Debian/libvirt: low 2.3
An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target att
Action: Upgrade libvirt to 12.6.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.6.0-1 | - |
Fixed versions
| 12.6.0-1 |
Sources
- osv: DEBIAN-CVE-2026-61477#Debian:14/libvirt
- https://security-tracker.debian.org/tracker/CVE-2026-61477
published · modified · JSON