Build Update for libvirt/libvirt ------------------------------------- Build: #832 Status: Still Failing Duration: 22 minutes and 10 seconds Commit: bc251ea (master) Author: Daniel P. Berrange Message: qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) We read from QEMU until seeing a \r\n pair to indicate a completed reply or event. To avoid memory denial-of-service though, we must have a size limit on amount of data we buffer. 10 MB is large enough that it ought to cope with normal QEMU replies, and small enough that we're not consuming unreasonable mem. Signed-off-by: Daniel P. Berrange <berrange@redhat.com> View the changeset: https://github.com/libvirt/libvirt/compare/ff609286a771...bc251ea91bcf View the full build log and details: https://travis-ci.org/libvirt/libvirt/builds/330266496?utm_source=email&utm_medium=notification -- You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications