Red Hat Product Errata RHSA-2017:0564 - Security Advisory
Issued:
2017-03-21
Updated:
2017-03-21

RHSA-2017:0564 - Security Advisory

Synopsis

Moderate: libguestfs security and bug fix update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libguestfs is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The libguestfs packages contain a library, which is used for accessing and modifying virtual machine (VM) disk images.

Security Fix(es):

  • An integer conversion flaw was found in the way OCaml's String handled its length. Certain operations on an excessively long String could trigger a buffer overflow or result in an information leak. (CVE-2015-8869)

Note: The libguestfs packages in this advisory were rebuilt with a fixed version of OCaml to address this issue.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 6.9 Release Notes and Red Hat Enterprise Linux 6.9 Technical Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux for Scientific Computing 6 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64

Fixes

  • BZ - 1319086 - libguestfs-java: mismatch class version vs java dependency
  • BZ - 1332090 - CVE-2015-8869 ocaml: sizes arguments are sign-extended from 32 to 64 bits
  • BZ - 1388407 - virt-sysprep will fail detecting OS if "/usr" is a distinct partition mounted in "/" via fstab

Red Hat Enterprise Linux Server 6

SRPM
libguestfs-1.20.11-20.el6.src.rpm SHA-256: e6ff65528845eb028694c6e47bffe0cd44e7ccfd55bcfee66ed04045314930ed
x86_64
libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 040b1b45485bb9d600bf9982da8804bbe8fa18c3b9a1444884af273e3001a694
libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 040b1b45485bb9d600bf9982da8804bbe8fa18c3b9a1444884af273e3001a694
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: 71db24d2da594568a80f590732ae0623f17d5aa80a850b3d0e08409838ba8168
libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: 71db24d2da594568a80f590732ae0623f17d5aa80a850b3d0e08409838ba8168
libguestfs-java-1.20.11-20.el6.x86_64.rpm SHA-256: 790ffe6a26e80c822db7d7af9af1fbd60cce9aca6d88f89f27df9864eaf37fbc
libguestfs-java-1.20.11-20.el6.x86_64.rpm SHA-256: 790ffe6a26e80c822db7d7af9af1fbd60cce9aca6d88f89f27df9864eaf37fbc
libguestfs-java-devel-1.20.11-20.el6.x86_64.rpm SHA-256: a43d3814df12bdedd179c4d4b22c4716a54c502ef5d16c1a2e16a9f762277e86
libguestfs-java-devel-1.20.11-20.el6.x86_64.rpm SHA-256: a43d3814df12bdedd179c4d4b22c4716a54c502ef5d16c1a2e16a9f762277e86
libguestfs-javadoc-1.20.11-20.el6.x86_64.rpm SHA-256: 733c21d607d1cc961739f9dba2955b74c9a23c07b77c10727da454d2e99ac77e
libguestfs-javadoc-1.20.11-20.el6.x86_64.rpm SHA-256: 733c21d607d1cc961739f9dba2955b74c9a23c07b77c10727da454d2e99ac77e
libguestfs-tools-1.20.11-20.el6.x86_64.rpm SHA-256: 330713158fc611c0a3d23eada4844d443f2f385acc083fa3ed138360a265ebab
libguestfs-tools-1.20.11-20.el6.x86_64.rpm SHA-256: 330713158fc611c0a3d23eada4844d443f2f385acc083fa3ed138360a265ebab
libguestfs-tools-c-1.20.11-20.el6.x86_64.rpm SHA-256: 6a883e9c7b9866ceba4db2bbb7bb59b2ee882ae47f902982134a079deb2333cf
libguestfs-tools-c-1.20.11-20.el6.x86_64.rpm SHA-256: 6a883e9c7b9866ceba4db2bbb7bb59b2ee882ae47f902982134a079deb2333cf
ocaml-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 3151886a2c4fb8809ebe168491d9da6bba69681060362179093fc62458f35069
ocaml-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 3151886a2c4fb8809ebe168491d9da6bba69681060362179093fc62458f35069
ocaml-libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: fd078919647a66ef582fe1274a862a204b0a475c19528ef6ccea663683447476
ocaml-libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: fd078919647a66ef582fe1274a862a204b0a475c19528ef6ccea663683447476
perl-Sys-Guestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 9fbcaf27ffe242ea7ea972ea2f54d015ec3adffe5b917511e581b395bb182e86
perl-Sys-Guestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 9fbcaf27ffe242ea7ea972ea2f54d015ec3adffe5b917511e581b395bb182e86
python-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 13fe96315ad4b91946443daa905de388e1fe1540df9fcd0fbd1ac9aed7c7565c
python-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 13fe96315ad4b91946443daa905de388e1fe1540df9fcd0fbd1ac9aed7c7565c
ruby-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: f8debbc0d552be91c933c0fed2d37c2a9b2f593a4cfb24771da42555b3b4701a
ruby-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: f8debbc0d552be91c933c0fed2d37c2a9b2f593a4cfb24771da42555b3b4701a

