virt-v2v-0.8.3-5.0.1.AXS4

エラータID: AXSA:2012-50:01

Release date: 
Thursday, February 9, 2012 - 10:02
Subject: 
virt-v2v-0.8.3-5.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Severity: 
Low
Description: 

virt-v2v is a tool for converting virtual machines to use the KVM hypervisor. It modifies both the virtual machine image and its associated libvirt metadata.
virt-v2v will also configure a guest to use VirtIO drivers if possible.
Security issues fixed with this release:
CVE-2011-1773
No information available at the time of writing, see the CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2011-1773
virt-v2v before 0.8.4 does not preserve the VNC console password when converting a guest, which allows local users to bypass the intended VNC authentication by connecting without a password.
Additional Info: 

The erratum has been re-released to include a required package (perl-YAML-Tiny).

Download: 

SRPMS
  1. perl-YAML-Tiny-1.40-2.AXS4.src.rpm
    MD5: e0a6d5862a18fa6f980b1a22b12046a8
    SHA-256: 36448222beb27cbfac86f4fd8e9d8356c122b55a4e26660c612f22d7d0323350
    Size: 40.62 kB
  2. virt-v2v-0.8.3-5.0.1.AXS4.src.rpm
    MD5: 50ca589b6e402f247c8462b6065e99c8
    SHA-256: 7c23bb15ddba66947b767aafaf8d315a51e54981857baf3239139488b93cb6ea
    Size: 3.97 MB

Asianux Server 4 for x86_64
  1. perl-YAML-Tiny-1.40-2.AXS4.noarch.rpm
    MD5: 694f836f8ffb2adee14a1837f9b42694
    SHA-256: ddc0e9ce9d37c7cb201383701cc9c5d5061ed94947a997ea3c4d90ccc45c7c7c
    Size: 32.52 kB
  2. virt-v2v-0.8.3-5.0.1.AXS4.x86_64.rpm
    MD5: b08404574cd0f88e0cbce4f1da72fcda
    SHA-256: ee7cd3341028d3c72996a79c6932c4125a0fc1a67434fe115c75324d19149b66
    Size: 3.83 MB