tocsin

Debian/libvirt: unknown

libvirt 1.0.2 and earlier sets the group owner to kvm for device files, which allows local users to write to these files via unspecified vectors.

Action: Upgrade libvirt to 0.9.12-8 or later.

Affected

introducedfixedlast affected
00.9.12-8-

Fixed versions

0.9.12-8

Sources

published · modified · JSON