libvirt Multiple Local Security Bypass Vulnerabilities

Bugtraq ID:	41981
Class:	Design Error
CVE:	CVE-2010-2237 CVE-2010-2238 CVE-2010-2239 CVE-2010-2242
Remote:	No
Local:	Yes
Published:	Jun 09 2010 12:00AM
Updated:	Apr 13 2015 09:50PM
Credit:	Red Hat, Jeremy Nickurak.
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise 11 SP1 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 S.u.S.E. openSUSE 11.3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 Redhat Enterprise Linux Virtualization 5 Server Redhat Enterprise Linux Desktop Multi OS 5 client libvirt libvirt 0.8.1 libvirt libvirt 0.7.7 libvirt libvirt 0.7.2 libvirt libvirt 0.6.1 libvirt libvirt 0.6 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.0
Not Vulnerable:	libvirt libvirt 0.8.2

libvirt Multiple Local Security Bypass Vulnerabilities

libvirt is prone to multiple local security-bypass vulnerabilities.

Attackers may exploit these issues to bypass certain security restrictions to access arbitrary files and privileged resources of the host system.

libvirt Multiple Local Security Bypass Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

libvirt Multiple Local Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu libvirt-bin_0.7.0-1ubuntu13.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-bin_0.7.0-1ubun tu13.2_sparc.deb


• Ubuntu libvirt-dev_0.7.0-1ubuntu13.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-dev_0.7.0-1ubun tu13.2_sparc.deb


• Ubuntu libvirt-doc_0.7.0-1ubuntu13.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.0-1ubuntu13.2_all.deb


• Ubuntu libvirt0-dbg_0.7.0-1ubuntu13.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0-dbg_0.7.0-1ubu ntu13.2_sparc.deb


• Ubuntu libvirt0_0.7.0-1ubuntu13.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0_0.7.0-1ubuntu1 3.2_sparc.deb


• Ubuntu python-libvirt_0.7.0-1ubuntu13.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/python-libvirt_0.7.0-1u buntu13.2_sparc.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu libvirt-doc_0.4.0-2ubuntu8.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .4.0-2ubuntu8.3_all.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu libvirt-doc_0.4.0-2ubuntu8.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .4.0-2ubuntu8.3_all.deb

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu libvirt-bin_0.7.0-1ubuntu13.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-bin_0.7.0-1ubun tu13.2_powerpc.deb


• Ubuntu libvirt-dev_0.7.0-1ubuntu13.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-dev_0.7.0-1ubun tu13.2_powerpc.deb


• Ubuntu libvirt-doc_0.7.0-1ubuntu13.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.0-1ubuntu13.2_all.deb


• Ubuntu libvirt0-dbg_0.7.0-1ubuntu13.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0-dbg_0.7.0-1ubu ntu13.2_powerpc.deb


• Ubuntu libvirt0_0.7.0-1ubuntu13.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0_0.7.0-1ubuntu1 3.2_powerpc.deb


• Ubuntu python-libvirt_0.7.0-1ubuntu13.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/python-libvirt_0.7.0-1u buntu13.2_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu libvirt-bin_0.4.0-2ubuntu8.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-bin_0 .4.0-2ubuntu8.3_amd64.deb


• Ubuntu libvirt-dev_0.4.0-2ubuntu8.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-dev_0 .4.0-2ubuntu8.3_amd64.deb


• Ubuntu libvirt-doc_0.4.0-2ubuntu8.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .4.0-2ubuntu8.3_all.deb


• Ubuntu libvirt0-dbg_0.4.0-2ubuntu8.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0-dbg_ 0.4.0-2ubuntu8.3_amd64.deb


• Ubuntu libvirt0_0.4.0-2ubuntu8.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0_0.4. 0-2ubuntu8.3_amd64.deb


• Ubuntu python-libvirt_0.4.0-2ubuntu8.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/python-libvir t_0.4.0-2ubuntu8.3_amd64.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu libvirt-bin_0.7.0-1ubuntu13.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-bin_0.7.0-1ubun tu13.2_lpia.deb


• Ubuntu libvirt-dev_0.7.0-1ubuntu13.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-dev_0.7.0-1ubun tu13.2_lpia.deb


• Ubuntu libvirt-doc_0.7.0-1ubuntu13.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.0-1ubuntu13.2_all.deb


• Ubuntu libvirt0-dbg_0.7.0-1ubuntu13.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0-dbg_0.7.0-1ubu ntu13.2_lpia.deb


• Ubuntu libvirt0_0.7.0-1ubuntu13.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0_0.7.0-1ubuntu1 3.2_lpia.deb


• Ubuntu python-libvirt_0.7.0-1ubuntu13.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/python-libvirt_0.7.0-1u buntu13.2_lpia.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu libvirt-bin_0.6.1-0ubuntu5.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-bin_0.6.1-0ubun tu5.2_sparc.deb


