]> git.ipfire.org Git - thirdparty/libvirt.git/commit
lxc: Check ACLs before parsing the whole domain XML
authorMartin Kletzander <mkletzan@redhat.com>
Thu, 6 Nov 2025 14:49:01 +0000 (15:49 +0100)
committerMartin Kletzander <mkletzan@redhat.com>
Wed, 12 Nov 2025 08:50:56 +0000 (09:50 +0100)
commita6dcfee896f67bb8bdfdbb0b406ac7649fbb4c0f
treea92b44dac47bf83f8f4d2f9719cb34e051900d03
parenta1f48bca077e2f3377f29d746efd4310b8a2910f
lxc: Check ACLs before parsing the whole domain XML

Utilise the new virDomainDefIDsParseString() for that.

Fixes: CVE-2025-12748
Reported-by: Святослав Терешин <s.tereshin@fobos-nt.ru>
Signed-off-by: Martin Kletzander <mkletzan@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
src/lxc/lxc_driver.c