[Libvirt-ci] Failed: libvirt/libvirt#2371 (v4.1-maint - 585be8e)

Travis CI builds at travis-ci.org
Mon Jun 24 08:39:36 UTC 2019


Build Update for libvirt/libvirt
-------------------------------------

Build: #2371
Status: Failed

Duration: 38 mins and 17 secs
Commit: 585be8e (v4.1-maint)
Author: Ján Tomko
Message: api: disallow virConnectGetDomainCapabilities on read-only connections

This API can be used to execute arbitrary emulators.
Forbid it on read-only connections.

Fixes: CVE-2019-10167
Signed-off-by: Ján Tomko <jtomko at redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange at redhat.com>
(cherry picked from commit 8afa68bac0cf99d1f8aaa6566685c43c22622f26)
Signed-off-by: Ján Tomko <jtomko at redhat.com>

View the changeset: https://github.com/libvirt/libvirt/compare/f0e014133104...585be8edbef5

View the full build log and details: https://travis-ci.org/libvirt/libvirt/builds/549614447?utm_medium=notification&utm_source=email

--

You can unsubscribe from build emails from the libvirt/libvirt repository going to https://travis-ci.org/account/preferences/unsubscribe?repository=4872032&utm_medium=notification&utm_source=email.
Or unsubscribe from *all* email updating your settings at https://travis-ci.org/account/preferences/unsubscribe?utm_medium=notification&utm_source=email.
Or configure specific recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/libvirt-ci/attachments/20190624/e3a0e8bd/attachment.htm>


More information about the Libvirt-ci mailing list