-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 14 Mar 2011 21:33:33 +0100 Source: libvirt Binary: libvirt-bin libvirt0 libvirt0-dbg libvirt-doc libvirt-dev python-libvirt Architecture: s390 Version: 0.8.3-5+squeeze1 Distribution: squeeze-security Urgency: low Maintainer: s390 Build Daemon (zandonai) Changed-By: Guido Günther Description: libvirt-bin - the programs for the libvirt library libvirt-dev - development files for the libvirt library libvirt-doc - documentation for the libvirt library libvirt0 - library for interfacing with different virtualization systems libvirt0-dbg - library for interfacing with different virtualization systems python-libvirt - libvirt Python bindings Closes: 617773 Changes: libvirt (0.8.3-5+squeeze1) stable-security; urgency=low . * [0ee351f] [CVE-2011-1146] Add missing checks for read only connections. Some API forgot to check the read-only status of the connection for entry point which modify the state of the system or may lead to a remote execution using user data. The entry points concerned are: - virConnectDomainXMLToNative - virNodeDeviceDettach - virNodeDeviceReAttach - virNodeDeviceReset - virDomainRevertToSnapshot - virDomainSnapshotDelete src/libvirt.c: fix the above set of entry points to error on read-only (Closes: #617773) Checksums-Sha1: cee8359e0b75dccfe2132905a3958791230b45f8 1057754 libvirt-bin_0.8.3-5+squeeze1_s390.deb c02a307feda5eb962ef3dc0d547f6f1cc71af54b 755348 libvirt0_0.8.3-5+squeeze1_s390.deb edc01bd231fdad27774db682a099ddcc23edee9b 2635340 libvirt0-dbg_0.8.3-5+squeeze1_s390.deb e158bd1a1d696a0be5866ac0e1f7ad368ccba57f 897092 libvirt-dev_0.8.3-5+squeeze1_s390.deb 225bd0353f37b3931f4d28c584ce9986c2dde972 438004 python-libvirt_0.8.3-5+squeeze1_s390.deb Checksums-Sha256: 50cc60b0736b4c0014b762ee61be113e68f212e48d5f9f6eb86acfd70fed1186 1057754 libvirt-bin_0.8.3-5+squeeze1_s390.deb 1c5c00dfc1b2504c7cd9e272cf8c381889a5a4a5d81e39e44a8d877e7548d48b 755348 libvirt0_0.8.3-5+squeeze1_s390.deb 107e65e1c628f7f7fcb1400efd8ecdb86582e5a9c6c8cbed376d57315c8b3907 2635340 libvirt0-dbg_0.8.3-5+squeeze1_s390.deb c4be35136a33a3a913eff8c126a6e6d5b523f51cb9161cc54dbd3d920fa9e425 897092 libvirt-dev_0.8.3-5+squeeze1_s390.deb fe4fe9bbaa39d7fc2b9f62523df614c407e6b8a8e1db014d8bbb59322ecba911 438004 python-libvirt_0.8.3-5+squeeze1_s390.deb Files: bef482f7c087932db562c16ce5f928fe 1057754 admin optional libvirt-bin_0.8.3-5+squeeze1_s390.deb e8801dd079577b668af120813f5e8f8e 755348 libs optional libvirt0_0.8.3-5+squeeze1_s390.deb e5f976a99ea67492c1df03bb3fed1637 2635340 debug extra libvirt0-dbg_0.8.3-5+squeeze1_s390.deb f33c679356e9d2918c63d9eaa5b86c90 897092 libdevel optional libvirt-dev_0.8.3-5+squeeze1_s390.deb b9e378cbc7f7bb229f60e7c3a4584d58 438004 python optional python-libvirt_0.8.3-5+squeeze1_s390.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJNgwXIAAoJEOxfUAG2iX57OIUIAK6VOTa9pXYgkx07Sso55swp U030IP9bB7xdotWgaY3lpuLLlZRMnxLzTeZA1PyyXANeH88pZXh/rnky9aW04iKQ AXwwW96ijMrBIyulHphJdT5PQTylIqdmeb5XBDoLmh5AFbccJ5h1TgN4ziJBC/9K X2PsiJ+IoK06HtHPIAW8zyk50vumk6H/TE7HYolNWD6r2Ge5VE+SxXX4dn3LJGkm LpOkYbOliJzj2nhoiNFK9r+iKvKkopxnT/zVQegZxPpjGp4q7srcXNKNoGvPVj1h cffvU+cw09CPzFg79grwKdR3xkfSPVj1WP/sVx5Wc6PJdT9gHfe8Tu38jb0fpNE= =zVyf -----END PGP SIGNATURE-----