections.
    - CVE-2019-10161:
      CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc-.patch
    - CVE-2019-10167:
      api-disallow-virConnectGetDomainCapabilities-on-read-only.patch
  * cpu_map: Define md-clear CPUID bit.
    CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  * Add spec-ctrl and ibpb CPU features and ibrs CPU models.
    CVE-2017-5753, CVE-2017-5715
  * Add ssbd CPU feature.
    CVE-2018-3639

 -- Guido Günther <email address hidden>  Wed, 12 Jun 2019 10:13:38 +0200

Builds

Package files

• libvirt_3.0.0-4+deb9u4.debian.tar.xz (74.5 KiB)
• libvirt_3.0.0-4+deb9u4.dsc (4.0 KiB)
• libvirt_3.0.0.orig.tar.xz (13.2 MiB)