oss-sec mailing list archives

Re: CVE id request: qemu

From: "Steven M. Christey" <coley () linus mitre org>
Date: Tue, 14 Oct 2008 14:49:23 -0400 (EDT)


On Mon, 13 Oct 2008, Steffen Joeris wrote:

The qemu-make-debian-root script is prone to a symlink attack.

Debian Bugreport:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496394


Use CVE-2008-4553, to be filled in later.

- Steve

CVE id request: qemu Steffen Joeris (Oct 13)
- Re: CVE id request: qemu Steven M. Christey (Oct 14)