[ubuntu/quantal-updates] libvirt 0.9.13-0ubuntu12.5 (Accepted)

[Ubuntu Archive Robot]

libvirt (0.9.13-0ubuntu12.5) quantal-security; urgency=low

  * SECURITY UPDATE: possible privilege escalation via pkcheck race.
    - debian/patches/CVE-2013-4311.patch: add uid to pkcheck call in
      configure.ac, daemon/remote.c, src/Makefile.am,
      src/rpc/virnetserverclient.*, src/rpc/virnetsocket.c*,
      src/util/virprocess.*, src/util/virstring.*.
    - debian/rules: use autoreconf.mk.
    - debian/control: specify version of policykit-1 security update, add
      libpolkit-gobject-1-dev, dh-autoreconf and autopoint to Build-Depends
    - CVE-2013-4311
  * SECURITY UPDATE: denial of service in remoteDispatchDomainMemoryStats
    - debian/patches/CVE-2013-4296.patch: properly initialize stats in
      daemon/remote.c.
    - CVE-2013-4296

Date: 2013-09-14 02:41:20.270514+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/quantal/+source/libvirt/0.9.13-0ubuntu12.5
-------------- next part --------------
Sorry, changesfile not available.