-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 14 Mar 2011 21:33:33 +0100 Source: libvirt Binary: libvirt-bin libvirt0 libvirt0-dbg libvirt-doc libvirt-dev python-libvirt Architecture: mips Version: 0.8.3-5+squeeze1 Distribution: squeeze-security Urgency: low Maintainer: Debian Build Daemon Changed-By: Guido Günther Description: libvirt-bin - the programs for the libvirt library libvirt-dev - development files for the libvirt library libvirt-doc - documentation for the libvirt library libvirt0 - library for interfacing with different virtualization systems libvirt0-dbg - library for interfacing with different virtualization systems python-libvirt - libvirt Python bindings Closes: 617773 Changes: libvirt (0.8.3-5+squeeze1) stable-security; urgency=low . * [0ee351f] [CVE-2011-1146] Add missing checks for read only connections. Some API forgot to check the read-only status of the connection for entry point which modify the state of the system or may lead to a remote execution using user data. The entry points concerned are: - virConnectDomainXMLToNative - virNodeDeviceDettach - virNodeDeviceReAttach - virNodeDeviceReset - virDomainRevertToSnapshot - virDomainSnapshotDelete src/libvirt.c: fix the above set of entry points to error on read-only (Closes: #617773) Checksums-Sha1: 69a8bdcf208e4618513827f54d02c9858b510425 1046418 libvirt-bin_0.8.3-5+squeeze1_mips.deb b398a8ffa8da0bc946c0b5d48b42b39b2494015a 733348 libvirt0_0.8.3-5+squeeze1_mips.deb 55a6b747caa520ba92f5a270ad30792d7253d920 2704006 libvirt0-dbg_0.8.3-5+squeeze1_mips.deb 0e235c751fefb0bfcb2901601d16fc0a017c5987 983324 libvirt-dev_0.8.3-5+squeeze1_mips.deb 92d30927f1658bdeb7c0835800201afaa139bac4 434736 python-libvirt_0.8.3-5+squeeze1_mips.deb Checksums-Sha256: 8c21cea23ffbf4d2180243e170b5d4c31ed606facc0c6bd0c8e6dc0ef41c7935 1046418 libvirt-bin_0.8.3-5+squeeze1_mips.deb 36fe1a0aeba10d6647b1bd9903e2332e0d7aa933b7803d35ad95fc7e4b89da2a 733348 libvirt0_0.8.3-5+squeeze1_mips.deb c03dcd7ee68d617aaad1ecfe2c8605e7f8aa39efd4121ad27690b1e6173c3de1 2704006 libvirt0-dbg_0.8.3-5+squeeze1_mips.deb 45b1f53d76b76efaffe7ad54e4863b06d56bba06341b7311d9f5770a7f6060ca 983324 libvirt-dev_0.8.3-5+squeeze1_mips.deb e48989e50bf78e10be5de0f71175e48330913c05ff972afb0b1a6b1c80d21557 434736 python-libvirt_0.8.3-5+squeeze1_mips.deb Files: 74c2bb1053fcd4de4c6d48c98548732d 1046418 admin optional libvirt-bin_0.8.3-5+squeeze1_mips.deb 43678d5b18c788c3d981e4aaf73564fe 733348 libs optional libvirt0_0.8.3-5+squeeze1_mips.deb 2eb5aed6eacf9683127696cd07943e41 2704006 debug extra libvirt0-dbg_0.8.3-5+squeeze1_mips.deb 1cdec52117c3aeb3b8a5d0080da9a663 983324 libdevel optional libvirt-dev_0.8.3-5+squeeze1_mips.deb 99dce38ba4ea03d8eb182c23e2806726 434736 python optional python-libvirt_0.8.3-5+squeeze1_mips.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJNgwXJAAoJEOxfUAG2iX57WsUH/i7Q5SSuIH2zPQwubyVtR3Xq SqB+0aPT6oM2M38h91HsRskZg2u4G8hAs5vEIusWPh9RCpifcWN+rQ7VucUSzylY mJD9XTGSWov83C/O8oSrQFAwNMadmPVFzpDathD0i36gzEMj911aSDFQOiRti8Ns sL0gZnHto5SbIyWbi6Tq4Pxu7u138EhQuXzpEfZwFl2wCNmXwVcZHpEzNWwwgosl oCem9NnHEv13L9BFtATqr8YziT0Fvf9ejtLHmZqGgAp7GMMRHLUcwtavI6nvUGJi VT9fA1CqOhEnrppvRGjXd7SQeZ/Mu0+sAaXtdcatS0Jht7IM3bRY51JC7q2V1KM= =VSHp -----END PGP SIGNATURE-----