Bug#701649: fixed in libvirt 0.9.12-8

2013-03-06 Thread Adam D. Barratt
On 06.03.2013 13:09, Guido Günther wrote: On Wed, Mar 06, 2013 at 11:07:46AM +, Adam D. Barratt wrote: Thanks for the quick turn-around. Unfortunately the "getent user" call above doesn't appear to be fixed in -9. Another proof that there's just not enough time to work on Debian these days

Bug#701649: fixed in libvirt 0.9.12-8

2013-03-06 Thread Guido Günther
On Wed, Mar 06, 2013 at 11:07:46AM +, Adam D. Barratt wrote: > On 06.03.2013 09:13, Guido Günther wrote: > >On Tue, Mar 05, 2013 at 08:48:03PM +, Adam D. Barratt wrote: > >>On Mon, 2013-03-04 at 18:02 +, Guido Günther wrote: > >>> libvirt (0.9.12-8) unstable; urgency=low > >>> . > >>>

Bug#701649: fixed in libvirt 0.9.12-8

2013-03-06 Thread Adam D. Barratt
On 06.03.2013 09:13, Guido Günther wrote: On Tue, Mar 05, 2013 at 08:48:03PM +, Adam D. Barratt wrote: On Mon, 2013-03-04 at 18:02 +, Guido Günther wrote: > libvirt (0.9.12-8) unstable; urgency=low > . >* [181eab1] CVE-2013-1766: Use libvirt-qemu as group to run qemu/kvm > in

Bug#701649: fixed in libvirt 0.9.12-8

2013-03-06 Thread Guido Günther
On Tue, Mar 05, 2013 at 08:48:03PM +, Adam D. Barratt wrote: > On Mon, 2013-03-04 at 18:02 +, Guido Günther wrote: > > libvirt (0.9.12-8) unstable; urgency=low > > . > >* [181eab1] CVE-2013-1766: Use libvirt-qemu as group to run qemu/kvm > > instances. This makes sure we don't c

Bug#701649: fixed in libvirt 0.9.12-8

2013-03-05 Thread Adam D. Barratt
On Mon, 2013-03-04 at 18:02 +, Guido Günther wrote: > libvirt (0.9.12-8) unstable; urgency=low > . >* [181eab1] CVE-2013-1766: Use libvirt-qemu as group to run qemu/kvm > instances. This makes sure we don't chown files to groups possibly used > by other programs. (Closes: #7016