ELSA-2010-0615

ELSA-2010-0615 - libvirt security and bug fix update

Type:	SECURITY
Severity:	LOW
Release Date:	2010-08-10

Description

[0.6.3-33.0.1.el5_5.3]
- Replaced docs/et.png in tarball

[0.6.3-33.el5_5.3]
- Explicitly set qcow2 backing store format (CVE-2010-2239)
- Remap privileged source ports from guests behind NAT (CVE-2010-2242)
- Eliminate memory leak in xenUnifiedDomainInfoListFree (rhbz 619711)

[0.6.3-33.el5_5.2]
- Fix discrepancy between xm list and virsh list (rhbz 618200)
- Set a stable & high MAC addr for guest TAP devices on host (rhbz 617243)

Related CVEs

CVE-2010-2239

CVE-2010-2242

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	libvirt-0.6.3-33.0.1.el5_5.3.src.rpm	ab4fd173ce811794be10494f21c8789d	ELBA-2013-0575
	libvirt-0.6.3-33.0.1.el5_5.3.i386.rpm	2bf3b7c6ea8a9d1091e4d2a8698339a5	ELBA-2013-0575
	libvirt-devel-0.6.3-33.0.1.el5_5.3.i386.rpm	91cedd652bc1e6f3e6ddaf8808699095	ELBA-2013-0575
	libvirt-python-0.6.3-33.0.1.el5_5.3.i386.rpm	aedaf6216fe6fe31f94ca7ecbbee5d20	ELBA-2013-0575
Oracle Linux 5 (ia64)	libvirt-0.6.3-33.0.1.el5_5.3.src.rpm	ab4fd173ce811794be10494f21c8789d	ELBA-2013-0575
	libvirt-0.6.3-33.0.1.el5_5.3.ia64.rpm	5a6ffca6c8d0c46d571883e05b50cd6e	ELBA-2013-0575
	libvirt-devel-0.6.3-33.0.1.el5_5.3.ia64.rpm	559205e694dc476a37a2ea4a87e3d13c	ELBA-2013-0575
	libvirt-python-0.6.3-33.0.1.el5_5.3.ia64.rpm	a7cce3895943e74b74334c68fe981575	ELBA-2013-0575
Oracle Linux 5 (x86_64)	libvirt-0.6.3-33.0.1.el5_5.3.src.rpm	ab4fd173ce811794be10494f21c8789d	ELBA-2013-0575
	libvirt-0.6.3-33.0.1.el5_5.3.i386.rpm	2bf3b7c6ea8a9d1091e4d2a8698339a5	ELBA-2013-0575
	libvirt-0.6.3-33.0.1.el5_5.3.x86_64.rpm	50c03693632deca3576603fc3f0032eb	ELBA-2013-0575
	libvirt-devel-0.6.3-33.0.1.el5_5.3.i386.rpm	91cedd652bc1e6f3e6ddaf8808699095	ELBA-2013-0575
	libvirt-devel-0.6.3-33.0.1.el5_5.3.x86_64.rpm	4053424a44703801acc9579b6c4fa8be	ELBA-2013-0575
	libvirt-python-0.6.3-33.0.1.el5_5.3.x86_64.rpm	295fc6a0fa0d8256a3e06b1d6bf12c1c	ELBA-2013-0575

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team