Accepted libvirt 3.0.0-4+deb9u4 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 12 Jun 2019 10:13:38 +0200
Source: libvirt
Binary: libvirt-clients libvirt-daemon libvirt-daemon-system libvirt0 libvirt-doc libvirt-dev libvirt-sanlock libnss-libvirt
Architecture: source
Version: 3.0.0-4+deb9u4
Distribution: stretch-security
Urgency: medium
Maintainer: Debian Libvirt Maintainers <pkg-libvirt-maintainers@lists.alioth.debian.org>
Changed-By: Guido Günther <agx@sigxcpu.org>
Description:
libnss-libvirt - nss plugin providing IP add ress resolution for virtual machines
libvirt-clients - Programs for the libvirt library
libvirt-daemon - Virtualization daemon
libvirt-daemon-system - Libvirt daemon configuration files
libvirt-dev - development files for the libvirt library
libvirt-doc - documentation for the libvirt library
libvirt-sanlock - Sanlock plugin for virtlockd
libvirt0 - library for interfacing with different virtualization systems
Changes:
libvirt (3.0.0-4+deb9u4) stretch-security; urgency=medium
.
* Fix CVEs related to privilege escalations on R/O connections.
- CVE-2019-10161:
CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc-.patch
- CVE-2019-10167:
api-disallow-virConnectGetDomainCapabilities-on-read-only.patch
* cpu_map: Define md-clear CPUID bit.
CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
* Add spec-ctrl and ibpb CPU features and ibrs CPU models.
CVE-2017-5753, CVE-2017-5715
* Add ssbd CPU feature.
CVE-2018-3639
Checksums-Sha1:
0065bced0f4a5683e27d320f1c457ae8c57fc434 4109 libvirt_3.0.0-4+deb9u4.dsc
ac6a4c09c77674eb8e1486ae43a6bd403a9b499d 76316 libvirt_3.0.0-4+deb9u4.debian.tar.xz
Checksums-Sha256:
17293a40d410d31103e6b8b092479170c000b7656d7f9a232ca1ea9a185c04d9 4109 libvirt_3.0.0-4+deb9u4.dsc
3009f7b00009f3908453d0ddb98ea22e7d49985d60fb14281e88880160e2c85d 76316 libvirt_3.0.0-4+deb9u4.debian.tar.xz
Files:
b52ab0929f23650ac22b4f7e1a1faf10 4109 libs optional libvirt_3.0.0-4+deb9u4.dsc
07e55233bf1817c851cd0d28a7ed92fa 76316 libs optional libvirt_3.0.0-4+deb9u4.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl0L9jhfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EDI8P/0PqF+DwcR5Sf8aX9kj2B354Ot1pAudh
i+9s8X9dm5mL0AGT99DahqhwaUdwVusNyX8MqN6+8ISteKdHtyJv28lxptthMXrf
m1mrxsCqRfo8Eu1cczZS95o3DNf5ssWUp4XnogL7TSt0CNAYybToiNWket7k0gpx
dMzULERGcXtR/zF8QT6KhFQiganqKZbnMHQWsFQvbFiHjWbkJgCg45WvCLJ3mLly
o3aifw26G1EUiwdt2sAIwI7hByYsrYMSEGhq14Jirzvz3euFK1cKqcg9xHl3dtvz
svCsVcZj1Q9LkLxf3SHibbAgXoDeLbQCp3OX+RLrcXG7EGxczkxq43vRxrJoCK8U
cs21hzzO1r08FpxTNsK+mp3pjDLEopnKhlLI3J9EgP5txxYmIYC3ROfXo2PCJPtL
AgAeC+FF1vx6m+zOzUk5Wo8nTnIP6f/uYDRlPgDgZ51q8Pg4gsNmsAgtfSAnotC6
nDI9zxk0VybJXRT3zqmVcyCqiRRGy5XGBW363AHsSSC1dx3Wds3MwDOpkiLOYjDY
AG+ZjAQyQyZIGJznJREZwASitg1clo0kEPdTZccwH61a7gRajbxWoQDNIGPj+N3b
9H4nK0Y92i+40xNJAEw5n8i+nWMDTY5f/0jcpEZ6VOagD0nmOplkEF7EOtJi4zRP
vjd1TEDUm6/K
=BJnj
-----END PGP SIGNATURE-----
Reply to: