[ubuntu/cosmic-proposed] libvirt 4.0.0-1ubuntu11 (Accepted)

[Marc Deslauriers]

libvirt (4.0.0-1ubuntu11) cosmic; urgency=medium

  * SECURITY UPDATE: QEMU monitor DoS
    - debian/patches/CVE-2018-1064.patch: add size limit to
      src/qemu/qemu_agent.c.
    - CVE-2018-1064
  * SECURITY UPDATE: Speculative Store Bypass
    - debian/patches/CVE-2018-3639-1.patch: define the 'ssbd' CPUID feature
      bit in src/cpu/cpu_map.xml.
    - debian/patches/CVE-2018-3639-2.patch: define the 'virt-ssbd' CPUID
      feature bit in src/cpu/cpu_map.xml.
    - CVE-2018-3639

Date: Tue, 22 May 2018 10:55:56 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/libvirt/4.0.0-1ubuntu11
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 22 May 2018 10:55:56 -0400
Source: libvirt
Binary: libvirt-bin libvirt-clients libvirt-daemon libvirt-daemon-driver-storage-gluster libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-sheepdog libvirt-daemon-driver-storage-zfs libvirt-daemon-system libvirt0 libvirt-doc libvirt-dev libvirt-sanlock libnss-libvirt libvirt-wireshark
Architecture: source
Version: 4.0.0-1ubuntu11
Distribution: cosmic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 libnss-libvirt - nss plugin providing IP add ress resolution for virtual machines
 libvirt-bin - programs for the libvirt library
 libvirt-clients - Programs for the libvirt library
 libvirt-daemon - Virtualization daemon
 libvirt-daemon-driver-storage-gluster - Virtualization daemon glusterfs storage driver
 libvirt-daemon-driver-storage-rbd - Virtualization daemon RBD storage driver
 libvirt-daemon-driver-storage-sheepdog - Virtualization daemon Sheedog storage driver
 libvirt-daemon-driver-storage-zfs - Virtualization daemon ZFS storage driver
 libvirt-daemon-system - Libvirt daemon configuration files
 libvirt-dev - development files for the libvirt library
 libvirt-doc - documentation for the libvirt library
 libvirt-sanlock - Sanlock plugin for virtlockd
 libvirt-wireshark - Wireshark dissector for the libvirt protocol
 libvirt0   - library for interfacing with different virtualization systems
Changes:
 libvirt (4.0.0-1ubuntu11) cosmic; urgency=medium
 .
   * SECURITY UPDATE: QEMU monitor DoS
     - debian/patches/CVE-2018-1064.patch: add size limit to
       src/qemu/qemu_agent.c.
     - CVE-2018-1064
   * SECURITY UPDATE: Speculative Store Bypass
     - debian/patches/CVE-2018-3639-1.patch: define the 'ssbd' CPUID feature
       bit in src/cpu/cpu_map.xml.
     - debian/patches/CVE-2018-3639-2.patch: define the 'virt-ssbd' CPUID
       feature bit in src/cpu/cpu_map.xml.
     - CVE-2018-3639
Checksums-Sha1:
 0edb8f9978cfc7595c6fa1840634b61f5aed0463 4795 libvirt_4.0.0-1ubuntu11.dsc
 3e180cff85e77f61ff4b9b4eae59b86a54812754 166568 libvirt_4.0.0-1ubuntu11.debian.tar.xz
 c975263db310523946805789993a3e150009392b 14708 libvirt_4.0.0-1ubuntu11_source.buildinfo
Checksums-Sha256:
 690b5f686e82fd9c3d815beb0083e52ffcaaf944f2331d92387cf114c8d5514f 4795 libvirt_4.0.0-1ubuntu11.dsc
 d0d8d37323eda562ce4b50fd4df667b6e94f772464d4e7d1adfe038515b7043c 166568 libvirt_4.0.0-1ubuntu11.debian.tar.xz
 470d795088abd12a3df215fe0936d702e1b4ec7b39b799ad7fed753912538a53 14708 libvirt_4.0.0-1ubuntu11_source.buildinfo
Files:
 4ca2f3d0f0d7b974bc179563571b090c 4795 libs optional libvirt_4.0.0-1ubuntu11.dsc
 3803cb40e7107171fa4f3ce5d97cbdd7 166568 libs optional libvirt_4.0.0-1ubuntu11.debian.tar.xz
 b793e7c690f3debc8d9eff62baa27709 14708 libs optional libvirt_4.0.0-1ubuntu11_source.buildinfo
Original-Maintainer: Debian Libvirt Maintainers <pkg-libvirt-maintainers at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
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=iob1
-----END PGP SIGNATURE-----