From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([208.118.235.92]:41584) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Uh2CS-0006Pv-H7 for qemu-devel@nongnu.org; Mon, 27 May 2013 14:31:20 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Uh2CM-0008WK-Sj for qemu-devel@nongnu.org; Mon, 27 May 2013 14:31:16 -0400 Message-ID: <51A3A6FB.9000408@redhat.com> Date: Mon, 27 May 2013 20:33:31 +0200 From: Laszlo Ersek MIME-Version: 1.0 References: <1369575248-31854-1-git-send-email-afaerber@suse.de> <51A2A4B6.2030400@redhat.com> <51A2A68B.9090703@suse.de> In-Reply-To: <51A2A68B.9090703@suse.de> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Subject: Re: [Qemu-devel] [PATCH stable-1.1] qga: set umask 0077 when daemonizing (CVE-2013-2007) List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: =?UTF-8?B?QW5kcmVhcyBGw6RyYmVy?= Cc: Anthony Liguori , qemu-devel@nongnu.org, qemu-stable@nongnu.org On 05/27/13 02:19, Andreas F=C3=A4rber wrote: > Am 27.05.2013 02:11, schrieb Laszlo Ersek: >> Also, a side-note: existing world-writable log files etc. are not >> recreated nor have their modes changed, so maybe a release note or som= e >> such would be useful for admins ("delete your previous logfile & >> optional unix domain socket, or change their modes manually"). >=20 > Feel free to add a note to the 1.5 Release Notes - it can then be copie= d > to the previous releases we backport this fix to. Done: http://wiki.qemu.org/ChangeLog/1.5#Guest_agent If too verbose or not precise enough, please go ahead and edit it. Thanks, Laszlo