[Pkg-libvirt-maintainers] Bug#677496: CVE-2012-2693

Moritz Muehlenhoff muehlenhoff at univention.de
Thu Jun 14 10:23:06 UTC 2012


Package: libvirt
Severity: important
Tags: security

This is already fixed in experimental, but I'm not sure if 0.9.12 is targeted
at Wheezy, so I'm filing a bug.

There's a security issue in libvirt concerning USB handling, it was fixed by
the patches listed in this Red Hat bug:

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2693

The impact seems minor to me, so I don't think we need a DSA for Squeeze.

Cheers,
        Moritz





More information about the Pkg-libvirt-maintainers mailing list