commit: 6420c69559c3b40f127215bb0c3e8a8556b6fefa
Author: Matthias Maier <tamiko <AT> gentoo <DOT> org>
AuthorDate: Tue Dec 22 06:09:46 2015 +0000
Commit: Matthias Maier <tamiko <AT> gentoo <DOT> org>
CommitDate: Tue Dec 22 06:15:45 2015 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6420c695
app-emulation/libvirt: security fix for 1.2.21 (CVE-2015-5313, bug #568870)
Apply fix for CVE-2015-5313 to 1.2.21:
A path-traversal flaw was found in the way the libvirt daemon handled
file-system names for storage volumes. A libvirt user with privileges to
create storage volumes and without privileges to create and modify
domains could possibly use this flaw to escalate their privileges.
Gentoo-Bug: 568870
Package-Manager: portage-2.2.26
app-emulation/libvirt/Manifest | 1 +
.../libvirt/{libvirt-1.2.21.ebuild => libvirt-1.2.21-r1.ebuild} | 2 +-
2 files changed, 2 insertions(+), 1 deletion(-)
diff --git a/app-emulation/libvirt/Manifest b/app-emulation/libvirt/Manifest
index ea286cf..2350083 100644
--- a/app-emulation/libvirt/Manifest
+++ b/app-emulation/libvirt/Manifest
@@ -1,4 +1,5 @@
DIST libvirt-1.2.18.tar.gz 29412554 SHA256
d5a5ff18af4cced21fed986d28fa0a21b782d256920326bf0ff1c7731eeb6ade SHA512
e89d494066ebec4de4c9a53089f015635b7b5ccf4a10ab9749883cc81f6f9607b18ca91a1bd01a9cdacb3a46de86223f0432fae3954106cb92dd275e5b4138c5
WHIRLPOOL
dbbbd627ccb9be154bc680407898cd32dfdbc218a67f54560e6b0f0200cbc157a9aa05834de5d9d23e3b6da0625fd5943b4c8e38f8bb9a6ff920bc5820287bfc
DIST libvirt-1.2.19.tar.gz 29644247 SHA256
282c141f03331d640020c15f81464b27400e0ee307ef4c5190393b021caedd6e SHA512
2f3f26b90120a39861683f1b5af93ac661ab561e23514c71c2ebfb1ab88da99d25acee9a5d11bec35478e38b9105f3779bffb4d4649f16a91aeccdcaa61e4aa4
WHIRLPOOL
4262beb2248495746d32bc7b16c3eec69d9cba7d4fb3870fcd560bd4d222827cf90eb9cc3df647f3fe10467d1562e72138cbf871adc5f63d4788069e1b9740ac
DIST libvirt-1.2.20.tar.gz 29725368 SHA256
df0b5d8a150863a86b98cf809a586c91b2d49af25b74a354049ea416b0b27d30 SHA512
2c7f7995d38d15453de99cc34e63db9c39c653fc24a4fd949207e62c0241f2a5ff3ab5505909ffae77f7a91d321396372188aa29124b8271f876d93546c44d07
WHIRLPOOL
553517c8eec3f601987d9a9205668a81ffcaf9081ee0d79de847ce1d2c9bcd9115471adf2022095143d440a07f7d48059cfd88094b7dda7046a784c93c449817
+DIST libvirt-1.2.21-20151222.tar.xz 1684 SHA256
6c97f288470ec58bcbe98507563c6a191892c6f8813a7b9688c09b823934cbe5 SHA512
4fd43f0e12434b78ac3e671ad8eb0e402d384cff6278f6d0db322a068c2c8807c7c7f7e5774aa9d19e2a85e49f6d9888908b32fca5fc04980134edaccba0afe2
WHIRLPOOL
2bfbc3cbf1ca44a2bb06ddf2e8eabeb116165560b9c73d649d7b8cc9baba851f5e9246414bfc2c4740f27d0d0d42b6176eaec43b05e8c1e54de2804150c2cde1
DIST libvirt-1.2.21.tar.gz 29848954 SHA256
8d406582f5fe88d739d1d83e0ba7ac7f91f5a8da4be82162ab85631744d8925b SHA512
5c15d0ba5d75c13f735c6a60dfdbad007426f77e113f95894d520f7fc358fa4361d5cce7bb9a548a436f323b845f13b8940abbad568b8b146418430068bb970e
WHIRLPOOL
d53bbb07c85b3aa2d9b0f38ff2edd3cd0a2a5300627f3e2f0a82bc057303617cab9d6f1d8a9a771bd968b0496d38d3a39a0154f88bdca44dda359a65fdc2c650
diff --git a/app-emulation/libvirt/libvirt-1.2.21.ebuild
b/app-emulation/libvirt/libvirt-1.2.21-r1.ebuild
similarity index 99%
rename from app-emulation/libvirt/libvirt-1.2.21.ebuild
rename to app-emulation/libvirt/libvirt-1.2.21-r1.ebuild
index 1c2ba1a..aef232a 100644
--- a/app-emulation/libvirt/libvirt-1.2.21.ebuild
+++ b/app-emulation/libvirt/libvirt-1.2.21-r1.ebuild
@@ -6,7 +6,7 @@ EAPI=5
inherit eutils user autotools-utils linux-info systemd readme.gentoo
-BACKPORTS=""
+BACKPORTS="20151222"
if [[ ${PV} = *9999* ]]; then
inherit git-r3
