Skip to navigation

Security Advisory Low: libguestfs security, bug fix, and enhancement update

Advisory: RHSA-2011:0586-1
Type: Security Advisory
Severity: Low
Issued on: 2011-05-19
Last updated on: 2011-05-19
Affected Products: Red Hat Enterprise Linux Desktop (v. 6)
Red Hat Enterprise Linux HPC Node (v. 6)
Red Hat Enterprise Linux Server (v. 6)
Red Hat Enterprise Linux Workstation (v. 6)
CVEs (cve.mitre.org): CVE-2010-3851

Details

Updated libguestfs packages that fix one security issue, several bugs, and
add one enhancement are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having low
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

libguestfs is a library for accessing and modifying guest disk images.

libguestfs relied on the format auto-detection in QEMU rather than
allowing the guest image file format to be specified. A privileged guest
user could potentially use this flaw to read arbitrary files on the host
that were accessible to a user on that host who was running a program that
utilized the libguestfs library. (CVE-2010-3851)

This erratum upgrades libguestfs to upstream version 1.7.17, which includes
a number of bug fixes and one enhancement. Documentation for these bug
fixes and this enhancement is provided in the Technical Notes document,
linked to in the References section.

All libguestfs users are advised to upgrade to these updated packages,
which correct this issue, and fix the bugs and add the enhancement noted
in the Technical Notes.


Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Updated packages

Red Hat Enterprise Linux Desktop (v. 6)

SRPMS:
libguestfs-1.7.17-17.el6.src.rpm
File outdated by:  RHSA-2013:1536
    MD5: 9908f599379d333b107c680a99ae21d2
SHA-256: 0eee96273e4cbac2e321dc30e2991b38236f23622e0feb60f6706ab04d0c1cd5
 
x86_64:
guestfish-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHEA-2012:0458
    MD5: a1ea9c38fecc0ab6c64cf7578095ecc5
SHA-256: 06c5e865b01fa791d7c03869234d6e93f9c99eb6320bff42cda424d1a5a4b5b6
libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: ee039dbde164446de54ffa9bc1445c93
SHA-256: f497dbb7ad85aeda390078aa8a9a9f07aa79084dd15c31a8af75e273215e50e1
libguestfs-debuginfo-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 8d577c34e4fc1428adaa29cd044d3491
SHA-256: 41b716177bb2293ef82f594543f1104752aa182bd047ad1e5f7fd62d674b3f17
libguestfs-devel-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 11b6c0d3ccaa02ba98507948d7fae5d7
SHA-256: d61b9c53cebb2c93f33dc8e62800e1cdb789e37149e00bb911b20d242d929302
libguestfs-java-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 42e3aba1097cdcd501b1194689a6ef0a
SHA-256: 705f997920c8e8262095382010e729ef6bcab8456699ad1f7b4bccbe0b8d568d
libguestfs-java-devel-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 5c0603c27d65040c5f4b7208f5ea5161
SHA-256: edb56088008a4d2ba181c3afbae2c63db2e90d3a48c7e696b7acac798f3ced0f
libguestfs-javadoc-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: b204fb2059bc32f854b5edb2e5450709
SHA-256: 43512e5a5a297173a5df12926705f7d0278ffe2be3b85afb6a502aa15b369988
libguestfs-mount-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHEA-2012:0458
    MD5: 3df35a3a3bb6fdcbb9daa3b6119f54de
SHA-256: 2a3d1cfcf68b1cd40c08042811097a2404f3eb607e39cf424f4203e6baec1d05
libguestfs-tools-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: b97a2bb169f39f5906cce010e6248884
SHA-256: e2d25e27e462b3a1a2ffadd4500151033533b2f40fdeff3858101dc35c622ae5
libguestfs-tools-c-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: b7602b355f5976b44ae1ce65e2f45ac0
SHA-256: 5bedeb97b89299bd26dcc0e72b72b3d2134aa9cc994ce0a8ec9e80cf03063c19
ocaml-libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 64a14ac3b830e95a3d15967531ba21fd
SHA-256: 57490589c0e9a73c636c120c4238815adaf5c652fa2b77af1e3b24ca478179a7
ocaml-libguestfs-devel-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 31b8a362328c80428aa72d1c914c6e19
SHA-256: dc38107aef9ca66893d3ccc21c322ef902e54c19053a2990632e792da593b929
perl-Sys-Guestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: a4c5053b5e238e781949970f3d506d3b
SHA-256: 541870d57414e33b23654cd796615fbe8caa1eed54b9b83d3df2c9f087c36945
python-libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHEA-2012:0458
    MD5: 9fb7f276feed554996580ed4839d7b29
SHA-256: 0a63a3b635bb397efb0ed35745b2707913fe8dd0ec1fc126d654a7b09bd87974
ruby-libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 049494f7b5891003645d5d33d647e724
SHA-256: 23c186e998d36e8a8c285bda38b5f3e8ba84dc904fd968e351ef19783402e1d2
 
