(RHSA-2016:2576) Moderate: libguestfs and virt-p2v security, bug fix, and enhancement update

2016-11-0306:07:14

access.redhat.com

EPSS

0.022

Percentile

89.5%

JSON

The libguestfs packages contain a library, which is used for accessing and modifying virtual machine (VM) disk images.

Virt-p2v is a tool for conversion of a physical server to a virtual guest.

The following packages have been upgraded to a newer upstream version: libguestfs (1.32.7), virt-p2v (1.32.7). (BZ#1218766)

Security Fix(es):

An integer conversion flaw was found in the way OCaml’s String handled its length. Certain operations on an excessively long String could trigger a buffer overflow or result in an information leak. (CVE-2015-8869)

Note: The libguestfs packages in this advisory were rebuilt with a fixed version of OCaml to address this issue.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7noarchlibguestfs-man-pages-uk< 1.32.7-3.el7libguestfs-man-pages-uk-1.32.7-3.el7.noarch.rpm
RedHat7x86_64virt-dib< 1.32.7-3.el7virt-dib-1.32.7-3.el7.x86_64.rpm
RedHat7x86_64libguestfs-gobject-devel< 1.32.7-3.el7libguestfs-gobject-devel-1.32.7-3.el7.x86_64.rpm
RedHat7x86_64perl-sys-guestfs< 1.32.7-3.el7perl-Sys-Guestfs-1.32.7-3.el7.x86_64.rpm
RedHat7x86_64ocaml-libguestfs< 1.32.7-3.el7ocaml-libguestfs-1.32.7-3.el7.x86_64.rpm
RedHat7x86_64libguestfs< 1.32.7-3.el7libguestfs-1.32.7-3.el7.x86_64.rpm
RedHat7x86_64ocaml-libguestfs-devel< 1.32.7-3.el7ocaml-libguestfs-devel-1.32.7-3.el7.x86_64.rpm
RedHat7x86_64lua-guestfs< 1.32.7-3.el7lua-guestfs-1.32.7-3.el7.x86_64.rpm
RedHat7noarchlibguestfs-man-pages-ja< 1.32.7-3.el7libguestfs-man-pages-ja-1.32.7-3.el7.noarch.rpm
RedHat7x86_64libguestfs-debuginfo< 1.32.7-3.el7libguestfs-debuginfo-1.32.7-3.el7.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	noarch	libguestfs-man-pages-uk	< 1.32.7-3.el7	libguestfs-man-pages-uk-1.32.7-3.el7.noarch.rpm
RedHat	7	x86_64	virt-dib	< 1.32.7-3.el7	virt-dib-1.32.7-3.el7.x86_64.rpm
RedHat	7	x86_64	libguestfs-gobject-devel	< 1.32.7-3.el7	libguestfs-gobject-devel-1.32.7-3.el7.x86_64.rpm
RedHat	7	x86_64	perl-sys-guestfs	< 1.32.7-3.el7	perl-Sys-Guestfs-1.32.7-3.el7.x86_64.rpm
RedHat	7	x86_64	ocaml-libguestfs	< 1.32.7-3.el7	ocaml-libguestfs-1.32.7-3.el7.x86_64.rpm
RedHat	7	x86_64	libguestfs	< 1.32.7-3.el7	libguestfs-1.32.7-3.el7.x86_64.rpm
RedHat	7	x86_64	ocaml-libguestfs-devel	< 1.32.7-3.el7	ocaml-libguestfs-devel-1.32.7-3.el7.x86_64.rpm
RedHat	7	x86_64	lua-guestfs	< 1.32.7-3.el7	lua-guestfs-1.32.7-3.el7.x86_64.rpm
RedHat	7	noarch	libguestfs-man-pages-ja	< 1.32.7-3.el7	libguestfs-man-pages-ja-1.32.7-3.el7.noarch.rpm
RedHat	7	x86_64	libguestfs-debuginfo	< 1.32.7-3.el7	libguestfs-debuginfo-1.32.7-3.el7.x86_64.rpm