新支点安全公告

安全公告详情

NS-SA-2026-0022

2026-03-04 16:02:58

简介

moderate: platform-python-pip-9.0.3-22.zncgsl6.noarch/libvirt security update

严重级别

moderate

主题

An update for platform-python-pip-9.0.3-22.zncgsl6.noarch/libvirt is now available for NewStart CGSL MAIN 6.06.
NewStart Security has rated this update as having a security impact of moderate. A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.

详细描述

platform-python-pip-9.0.3-22.zncgsl6.noarch:
libvirt:

Security Fix(es):
platform-python-pip-9.0.3-22.zncgsl6.noarch: pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory(CVE-2013-1888)
platform-python-pip-9.0.3-22.zncgsl6.noarch: bugfix
libvirt: A memory leak flaw was found in the libvirt API that is responsible for retrieving domain stats when managing QEMU guests. This flaw allows unprivileged users with a read-only connection to cause a memory leak in the `domstats` command, resulting in a potential denial of service.(CVE-2020-12430)
libvirt: bugfix

Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
http://security.gd-linux.com/how_to_apply_patch.html
Remember the build tag is 6.06.01B6.

NS-SA-2026-0022

简介

严重级别

主题

详细描述

影响组件

影响产品

更新包

CVE

参考