Red Hat Enterprise Linux Server - Extended Life Cycle Support 6

SRPM
libguestfs-1.20.11-20.el6.src.rpm SHA-256: e6ff65528845eb028694c6e47bffe0cd44e7ccfd55bcfee66ed04045314930ed
x86_64
libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 040b1b45485bb9d600bf9982da8804bbe8fa18c3b9a1444884af273e3001a694
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: 71db24d2da594568a80f590732ae0623f17d5aa80a850b3d0e08409838ba8168
libguestfs-java-1.20.11-20.el6.x86_64.rpm SHA-256: 790ffe6a26e80c822db7d7af9af1fbd60cce9aca6d88f89f27df9864eaf37fbc
libguestfs-java-devel-1.20.11-20.el6.x86_64.rpm SHA-256: a43d3814df12bdedd179c4d4b22c4716a54c502ef5d16c1a2e16a9f762277e86
libguestfs-javadoc-1.20.11-20.el6.x86_64.rpm SHA-256: 733c21d607d1cc961739f9dba2955b74c9a23c07b77c10727da454d2e99ac77e
libguestfs-tools-1.20.11-20.el6.x86_64.rpm SHA-256: 330713158fc611c0a3d23eada4844d443f2f385acc083fa3ed138360a265ebab
libguestfs-tools-c-1.20.11-20.el6.x86_64.rpm SHA-256: 6a883e9c7b9866ceba4db2bbb7bb59b2ee882ae47f902982134a079deb2333cf
ocaml-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 3151886a2c4fb8809ebe168491d9da6bba69681060362179093fc62458f35069
ocaml-libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: fd078919647a66ef582fe1274a862a204b0a475c19528ef6ccea663683447476
perl-Sys-Guestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 9fbcaf27ffe242ea7ea972ea2f54d015ec3adffe5b917511e581b395bb182e86
python-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 13fe96315ad4b91946443daa905de388e1fe1540df9fcd0fbd1ac9aed7c7565c
ruby-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: f8debbc0d552be91c933c0fed2d37c2a9b2f593a4cfb24771da42555b3b4701a

