Bug 6818

Summary:	libguestfs new security issue CVE-2012-2690
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	Mageia Bug Squad <bugsquad>
Status:	RESOLVED WONTFIX	QA Contact:
Severity:	normal
Priority:	Normal	CC:	saispo
Version:	Cauldron
Target Milestone:	---
Hardware:	i586
OS:	Linux
Whiteboard:
Source RPM:	libguestfs-1.5.21-1.mga1.src.rpm	CVE:
Status comment:

Description David Walser 2012-07-18 12:35:09 CEST

RedHat has issued an advisory on June 20:
https://rhn.redhat.com/errata/RHSA-2012-0774.html

Mageia 1 and Mageia 2 are also affected.

It's fixed upstream in 1.18.0 and there's a link to a patch in RH bugzilla:
https://bugzilla.redhat.com/show_bug.cgi?id=831117

David Walser 2012-07-18 12:35:34 CEST

CC: (none) => saispo

Comment 1 David Walser 2012-08-15 00:06:42 CEST

There is also CVE-2010-3851:
http://lwn.net/Vulnerabilities/413075/

Comment 2 David Walser 2012-08-15 01:07:10 CEST

This was in SVN, but never built.  I moved it to obsolete.

Status: NEW => RESOLVED
Resolution: (none) => WONTFIX