Build Update for libvirt/libvirt
-------------------------------------
Build: #2371
Status: Failed
Duration: 38 mins and 17 secs
Commit: 585be8e (v4.1-maint)
Author: Ján Tomko
Message: api: disallow virConnectGetDomainCapabilities on read-only connections
This API can be used to execute arbitrary emulators.
Forbid it on read-only connections.
Fixes: CVE-2019-10167
Signed-off-by: Ján Tomko <jtomko(a)redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange(a)redhat.com>
(cherry picked from commit 8afa68bac0cf99d1f8aaa6566685c43c22622f26)
Signed-off-by: Ján Tomko <jtomko(a)redhat.com>
View the changeset:
https://github.com/libvirt/libvirt/compare/f0e014133104...585be8edbef5
View the full build log and details:
https://travis-ci.org/libvirt/libvirt/builds/549614447?utm_medium=notific...
--
You can unsubscribe from build emails from the libvirt/libvirt repository going to
https://travis-ci.org/account/preferences/unsubscribe?repository=4872032&....
Or unsubscribe from *all* email updating your settings at
https://travis-ci.org/account/preferences/unsubscribe?utm_medium=notifica....
Or configure specific recipients for build notifications in your .travis.yml file. See
https://docs.travis-ci.com/user/notifications.