[Pkg-libvirt-commits] [SCM] Libvirt Debian packaging branch, squeeze-security, updated. debian/0.8.3-5+squeeze4

Guido Günther agx at sigxcpu.org
Sat Mar 16 13:08:32 UTC 2013


The following commit has been merged in the squeeze-security branch:
commit e6e39db0a39e1a8f629e4ce6c27f3795ce64a5a8
Author: Guido Günther <agx at sigxcpu.org>
Date:   Sat Mar 9 17:03:10 2013 +0100

    Document changes and release 0.8.3-5+squeeze4

diff --git a/debian/changelog b/debian/changelog
index a7b72a0..719b74e 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+libvirt (0.8.3-5+squeeze4) stable-security; urgency=low
+
+  * [9d7846f] CVE-2013-1766: Use libvirt-qemu as group to run qemu/kvm
+    instances.  This makes sure we don't chown files to groups possibly used
+    by other programs. (Closes: #701649)
+
+ -- Guido Günther <agx at sigxcpu.org>  Sat, 09 Mar 2013 17:03:01 +0100
+
 libvirt (0.8.3-5+squeeze3) stable-security; urgency=low
 
   * [0bbbca1] Add missing return on error path (Closes: #699224)

-- 
Libvirt Debian packaging



More information about the Pkg-libvirt-commits mailing list