Red Hat Security Advisory: libvirt security update
Updated libvirt packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. [Updated 5th May 2011] After installing this update and restarting the libvirtd service, the "virsh attach-disk" command failed. Rebooting guest systems after installing the update resolved the issue. The erratum text has been updated to reflect that guest systems must be rebooted. Future updates will advise if a guest reboot is needed. No changes have been made to the packages.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2009-0036US | medium4.4 | Exploit | ||
Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local users to gain privileges by sending a portion of the header… | ||||
| CVE-2008-5086US | high7.2 | — | ||
Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrativ… | ||||
references
External citations — patches, advisories, analysis.
remediations (44)
- Fixedlibvirt-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.src as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.src as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.src as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.src as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-debuginfo-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-debuginfo-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-debuginfo-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-debuginfo-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-debuginfo-0:0.3.3-14.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-debuginfo-0:0.3.3-14.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-debuginfo-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-debuginfo-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-debuginfo-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-debuginfo-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-devel-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-devel-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-devel-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-devel-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-devel-0:0.3.3-14.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-devel-0:0.3.3-14.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-devel-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-devel-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-devel-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-devel-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-python-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-python-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-python-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-python-0:0.3.3-14.el5_3.1.i386 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-python-0:0.3.3-14.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-python-0:0.3.3-14.el5_3.1.ia64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-python-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-python-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-python-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382 - Fixedlibvirt-python-0:0.3.3-14.el5_3.1.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)
Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2009:0382
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan