Red Hat Security AdvisoryRHSA-2011:1531
qemu-kvm security, bug fix, and enhancement update
Released 2011-12-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-img-2:0.12.1.2-2.209.el6, qemu-kvm-2:0.12.1.2-2.209.el6, qemu-kvm-tools-2:0.12.1.2-2.209.el6
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-img-2:0.12.1.2-2.209.el6, qemu-kvm-2:0.12.1.2-2.209.el6, qemu-kvm-tools-2:0.12.1.2-2.209.el6
- Red Hat Enterprise Linux Server (v. 6) qemu-img-2:0.12.1.2-2.209.el6, qemu-kvm-2:0.12.1.2-2.209.el6, qemu-kvm-tools-2:0.12.1.2-2.209.el6
- Red Hat Enterprise Linux Workstation (v. 6) qemu-img-2:0.12.1.2-2.209.el6, qemu-kvm-2:0.12.1.2-2.209.el6, qemu-kvm-tools-2:0.12.1.2-2.209.el6
Fixes 1 record
Priority LOW 12
The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00439 · Published 2012-06-21 · Fixed CWE-264