• Ubuntu libvirt-dev_0.6.1-0ubuntu5.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-dev_0.6.1-0ubun tu5.2_sparc.deb


• Ubuntu libvirt-doc_0.6.1-0ubuntu5.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .6.1-0ubuntu5.2_all.deb


• Ubuntu libvirt0-dbg_0.6.1-0ubuntu5.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0-dbg_0.6.1-0ubu ntu5.2_sparc.deb


• Ubuntu libvirt0_0.6.1-0ubuntu5.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0_0.6.1-0ubuntu5 .2_sparc.deb


• Ubuntu python-libvirt_0.6.1-0ubuntu5.2_sparc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/python-libvirt_0.6.1-0u buntu5.2_sparc.deb

Ubuntu Ubuntu Linux 9.04 powerpc

• Ubuntu libvirt-bin_0.6.1-0ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-bin_0.6.1-0ubun tu5.2_powerpc.deb


• Ubuntu libvirt-dev_0.6.1-0ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-dev_0.6.1-0ubun tu5.2_powerpc.deb


• Ubuntu libvirt-doc_0.6.1-0ubuntu5.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .6.1-0ubuntu5.2_all.deb


• Ubuntu libvirt0-dbg_0.6.1-0ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0-dbg_0.6.1-0ubu ntu5.2_powerpc.deb


• Ubuntu libvirt0_0.6.1-0ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0_0.6.1-0ubuntu5 .2_powerpc.deb


• Ubuntu python-libvirt_0.6.1-0ubuntu5.2_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/python-libvirt_0.6.1-0u buntu5.2_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu libvirt-doc_0.4.0-2ubuntu8.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .4.0-2ubuntu8.3_all.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu libvirt-bin_0.7.5-5ubuntu27.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-bin_0.7.5-5ubun tu27.5_powerpc.deb


• Ubuntu libvirt-bin_0.7.5-5ubuntu27.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-bin_0.7.5-5ubun tu27.6_powerpc.deb


• Ubuntu libvirt-dev_0.7.5-5ubuntu27.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-dev_0.7.5-5ubun tu27.5_powerpc.deb


• Ubuntu libvirt-dev_0.7.5-5ubuntu27.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-dev_0.7.5-5ubun tu27.6_powerpc.deb


• Ubuntu libvirt-doc_0.7.5-5ubuntu27.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.5-5ubuntu27.5_all.deb


• Ubuntu libvirt-doc_0.7.5-5ubuntu27.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.5-5ubuntu27.6_all.deb


• Ubuntu libvirt0-dbg_0.7.5-5ubuntu27.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0-dbg_0.7.5-5ubu ntu27.5_powerpc.deb


• Ubuntu libvirt0-dbg_0.7.5-5ubuntu27.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0-dbg_0.7.5-5ubu ntu27.6_powerpc.deb


• Ubuntu libvirt0_0.7.5-5ubuntu27.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0_0.7.5-5ubuntu2 7.5_powerpc.deb


• Ubuntu libvirt0_0.7.5-5ubuntu27.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0_0.7.5-5ubuntu2 7.6_powerpc.deb


• Ubuntu python-libvirt_0.7.5-5ubuntu27.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/python-libvirt_0.7.5-5u buntu27.5_powerpc.deb


• Ubuntu python-libvirt_0.7.5-5ubuntu27.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/python-libvirt_0.7.5-5u buntu27.6_powerpc.deb


• Ubuntu python-virtinst_0.500.1-2ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/v/virtinst/python-virtinst _0.500.1-2ubuntu6.1_all.deb


• Ubuntu virtinst_0.500.1-2ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/v/virtinst/virtinst_0.500. 1-2ubuntu6.1_all.deb

Ubuntu Ubuntu Linux 9.04 i386

• Ubuntu libvirt-bin_0.6.1-0ubuntu5.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-bin_0 .6.1-0ubuntu5.2_i386.deb


• Ubuntu libvirt-dev_0.6.1-0ubuntu5.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-dev_0 .6.1-0ubuntu5.2_i386.deb


• Ubuntu libvirt-doc_0.6.1-0ubuntu5.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .6.1-0ubuntu5.2_all.deb


• Ubuntu libvirt0-dbg_0.6.1-0ubuntu5.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0-dbg_ 0.6.1-0ubuntu5.2_i386.deb


• Ubuntu libvirt0_0.6.1-0ubuntu5.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0_0.6. 1-0ubuntu5.2_i386.deb


• Ubuntu python-libvirt_0.6.1-0ubuntu5.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/python-libvir t_0.6.1-0ubuntu5.2_i386.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu libvirt-bin_0.6.1-0ubuntu5.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-bin_0.6.1-0ubun tu5.2_lpia.deb


