User: Password:
|
|
Subscribe / Log in / New account

Scientific Linux alert SL-libv-20130116 (libvirt)

From:  Pat Riehecky <riehecky@fnal.gov>
To:  "SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV" <SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV>
Subject:  Security ERRATA Low: libvirt on SL5.x i386/x86_64
Date:  Wed, 16 Jan 2013 16:10:27 -0600
Message-ID:  <50F72553.9070404@fnal.gov>
Archive-link:  Article, Thread

Synopsis: Low: libvirt security and bug fix update Issue Date: 2013-01-08 CVE Numbers: CVE-2012-2693 -- Bus and device IDs were ignored when attempting to attach multiple USB devices with identical vendor or product IDs to a guest. This could result in the wrong device being attached to a guest, giving that guest root access to the device. (CVE-2012-2693) This update also fixes the following bugs: * Previously, the libvirtd library failed to set the autostart flags for already defined QEMU domains. This bug has been fixed, and the domains can now be successfully marked as autostarted. * Prior to this update, the virFileAbsPath() function was not taking into account the slash ("/") directory separator when allocating memory for combining the cwd() function and a path. This behavior could lead to a memory corruption. With this update, a transformation to the virAsprintff() function has been introduced into virFileAbsPath(). As a result, the aforementioned behavior no longer occurs. * With this update, a man page of the virsh user interface has been enhanced with information on the "domxml-from-native" and "domxml-to-native" commands. A correct notation of the format argument has been clarified. As a result, confusion is avoided when setting the format argument in the described commands. After installing the updated packages, libvirtd will be restarted automatically. -- SL5 x86_64 libvirt-0.8.2-29.el5.i386.rpm libvirt-0.8.2-29.el5.x86_64.rpm libvirt-debuginfo-0.8.2-29.el5.i386.rpm libvirt-debuginfo-0.8.2-29.el5.x86_64.rpm libvirt-devel-0.8.2-29.el5.i386.rpm libvirt-devel-0.8.2-29.el5.x86_64.rpm libvirt-python-0.8.2-29.el5.x86_64.rpm i386 libvirt-0.8.2-29.el5.i386.rpm libvirt-debuginfo-0.8.2-29.el5.i386.rpm libvirt-devel-0.8.2-29.el5.i386.rpm libvirt-python-0.8.2-29.el5.i386.rpm - Scientific Linux Development Team


(Log in to post comments)


Copyright © 2018, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds