Bug#889839: [Pkg-libvirt-maintainers] Bug#889839: libvirt: CVE-2018-6764

2018-02-08 Thread Salvatore Bonaccorso
Hi Guido On Thu, Feb 08, 2018 at 07:28:17PM +0100, Guido Günther wrote: > Hi Salvatore, > On Wed, Feb 07, 2018 at 07:15:50PM +0100, Salvatore Bonaccorso wrote: > > Source: libvirt > > Version: 4.0.0-1 > > Severity: important > > Tags: patch security upstream > > > > Hi Guido, > > > > the followi

Bug#889839: [Pkg-libvirt-maintainers] Bug#889839: libvirt: CVE-2018-6764

2018-02-08 Thread Guido Günther
Hi Salvatore, On Wed, Feb 07, 2018 at 07:15:50PM +0100, Salvatore Bonaccorso wrote: > Source: libvirt > Version: 4.0.0-1 > Severity: important > Tags: patch security upstream > > Hi Guido, > > the following vulnerability was published for libvirt. > > CVE-2018-6764[0]: > |guest could inject exec

Bug#889839: libvirt: CVE-2018-6764

2018-02-07 Thread Salvatore Bonaccorso
Source: libvirt Version: 4.0.0-1 Severity: important Tags: patch security upstream Hi Guido, the following vulnerability was published for libvirt. CVE-2018-6764[0]: |guest could inject executable code via libnss_dns.so loaded by |libvirt_lxc before init Commit is at [1]. I see the 1ce929603ba8