Format: 1.8 Date: Mon, 17 Jun 2019 07:18:24 -0400 Source: libvirt Binary: libnss-libvirt libvirt-clients libvirt-daemon libvirt-daemon-driver-storage-gluster libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-zfs libvirt-daemon-system libvirt-dev libvirt-sanlock libvirt-wireshark libvirt0 Architecture: arm64 arm64_translations Version: 5.0.0-1ubuntu2.3 Distribution: disco Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libnss-libvirt - nss plugin providing IP address resolution for virtual machines libvirt-clients - Programs for the libvirt library libvirt-daemon - Virtualization daemon libvirt-daemon-driver-storage-gluster - Virtualization daemon glusterfs storage driver libvirt-daemon-driver-storage-rbd - Virtualization daemon RBD storage driver libvirt-daemon-driver-storage-zfs - Virtualization daemon ZFS storage driver libvirt-daemon-system - Libvirt daemon configuration files libvirt-dev - development files for the libvirt library libvirt-sanlock - Sanlock plugin for virtlockd libvirt-wireshark - Wireshark dissector for the libvirt protocol libvirt0 - library for interfacing with different virtualization systems Changes: libvirt (5.0.0-1ubuntu2.3) disco-security; urgency=medium . * SECURITY UPDATE: DoS via incorrect permissions check - debian/patches/CVE-2019-3886-1.patch: disallow virDomainGetHostname for read-only connections in src/libvirt-domain.c. - debian/patches/CVE-2019-3886-2.patch: enforce ACL write permission for getting guest time & hostname in src/remote/remote_protocol.x. - CVE-2019-3886 * SECURITY UPDATE: privilege escalation via incorrect socket permissions - debian/patches/CVE-2019-10132-1.patch: reject clients unless their UID matches the current UID in src/admin/admin_server_dispatch.c. - debian/patches/CVE-2019-10132-2.patch: restrict sockets to mode 0600 in src/locking/virtlockd-admin.socket.in, src/locking/virtlockd.socket.in. - debian/patches/CVE-2019-10132-3.patch: restrict sockets to mode 0600 in src/logging/virtlogd-admin.socket.in, src/logging/virtlogd.socket.in. - CVE-2019-10132 Checksums-Sha1: b37a9dd9e67353b6f5c640f30e7d43f5205bf01e 526188 libnss-libvirt-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb bd009da809964e320ee017a07c0a0bc455d6fda0 140716 libnss-libvirt_5.0.0-1ubuntu2.3_arm64.deb ac4e9ab27dbe1c49ef3b22f6993424fe365be32f 2192292 libvirt-clients-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 6ac2ec3fd6c095d7c01a155e018b66cff5b2d022 605048 libvirt-clients_5.0.0-1ubuntu2.3_arm64.deb fd64800c63d709326f6d7e236b1f5cb242401245 11496404 libvirt-daemon-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb e46376ad05970fdc0f8bf79378d19ede1b4902a7 409720 libvirt-daemon-driver-storage-gluster-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb f9e387c1855db7c43927215d3618eb46e980d75e 66488 libvirt-daemon-driver-storage-gluster_5.0.0-1ubuntu2.3_arm64.deb 86b23efce039e4efc0af52a5a88614fe1ed8351d 242948 libvirt-daemon-driver-storage-rbd-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb b3a195397a191282b3b6f3e1c9b8354c05cb3482 62724 libvirt-daemon-driver-storage-rbd_5.0.0-1ubuntu2.3_arm64.deb a06899eb5b7ebfa95ab3beaca454c10644d8f3d8 211316 libvirt-daemon-driver-storage-zfs-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 1bad0aad06c9bb353fce3fc479c4f07527f87a38 57560 libvirt-daemon-driver-storage-zfs_5.0.0-1ubuntu2.3_arm64.deb c5840c764a40bd4619faf6280fa9021411b4f4cc 101984 