libvirt
/
libvirt
|
v3.7-maint
|
9 mins and 25 secs
|
Ján Tomko
|
api: disallow virConnectGetDomainCapabilities on read-only connections
This API can be used to execute arbitrary emulators. Forbid it on read-only connections.
Fixes: CVE-2019-10167 Signed-off-by: Ján Tomko <jtomko@redhat.com> Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> (cherry picked from commit 8afa68bac0cf99d1f8aaa6566685c43c22622f26) Signed-off-by: Ján Tomko <jtomko@redhat.com>
|
|