Information Disclosure

libguestfs is vulnerable to information disclosure attacks. The vulnerability exists as virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain...