Accepted libvirt 5.0.0-4 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 17 Jun 2019 19:05:40 +0200
Source: libvirt
Architecture: source
Version: 5.0.0-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>
Changed-By: Guido Günther <agx@sigxcpu.org>
Closes: 930100
Changes:
libvirt (5.0.0-4) unstable; urgency=medium
.
* [0fdc2af] Fix multiple CVEs related to privilege escalations on R/O
connections.
- CVE-2019-10161:
CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc-.patch
- CVE-2019-10166:
api-disallow-virDomainManagedSaveDefineXML-on-read-only-c.patch
- CVE-2019-10167:
api-disallow-virConnectGetDomainCapabilities-on-read-only.patch
- CVE-2019-10168:
api-disallow-virConnect-HypervisorCPU-on-read-only-connec.patch
* Include /etc/pki/qemu in apparmor (Closes: #930100)
Checksums-Sha1:
aec2883d91b08575995d05d18238730bf131b259 4508 libvirt_5.0.0-4.dsc
32e517198bf0874825bd5f2276e4cda938e87aff 78488 libvirt_5.0.0-4.debian.tar.xz
4c21de988a73071fb40ab12151b1b8e6f2285478 19640 libvirt_5.0.0-4_amd64.buildinfo
Checksums-Sha256:
53d8d101e2d9ca9c538531132b5ae8991594186e80bf8a61069834b74d3c41dc 4508 libvirt_5.0.0-4.dsc
70bf74be8aebe1418f4e09d7360c7c7d7d1fc3235fe71114e1c75b73d17545bd 78488 libvirt_5.0.0-4.debian.tar.xz
fc703a7674cf6c4404f5972ebc50dd5a06de58ee94d54aafc3e191b4c718e43e 19640 libvirt_5.0.0-4_amd64.buildinfo
Files:
3665cba74b3613bef7c3599af74e3ae4 4508 libs optional libvirt_5.0.0-4.dsc
08647aff81a475cfb013727c7128fc0a 78488 libs optional libvirt_5.0.0-4.debian.tar.xz
04408a567bc1cb132bee7f15d489c918 19640 libs optional libvirt_5.0.0-4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl0L/+RfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EikQP/0UsvG9rIaB3PogJckx0rJW5i150NQNO
rXC3GdukFA9OidT+dlEJaFox4hgXtVMd5BLW0xk11w2PTcg+dbCM9gDNreBS+SVH
d3YvcaeriPVgf3TgYPcwMqfGZk2rnE4gt4CYlrtJMhqjejNwxSg4zg6JRfDVEq+i
wcWGyA8V3l2sWG/FrnlN8SWagx0JKkgd4Xr3BMV13xVw2Lf370npd8ENHteV7PtN
A9o+57rhZaSznvsfi655V2AVqP6RVPVP3la49iM3IZKgompvBZ2+It6quLQ9F75a
glpZ+Hjz6dJ8tRDYK6jT9rqwO1TNVgjQSyEFNEM81E+5AexK3VL0TphEhEOoaW6b
xMZQiEOcSxFyfDTC5KUuBzHM8NcvqZV95ZNVJGl3QL7uTPwGdVI/8mZFucCFhXJ8
MIA+mbMJ6CYTTE3KVN6evLGt++16ICtsGCaSN57NTbCeOjEGanWow2EK6XcCDTWV
X6KSPtonEE9tfmn1f3AeaspYx9Ze6TN/o8+VbGacvrpXfEAky1iEa5Q/3IeTtJPQ
TJVxcWOwenj9Q4KILSG+uUX5pW+BzBD1wIwndNTKIBMOizy+PnPbAju0OhMHeyE2
hSlPBnEh/VTEYG6SeNXgKWuCoD8uikdK+W4tXvfhrFlZSIJGTOYwbBUzuOQS2nCI
RVPrPXLBkLqq
=CSYG
-----END PGP SIGNATURE-----