Build Update for libvirt/libvirt
-------------------------------------
Build: #2370
Status: Errored
Duration: 9 mins and 25 secs
Commit: d47a396 (v3.7-maint)
Author: Ján Tomko
Message: api: disallow virConnectGetDomainCapabilities on read-only connections
This API can be used to execute arbitrary emulators.
Forbid it on read-only connections.
Fixes: CVE-2019-10167
Signed-off-by: Ján Tomko <jtomko(a)redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange(a)redhat.com>
(cherry picked from commit 8afa68bac0cf99d1f8aaa6566685c43c22622f26)
Signed-off-by: Ján Tomko <jtomko(a)redhat.com>
View the changeset:
https://github.com/libvirt/libvirt/compare/aa68d0db2cc7...d47a396e9951
View the full build log and details:
https://travis-ci.org/libvirt/libvirt/builds/549614438?utm_medium=notific...
--
You can unsubscribe from build emails from the libvirt/libvirt repository going to
https://travis-ci.org/account/preferences/unsubscribe?repository=4872032&....
Or unsubscribe from *all* email updating your settings at
https://travis-ci.org/account/preferences/unsubscribe?utm_medium=notifica....
Or configure specific recipients for build notifications in your .travis.yml file. See
https://docs.travis-ci.com/user/notifications.