• Ubuntu libvirt-dev_0.6.1-0ubuntu5.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt-dev_0.6.1-0ubun tu5.2_lpia.deb


• Ubuntu libvirt-doc_0.6.1-0ubuntu5.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .6.1-0ubuntu5.2_all.deb


• Ubuntu libvirt0-dbg_0.6.1-0ubuntu5.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0-dbg_0.6.1-0ubu ntu5.2_lpia.deb


• Ubuntu libvirt0_0.6.1-0ubuntu5.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/libvirt0_0.6.1-0ubuntu5 .2_lpia.deb


• Ubuntu python-libvirt_0.6.1-0ubuntu5.2_lpia.deb
  http://ports.ubuntu.com/pool/main/libv/libvirt/python-libvirt_0.6.1-0u buntu5.2_lpia.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu libvirt-bin_0.7.0-1ubuntu13.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-bin_0 .7.0-1ubuntu13.2_i386.deb


• Ubuntu libvirt-dev_0.7.0-1ubuntu13.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-dev_0 .7.0-1ubuntu13.2_i386.deb


• Ubuntu libvirt-doc_0.7.0-1ubuntu13.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.0-1ubuntu13.2_all.deb


• Ubuntu libvirt0-dbg_0.7.0-1ubuntu13.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0-dbg_ 0.7.0-1ubuntu13.2_i386.deb


• Ubuntu libvirt0_0.7.0-1ubuntu13.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0_0.7. 0-1ubuntu13.2_i386.deb


• Ubuntu python-libvirt_0.7.0-1ubuntu13.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/python-libvir t_0.7.0-1ubuntu13.2_i386.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu libvirt-bin_0.7.5-5ubuntu27.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-bin_0 .7.5-5ubuntu27.5_amd64.deb


• Ubuntu libvirt-bin_0.7.5-5ubuntu27.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-bin_0 .7.5-5ubuntu27.6_amd64.deb


• Ubuntu libvirt-dev_0.7.5-5ubuntu27.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-dev_0 .7.5-5ubuntu27.5_amd64.deb


• Ubuntu libvirt-dev_0.7.5-5ubuntu27.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-dev_0 .7.5-5ubuntu27.6_amd64.deb


• Ubuntu libvirt-doc_0.7.5-5ubuntu27.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.5-5ubuntu27.5_all.deb


• Ubuntu libvirt-doc_0.7.5-5ubuntu27.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.5-5ubuntu27.6_all.deb


• Ubuntu libvirt0-dbg_0.7.5-5ubuntu27.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0-dbg_ 0.7.5-5ubuntu27.5_amd64.deb


• Ubuntu libvirt0-dbg_0.7.5-5ubuntu27.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0-dbg_ 0.7.5-5ubuntu27.6_amd64.deb


• Ubuntu libvirt0_0.7.5-5ubuntu27.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0_0.7. 5-5ubuntu27.5_amd64.deb


• Ubuntu libvirt0_0.7.5-5ubuntu27.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0_0.7. 5-5ubuntu27.6_amd64.deb


• Ubuntu python-libvirt_0.7.5-5ubuntu27.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/python-libvir t_0.7.5-5ubuntu27.5_amd64.deb


• Ubuntu python-libvirt_0.7.5-5ubuntu27.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/python-libvir t_0.7.5-5ubuntu27.6_amd64.deb


• Ubuntu python-virtinst_0.500.1-2ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/v/virtinst/python-virtinst _0.500.1-2ubuntu6.1_all.deb


• Ubuntu virtinst_0.500.1-2ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/v/virtinst/virtinst_0.500. 1-2ubuntu6.1_all.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu libvirt-bin_0.7.0-1ubuntu13.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-bin_0 .7.0-1ubuntu13.2_amd64.deb


• Ubuntu libvirt-dev_0.7.0-1ubuntu13.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-dev_0 .7.0-1ubuntu13.2_amd64.deb


• Ubuntu libvirt-doc_0.7.0-1ubuntu13.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.0-1ubuntu13.2_all.deb


• Ubuntu libvirt0-dbg_0.7.0-1ubuntu13.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0-dbg_ 0.7.0-1ubuntu13.2_amd64.deb


• Ubuntu libvirt0_0.7.0-1ubuntu13.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0_0.7. 0-1ubuntu13.2_amd64.deb


• Ubuntu python-libvirt_0.7.0-1ubuntu13.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/python-libvir t_0.7.0-1ubuntu13.2_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu libvirt-bin_0.4.0-2ubuntu8.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-bin_0 .4.0-2ubuntu8.3_i386.deb


• Ubuntu libvirt-dev_0.4.0-2ubuntu8.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-dev_0 .4.0-2ubuntu8.3_i386.deb


• Ubuntu libvirt-doc_0.4.0-2ubuntu8.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .4.0-2ubuntu8.3_all.deb


