[Libvirt-ci] Errored: libvirt/libvirt#2370 (v3.7-maint - d47a396)

Travis CI builds at travis-ci.org
Mon Jun 24 08:10:46 UTC 2019


Build Update for libvirt/libvirt
-------------------------------------

Build: #2370
Status: Errored

Duration: 9 mins and 25 secs
Commit: d47a396 (v3.7-maint)
Author: Ján Tomko
Message: api: disallow virConnectGetDomainCapabilities on read-only connections

This API can be used to execute arbitrary emulators.
Forbid it on read-only connections.

Fixes: CVE-2019-10167
Signed-off-by: Ján Tomko <jtomko at redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange at redhat.com>
(cherry picked from commit 8afa68bac0cf99d1f8aaa6566685c43c22622f26)
Signed-off-by: Ján Tomko <jtomko at redhat.com>

View the changeset: https://github.com/libvirt/libvirt/compare/aa68d0db2cc7...d47a396e9951

View the full build log and details: https://travis-ci.org/libvirt/libvirt/builds/549614438?utm_medium=notification&utm_source=email

--

You can unsubscribe from build emails from the libvirt/libvirt repository going to https://travis-ci.org/account/preferences/unsubscribe?repository=4872032&utm_medium=notification&utm_source=email.
Or unsubscribe from *all* email updating your settings at https://travis-ci.org/account/preferences/unsubscribe?utm_medium=notification&utm_source=email.
Or configure specific recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/libvirt-ci/attachments/20190624/02807bb0/attachment.htm>


More information about the Libvirt-ci mailing list