-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 12 Jun 2019 10:13:38 +0200 Source: libvirt Binary: libvirt-clients libvirt-daemon libvirt-daemon-system libvirt0 libvirt-doc libvirt-dev libvirt-sanlock libnss-libvirt Architecture: all Version: 3.0.0-4+deb9u4 Distribution: stretch-security Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: Guido Günther Description: libnss-libvirt - nss plugin providing IP add ress resolution for virtual machines libvirt-clients - Programs for the libvirt library libvirt-daemon - Virtualization daemon libvirt-daemon-system - Libvirt daemon configuration files libvirt-dev - development files for the libvirt library libvirt-doc - documentation for the libvirt library libvirt-sanlock - Sanlock plugin for virtlockd libvirt0 - library for interfacing with different virtualization systems Changes: libvirt (3.0.0-4+deb9u4) stretch-security; urgency=medium . * Fix CVEs related to privilege escalations on R/O connections. - CVE-2019-10161: CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc-.patch - CVE-2019-10167: api-disallow-virConnectGetDomainCapabilities-on-read-only.patch * cpu_map: Define md-clear CPUID bit. CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 * Add spec-ctrl and ibpb CPU features and ibrs CPU models. CVE-2017-5753, CVE-2017-5715 * Add ssbd CPU feature. CVE-2018-3639 Checksums-Sha1: ed4c5f2c857df2524cec7db279d871434a5b9747 1233536 libvirt-doc_3.0.0-4+deb9u4_all.deb a72fec2499ab7f248d581a324e42271df20a1a19 12375 libvirt_3.0.0-4+deb9u4_all.buildinfo Checksums-Sha256: 525b631c7cc2f22db02a2abcee5568d2d50ca76c514efbaaf921ec6dbc6c877b 1233536 libvirt-doc_3.0.0-4+deb9u4_all.deb d5cc3fbcd6089b1bc1f11bbce4792182c9867aaae1c1d1a3f58e7e1d21a5bcb9 12375 libvirt_3.0.0-4+deb9u4_all.buildinfo Files: edaf9ede5af9d0eefbfd74532d3b5d08 1233536 doc optional libvirt-doc_3.0.0-4+deb9u4_all.deb 310931f582fe924fc2eedf9e44d03ffb 12375 libs optional libvirt_3.0.0-4+deb9u4_all.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDxUushKJ39ldCqDnAY87dXAcGaQFAl0MAtUACgkQAY87dXAc GaTYWA//cR1aWSS0DOkv1FI3QW2dcMrDayS0YNkDgnuiRJJ93Oi9WW3U3zcmyq2P 4w6O9He9eRevkaY9//4M0RySdGQ0zFC5FxRpQ6XqyhKkGowQ8G6oVqbKrRVu6Uy8 ErZMXrRdwNcFPi58cvd2iWL1XheCnL+pDEBb5tNeDU/rX4QFk87ZbN50erEkvhhE kaCYaX+2+dbSDhi4Tt59jNV643G1ccaNHW0l5UgxPiADUKH83lr58XSPZSoqnrum /hxJuVnJIzKGcuvljzhE5gr6oq7vZ0j994xM2LhLFMVSxFwAatfsuFOvbgjrPzXa EV2yQnuZZwFGvpEbhl7g0+exWsMD6/Cq/xsfC2ZpRzDIRuLEV2op11RPK7lLjFDb X+kp0VTRGfAqbq1XgZym5VGQTcfHc/BbvctHMT0FSmj+lNXNz1T7fSOMnKCLvR8z XSomA9VML6GySt1Ox5j5msUe96Oxjqtu+whEYXXY/jIB4F2tOfIlVYd5NUGWdAyw RjCfNNfcq+dia+HIaZwJ8fhcNrXcWmNM3AvLnU30HcItDmrj2juDVKQfpziQx8Q5 4HTmog3P3QCBoHBpU87/LCoeYs9a9MqTln/4LYfQoR3p9xrgiCSuGmhpqFZXbKS4 QpGDyBw+ZIFKsK8jPmkRZaD33B4N53lajbC2DbSVPvx2Mh0cwTU= =WmoO -----END PGP SIGNATURE-----