• Ubuntu libvirt0-dbg_0.4.0-2ubuntu8.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0-dbg_ 0.4.0-2ubuntu8.3_i386.deb


• Ubuntu libvirt0_0.4.0-2ubuntu8.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0_0.4. 0-2ubuntu8.3_i386.deb


• Ubuntu python-libvirt_0.4.0-2ubuntu8.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/python-libvir t_0.4.0-2ubuntu8.3_i386.deb

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu libvirt-bin_0.6.1-0ubuntu5.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-bin_0 .6.1-0ubuntu5.2_amd64.deb


• Ubuntu libvirt-dev_0.6.1-0ubuntu5.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-dev_0 .6.1-0ubuntu5.2_amd64.deb


• Ubuntu libvirt-doc_0.6.1-0ubuntu5.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .6.1-0ubuntu5.2_all.deb


• Ubuntu libvirt0-dbg_0.6.1-0ubuntu5.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0-dbg_ 0.6.1-0ubuntu5.2_amd64.deb


• Ubuntu libvirt0_0.6.1-0ubuntu5.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0_0.6. 1-0ubuntu5.2_amd64.deb


• Ubuntu python-libvirt_0.6.1-0ubuntu5.2_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/python-libvir t_0.6.1-0ubuntu5.2_amd64.deb

Ubuntu Ubuntu Linux 10.04 sparc

• Ubuntu libvirt-doc_0.7.5-5ubuntu27.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.5-5ubuntu27.5_all.deb


• Ubuntu libvirt-doc_0.7.5-5ubuntu27.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.5-5ubuntu27.6_all.deb


• Ubuntu python-virtinst_0.500.1-2ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/v/virtinst/python-virtinst _0.500.1-2ubuntu6.1_all.deb


• Ubuntu virtinst_0.500.1-2ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/v/virtinst/virtinst_0.500. 1-2ubuntu6.1_all.deb

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu libvirt-bin_0.7.5-5ubuntu27.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-bin_0 .7.5-5ubuntu27.5_i386.deb


• Ubuntu libvirt-bin_0.7.5-5ubuntu27.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-bin_0 .7.5-5ubuntu27.6_i386.deb


• Ubuntu libvirt-dev_0.7.5-5ubuntu27.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-dev_0 .7.5-5ubuntu27.5_i386.deb


• Ubuntu libvirt-dev_0.7.5-5ubuntu27.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-dev_0 .7.5-5ubuntu27.6_i386.deb


• Ubuntu libvirt-doc_0.7.5-5ubuntu27.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.5-5ubuntu27.5_all.deb


• Ubuntu libvirt-doc_0.7.5-5ubuntu27.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt-doc_0 .7.5-5ubuntu27.6_all.deb


• Ubuntu libvirt0-dbg_0.7.5-5ubuntu27.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0-dbg_ 0.7.5-5ubuntu27.5_i386.deb


• Ubuntu libvirt0-dbg_0.7.5-5ubuntu27.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0-dbg_ 0.7.5-5ubuntu27.6_i386.deb


• Ubuntu libvirt0_0.7.5-5ubuntu27.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0_0.7. 5-5ubuntu27.5_i386.deb


• Ubuntu libvirt0_0.7.5-5ubuntu27.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/libvirt0_0.7. 5-5ubuntu27.6_i386.deb


• Ubuntu python-libvirt_0.7.5-5ubuntu27.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/python-libvir t_0.7.5-5ubuntu27.5_i386.deb


• Ubuntu python-libvirt_0.7.5-5ubuntu27.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/libv/libvirt/python-libvir t_0.7.5-5ubuntu27.6_i386.deb


• Ubuntu python-virtinst_0.500.1-2ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/v/virtinst/python-virtinst _0.500.1-2ubuntu6.1_all.deb


• Ubuntu virtinst_0.500.1-2ubuntu6.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/v/virtinst/virtinst_0.500. 1-2ubuntu6.1_all.deb

libvirt Multiple Local Security Bypass Vulnerabilities

References:

• Bug 602455 - (CVE-2010-2242) CVE-2010-2242 libvirt: improperly mapped source pri (Red Hat)
  
• Bug 607810 - (CVE-2010-2237) CVE-2010-2237 libvirt: ignoring defined main disk f (Red Hat)
  
• Bug 607811 - (CVE-2010-2238) CVE-2010-2238 libvirt: ignoring defined disk backin (Red Hat)
  
• Bug 607812 - (CVE-2010-2239) CVE-2010-2239 libvirt: not setting user defined bac (Red Hat)
  
• Vendor Homepage (libvirt)
  
• virt-install --import broken when specifying a non-raw disk (Ubuntu)
  
• ASA-2010-224 libvirt security and bug fix update (RHSA-2010-0615) (Avaya)