]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ec59a95) | patch
api: disallow virDomainGetHostname for read-only connections
authorDaniel P. Berrangé <berrange@redhat.com>
Wed, 27 Mar 2019 10:59:58 +0000 (10:59 +0000)
committerDaniel P. Berrangé <berrange@redhat.com>
Thu, 11 Apr 2019 14:21:48 +0000 (15:21 +0100)
commit2a07c990bd9143d7a0fe8d1b6b7c763c52185240
tree4f00733db2411565004721d16f76125da2c3593etree
parentec59a95a2ca5619c57405269171b7b52299b1ac4commit | diff
api: disallow virDomainGetHostname for read-only connections

The virDomainGetHostname API is fetching guest information and this may
involve use of an untrusted guest agent. As such its use must be
forbidden on a read-only connection to libvirt.

Fixes CVE-2019-3886
Reviewed-by: Jim Fehlig <jfehlig@suse.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
src/libvirt-domain.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git