-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Mon, 14 Mar 2011 21:33:33 +0100 Source: libvirt Binary: libvirt-bin libvirt0 libvirt0-dbg libvirt-doc libvirt-dev python-libvirt Architecture: mipsel Version: 0.8.3-5+squeeze1 Distribution: squeeze-security Urgency: low Maintainer: mipsel Build Daemon (mayer) Changed-By: Guido Günther Description: libvirt-bin - the programs for the libvirt library libvirt-dev - development files for the libvirt library libvirt-doc - documentation for the libvirt library libvirt0 - library for interfacing with different virtualization systems libvirt0-dbg - library for interfacing with different virtualization systems python-libvirt - libvirt Python bindings Closes: 617773 Changes: libvirt (0.8.3-5+squeeze1) stable-security; urgency=low . * [0ee351f] [CVE-2011-1146] Add missing checks for read only connections. Some API forgot to check the read-only status of the connection for entry point which modify the state of the system or may lead to a remote execution using user data. The entry points concerned are: - virConnectDomainXMLToNative - virNodeDeviceDettach - virNodeDeviceReAttach - virNodeDeviceReset - virDomainRevertToSnapshot - virDomainSnapshotDelete src/libvirt.c: fix the above set of entry points to error on read-only (Closes: #617773) Checksums-Sha1: bbb7f58ca90dc73b78b2a2ec0c48151645f2499c 1039638 libvirt-bin_0.8.3-5+squeeze1_mipsel.deb 23013e22037aa84abdd74a51c84f6f3a76bfeecf 728362 libvirt0_0.8.3-5+squeeze1_mipsel.deb d25d061bd8b15c5499a4a4d3bbff60c4b9db0179 2636736 libvirt0-dbg_0.8.3-5+squeeze1_mipsel.deb 82f865d91243a26939e2f0f431767d142b64a779 973828 libvirt-dev_0.8.3-5+squeeze1_mipsel.deb 378e61a1cede4c48c251f9e01e4e25c9207f7544 434122 python-libvirt_0.8.3-5+squeeze1_mipsel.deb Checksums-Sha256: 28691a7abbbc8b72b830d9d88aa88c1d83bb779f7adccf9f7c84f2ee11c264f4 1039638 libvirt-bin_0.8.3-5+squeeze1_mipsel.deb f741c19d389be1f4ad338fc51ac5af22ff8fc308329a6a4addf86b96b7c947cd 728362 libvirt0_0.8.3-5+squeeze1_mipsel.deb 282aab271e19c79e947ccc2553c55a5222484006caf77974bcbdee3068a607b2 2636736 libvirt0-dbg_0.8.3-5+squeeze1_mipsel.deb d69f600731f840e96df5aebd9e41e94b747c62e4d99fbf3303299acb47972be0 973828 libvirt-dev_0.8.3-5+squeeze1_mipsel.deb 79605da18bb948d2ed2a32b83944b1b790a3a38b97d675eadbd13db0d86a3741 434122 python-libvirt_0.8.3-5+squeeze1_mipsel.deb Files: 43e1aab289dac5b538c33c185454cbac 1039638 admin optional libvirt-bin_0.8.3-5+squeeze1_mipsel.deb 1b863208a8261f4788782a853d9e4bc5 728362 libs optional libvirt0_0.8.3-5+squeeze1_mipsel.deb 4a285bbafdc1c61a5a8c75fa6f6ad948 2636736 debug extra libvirt0-dbg_0.8.3-5+squeeze1_mipsel.deb 2838793568e9a3bd703fa31724592cad 973828 libdevel optional libvirt-dev_0.8.3-5+squeeze1_mipsel.deb aef18cbf7ebb6a50482971306155b411 434122 python optional python-libvirt_0.8.3-5+squeeze1_mipsel.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJNgwXIAAoJEOxfUAG2iX57jpgH/0jI2Ee1l/hJ3uCF937rqjTY lblEo4GV3nF0q2o55If9WAK/pScif39/0lLHFr26JAuofYH5/zyW24iNffAic4YD wVJWk7Di372BNk23HKaKoF1Qq5JDm0mN3w9jA+S9Oby/Tt+mKsxWD7hvTYQT/hZH Jqph+MRYyhpFaRoiCvRR+aj0r0pTg4Amsy6xtjCL1XLJOMKNxZCuTWn57pOUyL33 8s74BvcZX/Vom47CNes3qDEmHfmQIque8kCFVhSm0CWAY2zkKc5TXaN5bKN3fsgz YjdvNG2MGf7G93+mzt8AXS4JnGdd1AKsvwCAkPDOJHFVFZ0Rifg3gEGWGzXLyp8= =nR+C -----END PGP SIGNATURE-----