]> git.ipfire.org Git - thirdparty/libvirt.git/commit
bhyve: Check ACLs before parsing the whole domain XML
authorMartin Kletzander <mkletzan@redhat.com>
Thu, 6 Nov 2025 14:31:12 +0000 (15:31 +0100)
committerMartin Kletzander <mkletzan@redhat.com>
Wed, 12 Nov 2025 08:50:56 +0000 (09:50 +0100)
commitb45f10bc0a2f30ccdbf2cb55da2e4f85b3ebfb23
treee9589dbde345ecdda9cccbf1596468c4c26e995a
parente6de1e43ab6e907225b8f9bcea3772231908717e
bhyve: Check ACLs before parsing the whole domain XML

Utilise the new virDomainDefIDsParseString() for that.

Fixes: CVE-2025-12748
Reported-by: Святослав Терешин <s.tereshin@fobos-nt.ru>
Signed-off-by: Martin Kletzander <mkletzan@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
src/bhyve/bhyve_driver.c