Red Hat Enterprise Linux HPC Node (v. 6)

SRPMS:
libguestfs-1.7.17-17.el6.src.rpm
File outdated by:  RHSA-2013:1536
    MD5: 9908f599379d333b107c680a99ae21d2
SHA-256: 0eee96273e4cbac2e321dc30e2991b38236f23622e0feb60f6706ab04d0c1cd5
 
x86_64:
guestfish-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHEA-2012:0458
    MD5: a1ea9c38fecc0ab6c64cf7578095ecc5
SHA-256: 06c5e865b01fa791d7c03869234d6e93f9c99eb6320bff42cda424d1a5a4b5b6
libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: ee039dbde164446de54ffa9bc1445c93
SHA-256: f497dbb7ad85aeda390078aa8a9a9f07aa79084dd15c31a8af75e273215e50e1
libguestfs-debuginfo-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 8d577c34e4fc1428adaa29cd044d3491
SHA-256: 41b716177bb2293ef82f594543f1104752aa182bd047ad1e5f7fd62d674b3f17
libguestfs-devel-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 11b6c0d3ccaa02ba98507948d7fae5d7
SHA-256: d61b9c53cebb2c93f33dc8e62800e1cdb789e37149e00bb911b20d242d929302
libguestfs-java-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 42e3aba1097cdcd501b1194689a6ef0a
SHA-256: 705f997920c8e8262095382010e729ef6bcab8456699ad1f7b4bccbe0b8d568d
libguestfs-java-devel-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 5c0603c27d65040c5f4b7208f5ea5161
SHA-256: edb56088008a4d2ba181c3afbae2c63db2e90d3a48c7e696b7acac798f3ced0f
libguestfs-javadoc-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: b204fb2059bc32f854b5edb2e5450709
SHA-256: 43512e5a5a297173a5df12926705f7d0278ffe2be3b85afb6a502aa15b369988
libguestfs-mount-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHEA-2012:0458
    MD5: 3df35a3a3bb6fdcbb9daa3b6119f54de
SHA-256: 2a3d1cfcf68b1cd40c08042811097a2404f3eb607e39cf424f4203e6baec1d05
libguestfs-tools-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: b97a2bb169f39f5906cce010e6248884
SHA-256: e2d25e27e462b3a1a2ffadd4500151033533b2f40fdeff3858101dc35c622ae5
libguestfs-tools-c-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: b7602b355f5976b44ae1ce65e2f45ac0
SHA-256: 5bedeb97b89299bd26dcc0e72b72b3d2134aa9cc994ce0a8ec9e80cf03063c19
ocaml-libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 64a14ac3b830e95a3d15967531ba21fd
SHA-256: 57490589c0e9a73c636c120c4238815adaf5c652fa2b77af1e3b24ca478179a7
ocaml-libguestfs-devel-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 31b8a362328c80428aa72d1c914c6e19
SHA-256: dc38107aef9ca66893d3ccc21c322ef902e54c19053a2990632e792da593b929
perl-Sys-Guestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: a4c5053b5e238e781949970f3d506d3b
SHA-256: 541870d57414e33b23654cd796615fbe8caa1eed54b9b83d3df2c9f087c36945
python-libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHEA-2012:0458
    MD5: 9fb7f276feed554996580ed4839d7b29
SHA-256: 0a63a3b635bb397efb0ed35745b2707913fe8dd0ec1fc126d654a7b09bd87974
ruby-libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 049494f7b5891003645d5d33d647e724
SHA-256: 23c186e998d36e8a8c285bda38b5f3e8ba84dc904fd968e351ef19783402e1d2
 
Red Hat Enterprise Linux Server (v. 6)

