Updated libvirt packages fix security vulnerbilities

Updated libvirt packages fix security vulnerabilities: An out-of-bounds read flaw was found in the way libvirt's qemuDomainGetBlockIoTune function looked up the disk index in a non-persistent live disk configuration while a persistent disk configuration was being indexed. A remote attacker able t...

CVE-2014-3657

The virDomainListPopulate function in conf/domainconf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to cause a denial of service deadlock via a NULL value in the second parameter in the virConnectListAllDomains API command...

CVE-2014-3657

CVE-2014-3657 affects libvirt; the virDomainListPopulate in conf/domain_conf.c does not clean up the lock on the domain list, allowing a remote attacker to cause a denial of service via a NULL in the second parameter of virConnectListAllDomains. The advisory text indicates this vulnerability exis...

CentOS 7 : libvirt (CESA-2014:1352)

Updated libvirt packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CentOS Update for libvirt CESA-2014:1352 centos7

Check the version of libvirt SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882050";...

RHEL 7 : libvirt (RHSA-2014:1352)

Updated libvirt packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

RedHat Update for libvirt RHSA-2014:1352-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: libvirt security and bug fix update

Updated libvirt packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

libvirt security and bug fix update

1.1.1-29.0.1.el70.3 - Replace docs/et.png in tarball with blank image 1.1.1-29.el70.3 - domainconf: fix domain deadlock CVE-2014-3657 1.1.1-29.el70.2 - qemu: split out cpuset.mems setting rhbz1135871 - qemu: leave restricting cpuset.mems after initialization rhbz1135871 - qemu: blkiotune: Use...

openSUSE Security Update : acroread (openSUSE-SU-2010:0706-1)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-2883, CVE-2010-2884, CVE-2010-2887, CVE-2010-2889, CVE-2010-2890, CVE-2010-3619, CVE-2010-3620, CVE-2010-3621, CVE-2010-3622, CVE-2010-3623, CVE-2010-3624, CVE-2010-3625, CVE-2010-3626,...

CVE-2013-3657

CVE-2013-3657 is a buffer-overflow vulnerability in VMware ESXi 4.0–5.0 and ESX 4.0/4.1 that enables remote attackers to execute arbitrary code or cause a DoS via unspecified vectors. Affected products include ESXi/ESX 4.0–4.1 and 5.0 without patches; JVN and NVD entries corroborate a remote-expl...

CVE-2012-3657

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1...

CVE-2012-3657

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1...

CVE-2012-3657

WebKit in Apple iTunes prior to version 10.7 is affected by CVE-2012-3657. The vulnerability arises from memory corruption in WebKit when rendering a crafted website, allowing a remote attacker to execute arbitrary code or cause an application crash (DoS). The issue is referenced across multiple ...

Fedora Update for bugzilla FEDORA-2012-0301

Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2012-0301 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for bugzilla FEDORA-2012-0301

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for bugzilla FEDORA-2012-0328

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : bugzilla-4.0.3-1.fc16 (2012-0301)

These new versions fix the following securtiy flaws : - CVE-2011-3657 - CVE-2011-3667 - CVE-2011-3668 - CVE-2011-3669 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

Fedora 15 : bugzilla-3.6.7-1.fc15 (2012-0328)

These new versions fix the following securtiy flaws : - CVE-2011-3657 - CVE-2011-3667 - CVE-2011-3668 - CVE-2011-3669 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

[RT-SA-2012-001] Bugzilla: Cross-Site Scripting in Chart Generator

Advisory: Bugzilla: Cross-Site Scripting in Chart Generator RedTeam Pentesting discovered a Cross-Site Scripting XSS vulnerability in Bugzilla's chart generator during a penetration test. If attackers can persuade users to click on a prepared link or redirected them to such a link from an...