Moderate: Red Hat Security Advisory: libvirt security and bug fix update

Updated libvirt packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Fedora 19 : libvirt-1.0.5.9-1.fc19 (2014-1090)

Rebased to version 1.0.5.9 - Fix crash in virDBusAddWatch bz 885445 - Cleanup migration ports when migration is cancelled bz 1018530 - CVE-2013-6458 libvirt: qemu: job usage issue in several APIs leading to libvirtd crash bz 1054206, bz 1048631 - CVE-2013-6436 libvirt: crash in...

CVE-2014-1447

Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service libvirtd crash by closing a connection before a keepalive response is sent...

CVE-2014-1447

Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service libvirtd crash by closing a connection before a keepalive response is sent...

CVE-2014-1447

libvirt (libvirtd) vulnerabilities: a race condition in virNetServerClientStartKeepAlive before 1.2.1 can allow remote attackers to crash libvirtd by closing a connection before the keepalive response is sent. Affected component is the keepalive handling path in libvirt’s daemon; impact is denial...

CVE-2014-1447

Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service libvirtd crash by closing a connection before a keepalive response is sent...

Fedora 20 : libvirt-1.1.3.3-1.fc20 (2014-1042)

Rebased to version 1.1.3.3 - Fix crash in virDBusAddWatch bz 885445 - Cleanup migration ports when migration is cancelled bz 1018530 - Fix virt-login-shell bz 1054479 - CVE-2013-6458 libvirt: qemu: job usage issue in several APIs leading to libvirtd crash bz 1054206, bz 1048631 - CVE-2013-6436...

Mandriva Linux Security Advisory : openjpeg (MDVSA-2014:008)

Updated openjpeg package fixes security vulnerabilities : Multiple heap-based buffer overflow flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash or, possibly, execute arbitrary code with t...

Debian Security Advisory DSA 2846-1 (libvirt - several vulnerabilities)

Multiple security issues have been found in Libvirt, a virtualisation abstraction library: CVE-2013-6458 It was discovered that insecure job usage could lead to denial of service against libvirtd. CVE-2014-1447 It was discovered that a race condition in keepalive handling could lead to denial of...

Debian: Security Advisory (DSA-2846-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Information disclosure

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-1447. Reason: This candidate is a reservation duplicate of CVE-2014-1447. Only one candidate was needed for the disclosure in question. Notes: All CVE users should reference CVE-2014-1447 instead of this candidate. All...

CVE-2014-1448

CVE-2014-1447 describes a race condition in libvirt’s virNetServerClientStartKeepAlive before 1.2.1 that could allow a remote attacker to crash libvirtd (DoS). Public advisories (CVE entries, CentOS/RHSA, Mageia) indicate this issue and recommend upgrading libvirt to patched versions; linked CVE-...

Important: openjpeg

Issue Overview: Multiple heap-based buffer overflow flaws were found in OpenJPEG. An attacker could create a specially crafted OpenJPEG image that, when opened, could cause an application using openjpeg to crash or, possibly, execute arbitrary code with the privileges of the user running the...

Fedora Update for mingw-openjpeg FEDORA-2013-24079

Check for the Version of mingw-openjpeg OpenVAS Vulnerability Test Fedora Update for mingw-openjpeg FEDORA-2013-24079 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Fedora 19 : mingw-openjpeg-1.5.1-7.fc19 (2013-24079)

Fix CVE-2013-6887 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Networ...

CentOS Update for openjpeg CESA-2013:1850 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for openjpeg RHSA-2013:1850-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openjpeg security update

CentOS Errata and Security Advisory CESA-2013:1850 Updated openjpeg packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: openjpeg security update

Updated openjpeg packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

CVE-2013-1447

OpenJPEG prior to 1.5.2 had CVE-2013-1447: potential denial of service via memory consumption or crash caused by NULL pointer dereferences, division-by-zero, and related issues. Debian advisory notes this as part of a set including CVE-2013-6045 and others; remediation is to upgrade to a patched ...