SRPMS:
libguestfs-1.7.17-17.el6.src.rpm
File outdated by:  RHSA-2013:1536
    MD5: 9908f599379d333b107c680a99ae21d2
SHA-256: 0eee96273e4cbac2e321dc30e2991b38236f23622e0feb60f6706ab04d0c1cd5
 
x86_64:
guestfish-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHEA-2012:0458
    MD5: a1ea9c38fecc0ab6c64cf7578095ecc5
SHA-256: 06c5e865b01fa791d7c03869234d6e93f9c99eb6320bff42cda424d1a5a4b5b6
libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: ee039dbde164446de54ffa9bc1445c93
SHA-256: f497dbb7ad85aeda390078aa8a9a9f07aa79084dd15c31a8af75e273215e50e1
libguestfs-debuginfo-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 8d577c34e4fc1428adaa29cd044d3491
SHA-256: 41b716177bb2293ef82f594543f1104752aa182bd047ad1e5f7fd62d674b3f17
libguestfs-devel-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 11b6c0d3ccaa02ba98507948d7fae5d7
SHA-256: d61b9c53cebb2c93f33dc8e62800e1cdb789e37149e00bb911b20d242d929302
libguestfs-java-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 42e3aba1097cdcd501b1194689a6ef0a
SHA-256: 705f997920c8e8262095382010e729ef6bcab8456699ad1f7b4bccbe0b8d568d
libguestfs-java-devel-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 5c0603c27d65040c5f4b7208f5ea5161
SHA-256: edb56088008a4d2ba181c3afbae2c63db2e90d3a48c7e696b7acac798f3ced0f
libguestfs-javadoc-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: b204fb2059bc32f854b5edb2e5450709
SHA-256: 43512e5a5a297173a5df12926705f7d0278ffe2be3b85afb6a502aa15b369988
libguestfs-mount-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHEA-2012:0458
    MD5: 3df35a3a3bb6fdcbb9daa3b6119f54de
SHA-256: 2a3d1cfcf68b1cd40c08042811097a2404f3eb607e39cf424f4203e6baec1d05
libguestfs-tools-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: b97a2bb169f39f5906cce010e6248884
SHA-256: e2d25e27e462b3a1a2ffadd4500151033533b2f40fdeff3858101dc35c622ae5
libguestfs-tools-c-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: b7602b355f5976b44ae1ce65e2f45ac0
SHA-256: 5bedeb97b89299bd26dcc0e72b72b3d2134aa9cc994ce0a8ec9e80cf03063c19
ocaml-libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 64a14ac3b830e95a3d15967531ba21fd
SHA-256: 57490589c0e9a73c636c120c4238815adaf5c652fa2b77af1e3b24ca478179a7
ocaml-libguestfs-devel-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 31b8a362328c80428aa72d1c914c6e19
SHA-256: dc38107aef9ca66893d3ccc21c322ef902e54c19053a2990632e792da593b929
perl-Sys-Guestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: a4c5053b5e238e781949970f3d506d3b
SHA-256: 541870d57414e33b23654cd796615fbe8caa1eed54b9b83d3df2c9f087c36945
python-libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHEA-2012:0458
    MD5: 9fb7f276feed554996580ed4839d7b29
SHA-256: 0a63a3b635bb397efb0ed35745b2707913fe8dd0ec1fc126d654a7b09bd87974
ruby-libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 049494f7b5891003645d5d33d647e724
SHA-256: 23c186e998d36e8a8c285bda38b5f3e8ba84dc904fd968e351ef19783402e1d2
 
Red Hat Enterprise Linux Workstation (v. 6)

SRPMS:
libguestfs-1.7.17-17.el6.src.rpm
File outdated by:  RHSA-2013:1536
    MD5: 9908f599379d333b107c680a99ae21d2
SHA-256: 0eee96273e4cbac2e321dc30e2991b38236f23622e0feb60f6706ab04d0c1cd5
 