libvirt-daemon-system-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb ca172bacf537f772cdfc2ebff626c6542ce78578 69468 libvirt-daemon-system_5.0.0-1ubuntu2.3_arm64.deb 15e4b22224dfcdb3af1a164001aa2a01e1b81083 1457804 libvirt-daemon_5.0.0-1ubuntu2.3_arm64.deb 6012fdab783d484d4ab329daad807d136f5c4e6e 146788 libvirt-dev_5.0.0-1ubuntu2.3_arm64.deb 18c8880dd50e331ee55417c3d871c45eb6931949 219764 libvirt-sanlock-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb e0deb7c2518c5a97c7c56603ea2c5fc08ba32309 62096 libvirt-sanlock_5.0.0-1ubuntu2.3_arm64.deb eeff3362a25396ce672d9456f58d266d165938b9 330912 libvirt-wireshark-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb cefeaede06cad82c6a1b18363e3e81ec3545b5c2 88332 libvirt-wireshark_5.0.0-1ubuntu2.3_arm64.deb 213c2e208c3289d5527d0fe4d63b21a059f450f8 6089344 libvirt0-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb e8112a99f1bb7663939a91f1e78ef311a4bae9bd 1294156 libvirt0_5.0.0-1ubuntu2.3_arm64.deb ee372ed74fe967012ce09898d474d0b7a118d665 20044 libvirt_5.0.0-1ubuntu2.3_arm64.buildinfo 2b0e3f6c91f6e64146f55a55b012770d1de09899 19327035 libvirt_5.0.0-1ubuntu2.3_arm64_translations.tar.gz Checksums-Sha256: 60c253113c6388ad3af1f0b2f34e35a6d4150912c354533e8feea5ed6b5fd983 526188 libnss-libvirt-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 35812635e7e90f5f5681f2710c19d49b7cd0dfc01533ab06841df7141f06b1f5 140716 libnss-libvirt_5.0.0-1ubuntu2.3_arm64.deb b515035d24a26e3f694adc8b5114af1b69998ad6b3406e7d098278432e0cc90c 2192292 libvirt-clients-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb e460dec61390ab8b95137db40899fb14b39ef5c139ae222f93c4092b4e47c2ca 605048 libvirt-clients_5.0.0-1ubuntu2.3_arm64.deb 19f465d9698d2d99c85e2cecf6a687ac6ea3773234123619e6ffffcde97323a2 11496404 libvirt-daemon-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 234e7510cabd427e8e33903c0f788d54b1329232205c5f67b7b52593adde858a 409720 libvirt-daemon-driver-storage-gluster-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb b04367e6c863d66d25fa91ccf5d07b8987da44c7035c334f8ff13b20977a247a 66488 libvirt-daemon-driver-storage-gluster_5.0.0-1ubuntu2.3_arm64.deb 91a9af57436807ccd6be406886e52151d054dba5dc1b3e440bf3676274a04d80 242948 libvirt-daemon-driver-storage-rbd-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 931e8abe01c5e22de8636817f5deabf89d0459e6e2cea3b43753cf091fdae096 62724 libvirt-daemon-driver-storage-rbd_5.0.0-1ubuntu2.3_arm64.deb 5141c8785bb22bcd478bcb36a92efac7d582ec3d42757cf938fdfd6f40870e81 211316 libvirt-daemon-driver-storage-zfs-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 5b6eb5f9b196e013bd943139b3329b70e55081738a45d135cea7b6bfdad17119 57560 libvirt-daemon-driver-storage-zfs_5.0.0-1ubuntu2.3_arm64.deb 4f66546f7162c0754002fb95aa633b35d369d799b56611060849722c08579875 101984 libvirt-daemon-system-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 121cdbcadba2430b750a4d026cc6319b5f4c0cfc5f9e1f9e3ef90a368ed577ce 69468 libvirt-daemon-system_5.0.0-1ubuntu2.3_arm64.deb 51390f261e78c6f7ac7c71756dff2c477a090143594b29750f0358e92f8db005 1457804 libvirt-daemon_5.0.0-1ubuntu2.3_arm64.deb 378eeb468ca980dbaac27c47837f0601a84356eb870cd15a9542ccc1081d3387 146788 libvirt-dev_5.0.0-1ubuntu2.3_arm64.deb 8a9ab9939cc815d22f9775a771f744839cb46a5809366b2d64bc1890bfda5849 219764 libvirt-sanlock-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 6913e51bc079213df08e77554306a8d0b34e3d0ac52e9fc87989c2c8d14d7c5c 62096 libvirt-sanlock_5.0.0-1ubuntu2.3_arm64.deb 