]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4e16e7a) | patch
api: disallow virConnectGetDomainCapabilities on read-only connections v1.2.19-maint 14/head
authorJán Tomko <jtomko@redhat.com>
Fri, 14 Jun 2019 07:16:14 +0000 (09:16 +0200)
committerJán Tomko <jtomko@redhat.com>
Mon, 24 Jun 2019 11:52:01 +0000 (13:52 +0200)
commit7d3b95b03880c8ade5f908dcb3d3c8b2d8e82a8f
treebbfd43fafdee59860836d5ae58fc15723a7090eetree
parent4e16e7a3fc44a14f27eda23e75bae75992339b3acommit | diff
api: disallow virConnectGetDomainCapabilities on read-only connections

This API can be used to execute arbitrary emulators.
Forbid it on read-only connections.

Fixes: CVE-2019-10167
Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
(cherry picked from commit 8afa68bac0cf99d1f8aaa6566685c43c22622f26)
Signed-off-by: Ján Tomko <jtomko@redhat.com>
src/libvirt-domain.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git