libvirt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libvirt, the worst of which may result in the execution of arbitrary commands. libvirt 2020-03-15 2020-03-15 711306 local 5.4.1 5.4.1

libvirt is a C toolkit for manipulating virtual machines.

Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details.

A local privileged attacker could execute arbitrary commands, escalate privileges or cause a Denial of Service condition.

There is no known workaround at this time.

All libvirt users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/libvirt-5.4.1" CVE-2019-10161 CVE-2019-10166 CVE-2019-10167 CVE-2019-10168 whissi whissi