14f49c2c2b3bf707a879bbd6379425df483cd9885033a8254e0d95fd7b3da2bb 330912 libvirt-wireshark-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 6f8cdccb5699e9b8634b468faab3df03759e1f31ba90c24e7e502ac2d671f11e 88332 libvirt-wireshark_5.0.0-1ubuntu2.3_arm64.deb d4f6dd6e21e5ac740a8a181d66da4259897e955a949860373a1ad49548275eef 6089344 libvirt0-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb fb3a1de0dca446c7bc54203734896458731a1b7cee012fcef1d7d5eed4db2369 1294156 libvirt0_5.0.0-1ubuntu2.3_arm64.deb a7e90911aba2de0061c5bb08cb6b372cc0a7769ed984ce07217957530b5f3b46 20044 libvirt_5.0.0-1ubuntu2.3_arm64.buildinfo f6a88c956004f9dc5255cc4d4423fb85c22be6f67fbc1ede3acdb3ec9090f84e 19327035 libvirt_5.0.0-1ubuntu2.3_arm64_translations.tar.gz Files: 471d94fc2497c9e8388e049e8166c8d6 526188 debug optional libnss-libvirt-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 56656decd243aadd81b4f40258c3a59e 140716 libs optional libnss-libvirt_5.0.0-1ubuntu2.3_arm64.deb 91b6846ba680d20989af3d851359c57c 2192292 debug optional libvirt-clients-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb c59c3dde309577e28654baa5f22f8a36 605048 admin optional libvirt-clients_5.0.0-1ubuntu2.3_arm64.deb e7bbc9f4dea60b95415d61a0f05fe90f 11496404 debug optional libvirt-daemon-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 6c2b1ac9ddc5055732629c44752a58d6 409720 debug optional libvirt-daemon-driver-storage-gluster-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb e892857c4788c099d0855d3a5656d099 66488 admin optional libvirt-daemon-driver-storage-gluster_5.0.0-1ubuntu2.3_arm64.deb 334dae696f91f986c9126ac0f5ef5116 242948 debug optional libvirt-daemon-driver-storage-rbd-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 00e028b54bd1a48c49e237030a4be54a 62724 admin optional libvirt-daemon-driver-storage-rbd_5.0.0-1ubuntu2.3_arm64.deb 1f02a7159afeabef91f1cdc04ae3ef76 211316 debug optional libvirt-daemon-driver-storage-zfs-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 9c7300601fc1851694110dff6d1acaf9 57560 admin optional libvirt-daemon-driver-storage-zfs_5.0.0-1ubuntu2.3_arm64.deb 4a46b9430c27243441b3f5dbe93f1ff6 101984 debug optional libvirt-daemon-system-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb a7cb7a9e6d009cf7558bfdca09c4f7b2 69468 admin optional libvirt-daemon-system_5.0.0-1ubuntu2.3_arm64.deb 9cef5eac84b3ef55d4634f061f4471f3 1457804 admin optional libvirt-daemon_5.0.0-1ubuntu2.3_arm64.deb 919ff763ec952d91a232dbe5b3f892de 146788 libdevel optional libvirt-dev_5.0.0-1ubuntu2.3_arm64.deb 3226226f269919275208541656d38f2f 219764 debug optional libvirt-sanlock-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 0a301bdc1644b3802ac97e64a2c7fa41 62096 libs optional libvirt-sanlock_5.0.0-1ubuntu2.3_arm64.deb 814c91319688c4bd93eb61fbb7f82006 330912 debug optional libvirt-wireshark-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb 40dbd4e50e733118734cca816a192a97 88332 libs optional libvirt-wireshark_5.0.0-1ubuntu2.3_arm64.deb 073380087c6ffc6a84b2162259318e32 6089344 debug optional libvirt0-dbgsym_5.0.0-1ubuntu2.3_arm64.ddeb ede0c63e079591e9983317446a256dc8 1294156 libs optional libvirt0_5.0.0-1ubuntu2.3_arm64.deb 435083fc4d9da472000e3bee0b6a657a 20044 libs optional libvirt_5.0.0-1ubuntu2.3_arm64.buildinfo c50547718ec4b94a5782666c2c24d1c5 19327035 raw-translations - libvirt_5.0.0-1ubuntu2.3_arm64_translations.tar.gz Original-Maintainer: Debian Libvirt Maintainers