x86_64:
guestfish-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHEA-2012:0458
    MD5: a1ea9c38fecc0ab6c64cf7578095ecc5
SHA-256: 06c5e865b01fa791d7c03869234d6e93f9c99eb6320bff42cda424d1a5a4b5b6
libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: ee039dbde164446de54ffa9bc1445c93
SHA-256: f497dbb7ad85aeda390078aa8a9a9f07aa79084dd15c31a8af75e273215e50e1
libguestfs-debuginfo-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 8d577c34e4fc1428adaa29cd044d3491
SHA-256: 41b716177bb2293ef82f594543f1104752aa182bd047ad1e5f7fd62d674b3f17
libguestfs-devel-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 11b6c0d3ccaa02ba98507948d7fae5d7
SHA-256: d61b9c53cebb2c93f33dc8e62800e1cdb789e37149e00bb911b20d242d929302
libguestfs-java-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 42e3aba1097cdcd501b1194689a6ef0a
SHA-256: 705f997920c8e8262095382010e729ef6bcab8456699ad1f7b4bccbe0b8d568d
libguestfs-java-devel-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 5c0603c27d65040c5f4b7208f5ea5161
SHA-256: edb56088008a4d2ba181c3afbae2c63db2e90d3a48c7e696b7acac798f3ced0f
libguestfs-javadoc-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: b204fb2059bc32f854b5edb2e5450709
SHA-256: 43512e5a5a297173a5df12926705f7d0278ffe2be3b85afb6a502aa15b369988
libguestfs-mount-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHEA-2012:0458
    MD5: 3df35a3a3bb6fdcbb9daa3b6119f54de
SHA-256: 2a3d1cfcf68b1cd40c08042811097a2404f3eb607e39cf424f4203e6baec1d05
libguestfs-tools-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: b97a2bb169f39f5906cce010e6248884
SHA-256: e2d25e27e462b3a1a2ffadd4500151033533b2f40fdeff3858101dc35c622ae5
libguestfs-tools-c-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: b7602b355f5976b44ae1ce65e2f45ac0
SHA-256: 5bedeb97b89299bd26dcc0e72b72b3d2134aa9cc994ce0a8ec9e80cf03063c19
ocaml-libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 64a14ac3b830e95a3d15967531ba21fd
SHA-256: 57490589c0e9a73c636c120c4238815adaf5c652fa2b77af1e3b24ca478179a7
ocaml-libguestfs-devel-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 31b8a362328c80428aa72d1c914c6e19
SHA-256: dc38107aef9ca66893d3ccc21c322ef902e54c19053a2990632e792da593b929
perl-Sys-Guestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: a4c5053b5e238e781949970f3d506d3b
SHA-256: 541870d57414e33b23654cd796615fbe8caa1eed54b9b83d3df2c9f087c36945
python-libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHEA-2012:0458
    MD5: 9fb7f276feed554996580ed4839d7b29
SHA-256: 0a63a3b635bb397efb0ed35745b2707913fe8dd0ec1fc126d654a7b09bd87974
ruby-libguestfs-1.7.17-17.el6.x86_64.rpm
File outdated by:  RHSA-2013:1536
    MD5: 049494f7b5891003645d5d33d647e724
SHA-256: 23c186e998d36e8a8c285bda38b5f3e8ba84dc904fd968e351ef19783402e1d2
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

600144 - document that mkmountpoint and umount-all cannot be mixed
612308 - qemu -net / vlan option deprecated. Use -netdev instead.
613593 - Rebase libguestfs in RHEL 6.1
615223 - vfs-type could not read just-created filesystem
617440 - guestfish: fails to tilde expand '~' when the $HOME env is unset
627468 - [RFE]It's better to emphasize "libguestfs-winsupport" in V2V manpage or error output
627832 - [RFE] guestfish should print outputs in a suitable base (eg. octal for modes)
627833 - get-e2uuid should use blkid instead of "tune2fs -l" to get filesystem UUID
633174 - some guestfish sub commands can not handle special files properly
639601 - "virt-ls" command failed to parse domain name "#"
639602 - ""virt-list-filesystems" fails to parse the command line argument if the domain name is "#".
643958 - CVE-2010-3851 libguestfs: missing disk format specifier when adding a disk
657472 - checksum: wrong check sum type causes umount to fail
657502 - virt-inspector depends on EPEL package perl-String-ShellQuote but does not require it
666577 - libguestfs: unknown filesystem /dev/fd0
666579 - libguestfs: unknown filesystem /dev/hd{x} (cdrom)
668115 - virt-filesystems command fails on guest with corrupt filesystem label
668611 - guestfish -i is trying to mount all mounts from /etc/fstab and fails with an error when device doesn't exists
673477 - Add a grep-friendly string to LIBGUESTFS_TRACE output
673721 - Typo in virt-make-fs manual page
676788 - libguestfs trace segfaults when list-filesystems returns error
677616 - appliance doesn't include augeas device_map lens
691724 - virt-inspector reports unknown filesystem /dev/vda1
695138 - Remove dependency on gfs2-utils


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/