tocsin

Debian/libguestfs: unknown

virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users

Action: Upgrade libguestfs to 1:1.18.0-1 or later.

Affected

introducedfixedlast affected
01:1.18.0-1-

Fixed versions

1:1.18.0-1

Sources

published · modified · JSON