Red Hat Security AdvisoryRHSA-2013:0896
qemu-kvm security and bug fix update
Released 2013-06-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) qemu-guest-agent-2:0.12.1.2-2.355.el6_4.5, qemu-img-2:0.12.1.2-2.355.el6_4.5, qemu-kvm-2:0.12.1.2-2.355.el6_4.5 +1
- Red Hat Enterprise Linux Desktop Optional (v. 6) qemu-guest-agent-win32-2:0.12.1.2-2.355.el6_4.5, qemu-kvm-2:0.12.1.2-2.355.el6_4.5
- Red Hat Enterprise Linux HPC Node (v. 6) qemu-guest-agent-2:0.12.1.2-2.355.el6_4.5, qemu-img-2:0.12.1.2-2.355.el6_4.5, qemu-kvm-2:0.12.1.2-2.355.el6_4.5 +1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) qemu-guest-agent-win32-2:0.12.1.2-2.355.el6_4.5, qemu-kvm-2:0.12.1.2-2.355.el6_4.5
- Red Hat Enterprise Linux Server (v. 6) qemu-guest-agent-2:0.12.1.2-2.355.el6_4.5, qemu-img-2:0.12.1.2-2.355.el6_4.5, qemu-kvm-2:0.12.1.2-2.355.el6_4.5 +1
- Red Hat Enterprise Linux Server Optional (v. 6) qemu-guest-agent-win32-2:0.12.1.2-2.355.el6_4.5, qemu-kvm-2:0.12.1.2-2.355.el6_4.5
- Red Hat Enterprise Linux Workstation (v. 6) qemu-guest-agent-2:0.12.1.2-2.355.el6_4.5, qemu-img-2:0.12.1.2-2.355.el6_4.5, qemu-kvm-2:0.12.1.2-2.355.el6_4.5 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) qemu-guest-agent-win32-2:0.12.1.2-2.355.el6_4.5, qemu-kvm-2:0.12.1.2-2.355.el6_4.5
Fixes 1 record
Priority LOW 31
The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00375 · Published 2013-05-21 · Fixed CWE-264
