projects / gentoo.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e031694) | patch
app-emulation/libvirt: security fix for 1.2.21 (CVE-2015-5313, bug #568870)
authorMatthias Maier <tamiko@gentoo.org>
Tue, 22 Dec 2015 06:09:46 +0000 (00:09 -0600)
committerMatthias Maier <tamiko@gentoo.org>
Tue, 22 Dec 2015 06:15:45 +0000 (00:15 -0600)
commit6420c69559c3b40f127215bb0c3e8a8556b6fefa
treee2f0953157d308ff9c240c875bf4e4e2983a2a61tree | snapshot
parente0316949e47c8cc3031a5d0f3e0c433f94e84223commit | diff
app-emulation/libvirt: security fix for 1.2.21 (CVE-2015-5313, bug #568870)

Apply fix for CVE-2015-5313 to 1.2.21:
  A path-traversal flaw was found in the way the libvirt daemon handled
  file-system names for storage volumes. A libvirt user with privileges to
  create storage volumes and without privileges to create and modify
  domains could possibly use this flaw to escalate their privileges.

Gentoo-Bug: 568870

Package-Manager: portage-2.2.26
app-emulation/libvirt/Manifest diff | blob | history
app-emulation/libvirt/libvirt-1.2.21-r1.ebuild [moved from app-emulation/libvirt/libvirt-1.2.21.ebuild with 99% similarity] diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.