similar to: [virt-tools-list] CVE-2010-3851 libguestfs: missing disk format specifier when adding a disk

1/8 generator: Rearrange argt logically (RHBZ#642934,CVE-2010-3851). 2/8 generator: Optional arguments, add-drive-opts (RHBZ#642934,CVE-2010-3851). These two previously posted. 3/8 fish: Specify format of disks (RHBZ#642934,CVE-2010-3851). Updates to guestfish to add the --format option and to make -d copy the format from libvirt. 4/8 fuse: Specify format of disks (RHBZ#642934,CVE-2010-3851).

(This bug was found by Matthew Booth during routine code review) We found a security issue which affects libguestfs programs in some circumstances. Since we don't pass the disk format through to qemu, a malicious guest backed by raw-format storage might craft a qcow2 header into its own disk. QEmu would interpret this, and qcow2 offers a wide range of features such as accessing arbitrary

The machine at et.redhat.com is going to be decommissioned soon, and so I have arranged alternate hosting for these two git repositories. As of now you should use: http://git.annexia.org/?p=febootstrap.git;a=summary (web interface) git clone git://git.annexia.org/git/febootstrap.git http://git.annexia.org/?p=libguestfs.git;a=summary (web interface) git clone

On Fri, Sep 02, 2011 at 02:06:57AM -0500, Greg Scott wrote: > "This kernel requires an X86-64 CPU, but only detected an i686 CPU. > Unable to boot - please use a kernel appropriate for your CPU." That's strange because virt-p2v-image-builder is supposed to only build 32 bit images ... Please keep the replies on the list. Rich. -- Richard Jones, Virtualization Group, Red

This patch is FYI as it needs more testing, although feel free to take a look at it if you want. Background: We'd like to change libguestfs so that the appliance can support optional features. This would mean you could have (for example) a 'libguestfs' base package and a 'libguestfs-xfs' package providing optional support for XFS filesystem tools. This would only apply to

I'm happy to announce that after 5 months of development, the new stable version of libguestfs is available. libguestfs is a set of tools and a library for accessing, creating and modifying the contents of virtual machines and disk images. Home page: http://libguestfs.org/ Binary packages for: Fedora: http://koji.fedoraproject.org/koji/packageinfo?packageID=8391

This program is now working and ready for testing. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones New in Fedora 11: Fedora Windows cross-compiler. Compile Windows programs, test, and build Windows installers. Over 70 libraries supprt'd http://fedoraproject.org/wiki/MinGW http://www.annexia.org/fedora_mingw

On Fri, Jun 22, 2012 at 12:57:40PM +0000, Davis, Richard wrote: > I see that the libguestfs packages are included in the RHEV > Hypervisor product. > > Are there any plans to further integrate the libguestfs toolset into > the RHEV product ? In particular, the ability to mount and change > raw volume content for a VM via guestfish ? Yes there are plans to do this, but no public

I would like to put libguestfs 1.14 (the next stable branch) into Fedora 16. There should be no changes required in other packages at all, since libguestfs is API and ABI compatible for all releases, forever. Nor should users know the difference (except new features). But it's software, and we don't have a formal proof, so there could be bugs ... The release notes here cover the major

On Fri, Mar 02, 2012 at 07:28:13AM -0800, THO HUYNH wrote: > I`m using Fedora 15 as the host. > And on this physical machine, I created a virtual machine with Fedora 15 minimal version installed on it. > When I tried to install the libguestfs-live-package inside the virtual machine, here is the result I got : > [root at fedora15 ~]#? yum install libguestfs-live-service > Loaded

http://libguestfs.org/download/binaries/appliance/ This could be interesting for people trying to compile libguestfs on platforms which don't yet support febootstrap. I suspect it may also be useful for Debian. I'm not suggesting that Debian uses a binary appliance, but instead of having update-guestfs-appliance build a supermin appliance, it could build a fixed appliance (in two steps,

I've deleted most of the Debian and Ubuntu binaries that were previously here, because they were old and not being updated: http://libguestfs.org/download/binaries/ For Debian, please use Hilko's packages: squeeze: http://people.debian.org/~bengen/libguestfs/ wheeze and up: [available as a regular Debian package] For Ubuntu we still don't have good packages available.

As announced two months ago[1], and since RHEL 6.3 is about to be released, I have deprecated the older branches of libguestfs (1.8, 1.10, 1.12, 1.14). These old branches are archived and will no longer receive any bug fixes or security fixes. libguestfs 1.16 and 1.18 are now the only supported stable branches, and it is recommended that everyone upgrades to them. They should be completely

Just a note (mainly to get it clear for *me*!) where we are with libguestfs branches and Fedora/RHEL versions: Fedora ? ??? Fedora 16 libguestfs 1.16 (currently 1.16.29) ? ??? Fedora 17 libguestfs 1.18 (currently 1.18.6) ? ??? Fedora 18 (just libguestfs 1.19.28, will move to ? branched) stable 1.20 branch when it is ready ? ???

The "oldlinux" branch of the libguestfs git repo contains a version of libguestfs that works with 'old' versions of Linux. 'old' in this sense means 'RHEL 5'. https://github.com/libguestfs/libguestfs/tree/oldlinux I have recently rebased the oldlinux branch on top of libguestfs git (version 1.19.37). I'll push an EPEL 5 build shortly. Rich. -- Richard

This series of patches aim to make adding disks from libvirt domains easy through the core API. These two new APIs allow you to add the disks from a libvirt domain. The higher level add-domain API takes the name of the libvirt domain as a string and connects to libvirt itself. The lower level add-libvirt-dom API relies on the program to connect to libvirt and pass the virDomainPtr into the API

-- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones New in Fedora 11: Fedora Windows cross-compiler. Compile Windows programs, test, and build Windows installers. Over 70 libraries supprt'd http://fedoraproject.org/wiki/MinGW http://www.annexia.org/fedora_mingw -------------- next part -------------- >From 01623099b24d3ec28c8123407180f9d42755386c Mon Sep 17

-- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones New in Fedora 11: Fedora Windows cross-compiler. Compile Windows programs, test, and build Windows installers. Over 70 libraries supprt'd http://fedoraproject.org/wiki/MinGW http://www.annexia.org/fedora_mingw -------------- next part -------------- >From aaf03a51a26ee501f5dbf2720bbb8a5e3b4e1e6b Mon Sep 17

-- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones New in Fedora 11: Fedora Windows cross-compiler. Compile Windows programs, test, and build Windows installers. Over 70 libraries supprt'd http://fedoraproject.org/wiki/MinGW http://www.annexia.org/fedora_mingw -------------- next part -------------- >From 28d0c96a55bc9711e786149dc92fa69542502baa Mon Sep 17

This patch series adds support for outputing an ext2-based appliance from febootstrap-supermin-helper. The usage is very simple, you just add '-f ext2' flag and the name of the appliance file that you want to write to. The implementation uses libext2fs, which is a very low level way to create ext2 filesystems from scratch. We'd like to use libguestfs, but that's an obvious