[ubuntu/trusty-security] libvirt 1.2.2-0ubuntu13.1.26 (Accepted)

[Marc Deslauriers]

libvirt (1.2.2-0ubuntu13.1.26) trusty-security; urgency=medium

  * SECURITY UPDATE: resource exhaustion resulting in DoS
    - debian/patches/CVE-2018-5748.patch: avoid DoS reading from
      QEMU monitor in src/qemu/qemu_monitor.c.
    - CVE-2018-5748
  * SECURITY UPDATE: Bypass authentication
    - debian/patches/CVE-2016-5008.patch: let empty default VNC
      password work as documented in src/qemu/qemu_hotplug.c.
    - CVE-2016-5008

Date: 2018-02-16 13:44:15.076086+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/libvirt/1.2.2-0ubuntu13.1.26
-------------- next part --------------
Sorry, changesfile not available.