235826 – app-emulation/xen<=3.3.0 symlink attack

Bug 235826 - app-emulation/xen<=3.3.0 symlink attack

Summary: app-emulation/xen<=3.3.0 symlink attack

Status:	RESOLVED INVALID

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Auditing (show other bugs)
Hardware:	All All

Importance:	High normal (vote)
Assignee:	Gentoo Security

URL:	http://bugs.debian.org/496394
Whiteboard:	B3 [ebuild]
Keywords:

Depends on:
Blocks:	debian-tempfile
	Show dependency tree

Reported:	2008-08-26 18:38 UTC by Christian Hoffmann (RETIRED)
Modified:	2008-11-08 14:07 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Christian Hoffmann (RETIRED) gentoo-dev

2008-08-26 18:38:55 UTC

See $URL and bug 235770.

Comment 1 Stefan Behte (RETIRED) gentoo-dev

2008-11-08 14:07:18 UTC

It's  debian-specific bug in a script, we do not ship (/usr/sbin/qemu-make-debian-root), see http://dev.gentoo.org/~rbu/security/debiantemp/qemu.

However, additionally, we have #246068, adding it in #235770.