Red Hat Enterprise Linux Workstation 6

SRPM
libguestfs-1.20.11-20.el6.src.rpm SHA-256: e6ff65528845eb028694c6e47bffe0cd44e7ccfd55bcfee66ed04045314930ed
x86_64
libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 040b1b45485bb9d600bf9982da8804bbe8fa18c3b9a1444884af273e3001a694
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: 71db24d2da594568a80f590732ae0623f17d5aa80a850b3d0e08409838ba8168
libguestfs-java-1.20.11-20.el6.x86_64.rpm SHA-256: 790ffe6a26e80c822db7d7af9af1fbd60cce9aca6d88f89f27df9864eaf37fbc
libguestfs-java-devel-1.20.11-20.el6.x86_64.rpm SHA-256: a43d3814df12bdedd179c4d4b22c4716a54c502ef5d16c1a2e16a9f762277e86
libguestfs-javadoc-1.20.11-20.el6.x86_64.rpm SHA-256: 733c21d607d1cc961739f9dba2955b74c9a23c07b77c10727da454d2e99ac77e
libguestfs-tools-1.20.11-20.el6.x86_64.rpm SHA-256: 330713158fc611c0a3d23eada4844d443f2f385acc083fa3ed138360a265ebab
libguestfs-tools-c-1.20.11-20.el6.x86_64.rpm SHA-256: 6a883e9c7b9866ceba4db2bbb7bb59b2ee882ae47f902982134a079deb2333cf
ocaml-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 3151886a2c4fb8809ebe168491d9da6bba69681060362179093fc62458f35069
ocaml-libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: fd078919647a66ef582fe1274a862a204b0a475c19528ef6ccea663683447476
perl-Sys-Guestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 9fbcaf27ffe242ea7ea972ea2f54d015ec3adffe5b917511e581b395bb182e86
python-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 13fe96315ad4b91946443daa905de388e1fe1540df9fcd0fbd1ac9aed7c7565c
ruby-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: f8debbc0d552be91c933c0fed2d37c2a9b2f593a4cfb24771da42555b3b4701a

Red Hat Enterprise Linux Desktop 6

SRPM
libguestfs-1.20.11-20.el6.src.rpm SHA-256: e6ff65528845eb028694c6e47bffe0cd44e7ccfd55bcfee66ed04045314930ed
x86_64
libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 040b1b45485bb9d600bf9982da8804bbe8fa18c3b9a1444884af273e3001a694
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: 71db24d2da594568a80f590732ae0623f17d5aa80a850b3d0e08409838ba8168
libguestfs-java-1.20.11-20.el6.x86_64.rpm SHA-256: 790ffe6a26e80c822db7d7af9af1fbd60cce9aca6d88f89f27df9864eaf37fbc
libguestfs-java-devel-1.20.11-20.el6.x86_64.rpm SHA-256: a43d3814df12bdedd179c4d4b22c4716a54c502ef5d16c1a2e16a9f762277e86
libguestfs-javadoc-1.20.11-20.el6.x86_64.rpm SHA-256: 733c21d607d1cc961739f9dba2955b74c9a23c07b77c10727da454d2e99ac77e
libguestfs-tools-1.20.11-20.el6.x86_64.rpm SHA-256: 330713158fc611c0a3d23eada4844d443f2f385acc083fa3ed138360a265ebab
libguestfs-tools-c-1.20.11-20.el6.x86_64.rpm SHA-256: 6a883e9c7b9866ceba4db2bbb7bb59b2ee882ae47f902982134a079deb2333cf
ocaml-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 3151886a2c4fb8809ebe168491d9da6bba69681060362179093fc62458f35069
ocaml-libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: fd078919647a66ef582fe1274a862a204b0a475c19528ef6ccea663683447476
perl-Sys-Guestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 9fbcaf27ffe242ea7ea972ea2f54d015ec3adffe5b917511e581b395bb182e86
python-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 13fe96315ad4b91946443daa905de388e1fe1540df9fcd0fbd1ac9aed7c7565c
ruby-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: f8debbc0d552be91c933c0fed2d37c2a9b2f593a4cfb24771da42555b3b4701a

