The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.
{
"binaries": [
{
"binary_name": "erlang-guestfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-gobject-1.0-0",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-reiserfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs-zfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "libguestfs0",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "python-guestfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.32.2-4ubuntu2.2"
}
]
}{
"binaries": [
{
"binary_name": "erlang-guestfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-gobject-1.0-0",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-reiserfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs-zfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "libguestfs0",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "python-guestfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.36.13-1ubuntu3.3"
}
]
}{
"binaries": [
{
"binary_name": "erlang-guestfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-gobject-1.0-0",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-reiserfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs-zfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "libguestfs0",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.40.2-7ubuntu5"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.40.2-7ubuntu5"
}
]
}{
"binaries": [
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "guestfish",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "guestmount",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-gobject-1.0-0",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-reiserfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs-zfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "libguestfs0",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.46.2-10ubuntu3"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.46.2-10ubuntu3"
}
]
}{
"binaries": [
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "guestfish",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "guestmount",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-gobject-1.0-0t64",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-reiserfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs-zfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "libguestfs0t64",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.52.0-5ubuntu3"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.52.0-5ubuntu3"
}
]
}{
"binaries": [
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "guestfish",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "guestmount",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-gobject-1.0-0t64",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-reiserfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs-zfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "libguestfs0t64",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.54.1-2ubuntu3"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.54.1-2ubuntu3"
}
]
}{
"binaries": [
{
"binary_name": "gir1.2-guestfs-1.0",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "golang-guestfs-dev",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "guestfish",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "guestfsd",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "guestmount",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-gfs2",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-gobject-1.0-0t64",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-hfsplus",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-java",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-jfs",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-nilfs",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-ocaml",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-perl",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-rescue",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-rsync",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-tools",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs-xfs",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "libguestfs0t64",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "lua-guestfs",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "php-guestfs",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "python3-guestfs",
"binary_version": "1:1.58.1-3ubuntu3"
},
{
"binary_name": "ruby-guestfs",
"binary_version": "1:1.58.1-3ubuntu3"
}
]
}