Debian/libvirt: low 2.3
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target att
Action: Upgrade libvirt to 11.3.0-3+deb13u3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.3.0-3+deb13u3 | - |
Fixed versions
| 11.3.0-3+deb13u3 |
Sources
- osv: DEBIAN-CVE-2026-61477#Debian:13/libvirt
- https://security-tracker.debian.org/tracker/CVE-2026-61477
published · modified · JSON