[PATCH 0/4] disallow multiple APIs on read-only connections

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



One patch per CVE for:
CVE-2019-10161
CVE-2019-10166
CVE-2019-10167
CVE-2019-10168

Ján Tomko (4):
  api: disallow virDomainSaveImageGetXMLDesc on read-only connections
  api: disallow virDomainManagedSaveDefineXML on read-only connections
  api: disallow virConnectGetDomainCapabilities on read-only connections
  api: disallow virConnect*HypervisorCPU on read-only connections

 src/libvirt-domain.c         | 13 ++++---------
 src/libvirt-host.c           |  2 ++
 src/qemu/qemu_driver.c       |  2 +-
 src/remote/remote_protocol.x |  3 +--
 4 files changed, 8 insertions(+), 12 deletions(-)

Now pushed.
-- 
2.20.1

--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list




[Index of Archives]     [Virt Tools]     [Libvirt Users]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]

  Powered by Linux