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
libguestfs-1.20.11-20.el6.src.rpm SHA-256: e6ff65528845eb028694c6e47bffe0cd44e7ccfd55bcfee66ed04045314930ed
x86_64
libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 040b1b45485bb9d600bf9982da8804bbe8fa18c3b9a1444884af273e3001a694
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: 71db24d2da594568a80f590732ae0623f17d5aa80a850b3d0e08409838ba8168
libguestfs-java-1.20.11-20.el6.x86_64.rpm SHA-256: 790ffe6a26e80c822db7d7af9af1fbd60cce9aca6d88f89f27df9864eaf37fbc
libguestfs-java-devel-1.20.11-20.el6.x86_64.rpm SHA-256: a43d3814df12bdedd179c4d4b22c4716a54c502ef5d16c1a2e16a9f762277e86
libguestfs-javadoc-1.20.11-20.el6.x86_64.rpm SHA-256: 733c21d607d1cc961739f9dba2955b74c9a23c07b77c10727da454d2e99ac77e
libguestfs-tools-1.20.11-20.el6.x86_64.rpm SHA-256: 330713158fc611c0a3d23eada4844d443f2f385acc083fa3ed138360a265ebab
libguestfs-tools-c-1.20.11-20.el6.x86_64.rpm SHA-256: 6a883e9c7b9866ceba4db2bbb7bb59b2ee882ae47f902982134a079deb2333cf
ocaml-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 3151886a2c4fb8809ebe168491d9da6bba69681060362179093fc62458f35069
ocaml-libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: fd078919647a66ef582fe1274a862a204b0a475c19528ef6ccea663683447476
perl-Sys-Guestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 9fbcaf27ffe242ea7ea972ea2f54d015ec3adffe5b917511e581b395bb182e86
python-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 13fe96315ad4b91946443daa905de388e1fe1540df9fcd0fbd1ac9aed7c7565c
ruby-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: f8debbc0d552be91c933c0fed2d37c2a9b2f593a4cfb24771da42555b3b4701a

Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6

SRPM
libguestfs-1.20.11-20.el6.src.rpm SHA-256: e6ff65528845eb028694c6e47bffe0cd44e7ccfd55bcfee66ed04045314930ed
x86_64
libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 040b1b45485bb9d600bf9982da8804bbe8fa18c3b9a1444884af273e3001a694
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-debuginfo-1.20.11-20.el6.x86_64.rpm SHA-256: 82d135507d3310d0ce62939159adcdb605072545499a9b445f17ea923e665604
libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: 71db24d2da594568a80f590732ae0623f17d5aa80a850b3d0e08409838ba8168
libguestfs-java-1.20.11-20.el6.x86_64.rpm SHA-256: 790ffe6a26e80c822db7d7af9af1fbd60cce9aca6d88f89f27df9864eaf37fbc
libguestfs-java-devel-1.20.11-20.el6.x86_64.rpm SHA-256: a43d3814df12bdedd179c4d4b22c4716a54c502ef5d16c1a2e16a9f762277e86
libguestfs-javadoc-1.20.11-20.el6.x86_64.rpm SHA-256: 733c21d607d1cc961739f9dba2955b74c9a23c07b77c10727da454d2e99ac77e
libguestfs-tools-1.20.11-20.el6.x86_64.rpm SHA-256: 330713158fc611c0a3d23eada4844d443f2f385acc083fa3ed138360a265ebab
libguestfs-tools-c-1.20.11-20.el6.x86_64.rpm SHA-256: 6a883e9c7b9866ceba4db2bbb7bb59b2ee882ae47f902982134a079deb2333cf
ocaml-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 3151886a2c4fb8809ebe168491d9da6bba69681060362179093fc62458f35069
ocaml-libguestfs-devel-1.20.11-20.el6.x86_64.rpm SHA-256: fd078919647a66ef582fe1274a862a204b0a475c19528ef6ccea663683447476
perl-Sys-Guestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 9fbcaf27ffe242ea7ea972ea2f54d015ec3adffe5b917511e581b395bb182e86
python-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: 13fe96315ad4b91946443daa905de388e1fe1540df9fcd0fbd1ac9aed7c7565c
ruby-libguestfs-1.20.11-20.el6.x86_64.rpm SHA-256: f8debbc0d552be91c933c0fed2d37c2a9b2f593a4cfb24771da42555b3b4701a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.