Issued:
2013-06-10
Updated:
2013-06-10

RHSA-2013:0886 - Moderate: rhev 3.2 - vdsm security and bug fix update

Synopsis

Moderate: rhev 3.2 - vdsm security and bug fix update

Type/Severity

Security Advisory Moderate

Topic

Updated vdsm packages that fix one security issue and various bugs are now available.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Description

VDSM is a management module that serves as a Red Hat Enterprise Virtualization Manager agent on Red Hat Enterprise Virtualization Hypervisor or Red Hat Enterprise Linux hosts.

A flaw was found in the way unexpected fields in guestInfo dictionaries were processed. A privileged guest user could potentially use this flaw to make the host the guest is running on unavailable to the management server. (CVE-2013-0167)

The CVE-2013-0167 issue was discovered by Dan Kenigsberg of the Red Hat Enterprise Virtualization team.

This update also fixes various bugs. Refer to the Technical Notes for information about these changes:

This content is not included.https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.2/html/Technical_Notes/chap-RHSA-2013-0886.html

All users managing Red Hat Enterprise Linux Virtualization hosts using Red Hat Enterprise Virtualization Manager are advised to install these updated packages, which fix these issues.

These updated packages will be provided to users of Red Hat Enterprise Virtualization Hypervisor in the next rhev-hypervisor6 errata package.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

Affected Products

ProductVersionArch
Red Hat Virtualization3x86_64
Red Hat Virtualization3.2x86_64

Updated Packages

  • vdsm-python-4.10.2-22.0.el6ev.x86_64.rpm
  • vdsm-xmlrpc-4.10.2-22.0.el6ev.noarch.rpm
  • vdsm-hook-vhostmd-4.10.2-22.0.el6ev.noarch.rpm
  • vdsm-cli-4.10.2-22.0.el6ev.noarch.rpm
  • vdsm-reg-4.10.2-22.0.el6ev.noarch.rpm
  • vdsm-4.10.2-22.0.el6ev.x86_64.rpm
  • vdsm-4.10.2-22.0.el6ev.src.rpm
  • vdsm-debuginfo-4.10.2-22.0.el6ev.x86_64.rpm

Fixes

CVEs

References

Additional information