Updated logo UPDATED Back to feed
breach watch Ubuntu security notices September 28, 2026

USN-8833-1: libvirt vulnerabilities

AI Summary

It was discovered that libvirt did not properly validate newline characters in DNS TXT record values and SRV record attributes in its virtual network driver. A local attacker with permission to define virtual networks could possibly use this issue to inject arbitrary dnsmasq configuration directives, leading to arbitrary command execution as root. (CVE-2026-61477) It was discovered that libvirt did not properly handle errors during XML context parsing.

0 views
Read full article
Read it on Updated — Tech News. Ahead of the Curve.
Discussion
Sign in to join the discussion.
Loading comments…