A vulnerability in libvirt may allow root privilege escalation.
|Package||app-emulation/libvirt on all architectures|
|Affected versions||< 6.7.0|
|Unaffected versions||>= 6.7.0|
libvirt is a C toolkit for manipulating virtual machines.
A file descriptor for /dev/mapper/control was insufficiently protected.
A local attacker may be able to escalate to root privileges.
There is no known workaround at this time.
All libvirt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/libvirt-6.7.0"
January 26, 2021
January 26, 2021: 1