Vulnerability Bulletins

DSA-4469 libvirt - security update

   
Affected software Debian
 
Two vulnerabilities were discovered in Libvirt, a virtualisationabstraction library, allowing an API client with read-only permissionsto execute arbitrary commands via the virConnectGetDomainCapabilitiesAPI, or read or execute arbitrary files via thevirDomainSaveImageGetXMLDesc API.

More info:

https://www.debian.org/security/2019/dsa-4469