]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f7c70c2) | patch
CVE-2015-0236: qemu: Check ACLs when dumping security info from snapshots
authorPeter Krempa <pkrempa@redhat.com>
Tue, 20 Jan 2015 16:01:01 +0000 (17:01 +0100)
committerEric Blake <eblake@redhat.com>
Thu, 22 Jan 2015 18:09:24 +0000 (11:09 -0700)
commit1f348188e0698ef2535c81d5a779189531c5df99
treeb4dfe7d9499c937b46fd2200fae7c03fb83fd616tree | snapshot
parentf7c70c20530954c2c1a2ce0d192d01a8f71c0093commit | diff
CVE-2015-0236: qemu: Check ACLs when dumping security info from snapshots

The ACL check didn't check the VIR_DOMAIN_XML_SECURE flag and the
appropriate permission for it. Found via code inspection while fixing
permissions for save images.

(cherry picked from commit b347c0c2a321ec5c20aae214927949832a288c5a)
src/qemu/qemu_driver.c diff | blob | blame | history
src/remote/remote_protocol.x diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git