Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=homepage-ng.git;a=commitdiff;h=3788245ff492b327c5d7ab9b6421327ed3e23c2e
commit 3788245ff492b327c5d7ab9b6421327ed3e23c2e Author: Miklos Vajna <[EMAIL PROTECTED]> Date: Sun May 25 14:41:58 2008 +0200 FSA455-qemu diff --git a/frugalware/xml/security.xml b/frugalware/xml/security.xml index 35822c4..9c38172 100644 --- a/frugalware/xml/security.xml +++ b/frugalware/xml/security.xml @@ -26,6 +26,17 @@ <fsas> <fsa> + <id>455</id> + <date>2008-05-25</date> + <package>qemu</package> + <vulnerable>0.9.1-2</vulnerable> + <unaffected>0.9.1-3kalgan1</unaffected> + <bts>http://bugs.frugalware.org/task/3043</bts> + <cve>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2004</cve> + <desc>A vulnerability has been reported in QEMU, which can be exploited by malicious, local users to bypass certain security restrictions. + The vulnerability is caused due to the "drive_init()" function in vl.c determining the format of a disk from data contained in the disk's header. This can be exploited by a malicious user in a guest system to e.g. read arbitrary files on the host by writing a fake header to a raw formatted disk image.</desc> + </fsa> + <fsa> <id>454</id> <date>2008-05-25</date> <package>chicken</package> _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
