RHBA-2015:1444 - Bug Fix Advisory

Topic

Updated libguestfs packages that fix several bugs and add two enhancements are now available for Red Hat Enterprise Linux 6.

Description

The libguestfs packages contain a library, which is used for accessing and modifying virtual machine (VM) disk images.

This update fixes the following bugs:

• Using the "virt-sysprep" command to remove a user account from a guest with enabled SELinux did not properly trigger the SELinux relabel process, which caused the guest to be unable to boot. With this update, removing users from such guests properly triggers the relabel. In addition, the virt-sysprep(1) man page now advises to use the "--selinux-relabel" option when cleaning SELinux-enabled guests. (BZ#1153855)
• The output of the "guestfish -h" command did not include command aliases, which have now been added. (BZ#1100530)
• As a result of the fix for BZ#1056558, it was not possible to use a block device for output when using the virt-sparsify utility. This update re-enables block devices to be used as ouput in virt-sparsify. (BZ#1122557)
• Using Tab-completion in guestfish on guests with the XFS file system did not correctly append the slash ("/") symbol to directory names. This update adjusts guestfish to properly distinguish files and directories on this file system, and thus fixes the problem. (BZ#1153846)
• Using the "virt-sysprep" command to remove user accounts did not properly remove the user entries from the /etc/shadow file. With this update, the lens to parse /etc/shadow has been added to the Augeas tool and "virt-sysprep" makes use of it. As a result, removing users from guests using "virt-sysprep" removes also their entries in /etc/shadow. (BZ#1138630)
• The libguestfs utilities were not able to use disk images on XFS file systems with 4-kilobyte sector size. This update introduces the "cachemode" parameter for the add_drive API, which controls drive caching and has a default value that allows disk images stored on the described file systems to be usable. (BZ#1038977)
• The libguestfs tools could not use disk images that contained the colon (":") symbol in their path. With this update, path handling in libguestfs and in virt-sparsify has been improved, and such images can now be used as expected. (BZ#1128942)
• The scrub-file API failed when attempting to handle symbolic links. With this update, scrub-file resolves the file path before handling it further, and as a result, using scrub-file on a symbolic link now properly affects the link's target. (BZ#1091859)
• Due to an incorrect implementation of the libguestfs firstboot scripts runner, the firstboot scripts logged only the last executed script instead of all executed scripts. In addition, firstboot scripts that cause booting to stop, such as a script that reboots the guest, were unintentionally executed on every boot. These problems have now been fixed. (BZ#1159651, BZ#1160203)
• In the Java binding, or APIs that return a list of objects different from String caused an ArrayIndexOutOfBoundsException exception to be triggered. The creation of the result list has been fixed, and these APIs now return the expected result. (BZ#1074005)
• The way in which the lvm-set-filter API handles the lvm.conf file has been rewritten, so that lvm-set-filter is properly able to change the LVM device filter. (BZ#1168751)

In addition, this update adds the following enhancements:

• The output of the "virt-ls --csv --checksum" command now always includes a field for the checksum value, even if the field is empty, like in the case of directories. As a result, the command's output is more easily parseable. (BZ#1151901)
• Minor fixes and improvements have been done to the help message of the "set-append" command, an error message of the "guestfish umount" command, and to the guestfish(1) and virt-edit(1) man pages. (BZ#1164734, BZ#1151739, BZ#1153974, BZ#1100533)

Users of libguestfs are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64

Fixes

• BZ - 1038977 - libguestfs does not works together with xfs + 4k sector size
• BZ - 1074005 - java bindings inspect_list_applications2 throws java.lang.ArrayIndexOutOfBoundsException:
• BZ - 1091859 - scrub-file can't handle link file
• BZ - 1100530 - These APIs also need to add to `guestfish -h` command list
• BZ - 1100533 - Missing 'user-cancel' documentation in guestfish(1)
• BZ - 1122557 - virt-sparsify overwrites block devices if used as output files
• BZ - 1128942 - libguests tools failing on images containing a colon in the path
• BZ - 1138630 - Remove user accounts from "/etc/shadow" when execute virt-sysprep with '--enable user-account' option
• BZ - 1151739 - typo error in man page of virt-edit
• BZ - 1151901 - Should also add a field for directory files when run virt-ls with --csv option
• BZ - 1151911 - virt-ls should remove '/' in the output when specify the directory name as /etc/
• BZ - 1153846 - Redundancy whitespace at the end of directory name when use <TAB> to complete the directory name in guestfish with a xfs filesystem in guest
• BZ - 1153974 - guestfish prints '\n' in error message
• BZ - 1159651 - virt-sysprep firstboot script is not deleted if it reboot a RHEL 7 guest
• BZ - 1160203 - log of virt-sysprep contains only the output of the last script
• BZ - 1164734 - The description of 'help append' is not accurately, it add the kernel options to libguestfs appliance not the guest kernel
• BZ - 1168751 - broken lvm-set-filter API with newer lvm2

CVEs

(none)

References

(none)