Red Hat Security AdvisoryRHSA-2013:1536
libguestfs security, bug fix, and enhancement update
Released 2013-11-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libguestfs-1:1.20.11-2.el6, libguestfs-java-1:1.20.11-2.el6, libguestfs-tools-1:1.20.11-2.el6 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libguestfs-1:1.20.11-2.el6, libguestfs-devel-1:1.20.11-2.el6, libguestfs-java-devel-1:1.20.11-2.el6 +4
- Red Hat Enterprise Linux HPC Node (v. 6) libguestfs-1:1.20.11-2.el6, libguestfs-java-1:1.20.11-2.el6, libguestfs-tools-1:1.20.11-2.el6 +3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libguestfs-1:1.20.11-2.el6, libguestfs-devel-1:1.20.11-2.el6, libguestfs-java-devel-1:1.20.11-2.el6 +4
- Red Hat Enterprise Linux Server (v. 6) libguestfs-1:1.20.11-2.el6, libguestfs-java-1:1.20.11-2.el6, libguestfs-tools-1:1.20.11-2.el6 +3
- Red Hat Enterprise Linux Server Optional (v. 6) libguestfs-1:1.20.11-2.el6, libguestfs-devel-1:1.20.11-2.el6, libguestfs-java-devel-1:1.20.11-2.el6 +4
- Red Hat Enterprise Linux Workstation (v. 6) libguestfs-1:1.20.11-2.el6, libguestfs-java-1:1.20.11-2.el6, libguestfs-tools-1:1.20.11-2.el6 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) libguestfs-1:1.20.11-2.el6, libguestfs-devel-1:1.20.11-2.el6, libguestfs-java-devel-1:1.20.11-2.el6 +4
Fixes 1 record
Priority LOW 31
The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this d…
CVSS 2.0MEDIUM 6.8· Adjacent network · No auth · Interaction — · EPSS 0.00754 · Published 2013-11-05 · Fixed CWE-264
