[ GLSA 202003-18 ] libvirt

[GLSA]

Gentoo Linux Security Advisory

Title: libvirt: Multiple vulnerabilities (GLSA 202003-18)
Severity: high
Exploitable: local
Date: 2020-03-15
Bug(s): #711306
ID: 202003-18

Synopsis

Multiple vulnerabilities have been discovered in libvirt, the worst
of which may result in the execution of arbitrary commands.


Background

libvirt is a C toolkit for manipulating virtual machines.

Affected Packages

Package: app-emulation/libvirt
Vulnerable: < 5.4.1
Unaffected: >= 5.4.1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in libvirt. Please review
the CVE identifiers referenced below for details.


Impact

A local privileged attacker could execute arbitrary commands, escalate
privileges or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All libvirt users should upgrade to the latest version: