ALT-PU-2026-13014

Высокий

ALT-PU-2026-13014: package libvirt update to version 12.6.0-alt2

Источник

errata.altlinux.org

Дата публикации

19.08.2026

Дата обновления

19.08.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades libvirt to version 12.6.0-alt2.

Устраненные уязвимости3

CVE-2026-61477

Низкий 2.3

Дата публикации: 07.08.2026

CWE-93

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.

CVSS 3.1

Низкий 2.3

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N